$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa File: 00f8bc34-2fd6-3328-924d-129cb50d9319.roa (raw, json) Hash identifier: SH3mWiEbN5tPMKhRVWKZDvsG3CEMaM/4MrJimRqPsEc= Subject key identifier: 01:A5:A4:EB:C1:33:2A:F4:B9:C8:2B:46:79:2F:11:E4:D7:5F:A4:A8 Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F43285848A29B4C5674CF85ED3C8F4280 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 396982 IP address blocks: 52.129.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4c:56:74:cf:85:ed:3c:8f:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=383f4cd1-84b3-4194-ab13-7468781d6a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:0f:e5:43:1e:a8:e6:72:42:dc:22:0e:4f: 95:6d:a9:c0:ba:df:b0:2b:00:32:db:55:50:88:4f: 84:5b:25:6e:de:9c:77:45:99:cd:97:9c:af:88:7f: 4d:7e:da:15:24:fc:26:04:25:63:d7:76:39:b0:cf: 1f:73:4b:34:0f:01:8e:c1:b8:2f:e9:b3:89:03:69: 01:d7:42:b5:30:99:dd:11:03:4b:52:97:d6:61:42: 60:a1:4e:58:3f:48:63:40:4c:f8:ad:2a:b3:d7:6d: 63:e9:ec:cf:a8:a0:16:1e:21:fe:48:79:63:0f:3e: 9d:e3:f7:97:a5:72:32:5c:ac:11:ea:33:0c:56:ed: bb:e0:e0:44:7f:7e:68:59:ab:3c:6b:02:40:ae:48: 9d:50:f4:bc:a8:9f:76:8c:eb:1b:53:fc:7d:c2:63: 55:0f:33:1c:c6:05:0a:be:70:b2:ea:c2:ad:5f:57: 5e:f5:5e:06:5f:6c:5a:7a:80:49:1e:74:95:49:26: e8:cf:05:d2:4d:a3:3d:42:46:89:c1:75:2d:79:6a: 64:33:ab:2b:6c:c2:90:ab:6f:56:bf:1d:0f:23:38: 65:2e:51:bc:30:6c:23:90:c0:a9:8f:dd:54:0e:ef: 47:b1:55:c9:5a:f6:0c:ce:e6:f8:22:01:c6:33:31: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:A4:EB:C1:33:2A:F4:B9:C8:2B:46:79:2F:11:E4:D7:5F:A4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:71:6f:58:e3:f2:18:b2:85:5c:4a:d5:87:68:30:1d:dc:8d: fb:d9:6d:1b:e6:61:9d:6a:55:c7:c1:b0:90:33:50:a5:c0:36: 92:e0:cc:b1:12:de:e6:d7:4a:ed:7b:db:5a:f0:b1:3a:a6:7e: bf:fc:d5:50:ad:51:68:94:65:25:2b:b9:10:ba:7b:b4:9f:e4: 32:a8:33:e7:7e:6a:9a:a7:b8:61:d0:4b:c6:5b:40:3d:76:21: 21:5a:b5:68:14:66:5b:15:6e:78:c7:94:96:a1:c1:09:1c:c4: 05:6d:03:78:76:5a:68:c5:48:55:56:f5:ec:70:34:9a:f3:b2: 4f:e1:dd:87:b2:78:0c:24:99:c9:3f:29:57:ba:eb:e2:3f:eb: 2c:59:82:f0:ed:85:84:dc:d5:c4:0b:0d:75:61:3c:4a:52:43: 9a:54:e4:e3:43:ba:b9:8f:64:8a:77:97:be:af:34:9e:1e:ea: bf:d4:1b:8a:58:83:d2:9d:0e:87:cf:af:0b:81:f3:09:d6:db: 86:60:3e:97:90:ba:b2:87:75:92:03:d6:f8:19:30:79:22:40: 13:04:7b:c8:b2:fb:17:04:bd:0a:22:14:1d:e1:8b:cd:4f:08: c2:a9:f8:70:9d:f4:53:c3:4a:0b:a9:8b:15:68:ca:62:7f:f6: 6d:66:54:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0xWdM+F7TyPQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk MzgzZjRjZDEtODRiMy00MTk0LWFiMTMtNzQ2ODc4MWQ2YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm08P5UMeqOZyQtwiDk+VbanAut+wKwAy21VQ iE+EWyVu3px3RZnNl5yviH9NftoVJPwmBCVj13Y5sM8fc0s0DwGOwbgv6bOJA2kB 10K1MJndEQNLUpfWYUJgoU5YP0hjQEz4rSqz121j6ezPqKAWHiH+SHljDz6d4/eX pXIyXKwR6jMMVu274OBEf35oWas8awJArkidUPS8qJ92jOsbU/x9wmNVDzMcxgUK vnCy6sKtX1de9V4GX2xaeoBJHnSVSSbozwXSTaM9QkaJwXUteWpkM6srbMKQq29W vx0PIzhlLlG8MGwjkMCpj91UDu9HsVXJWvYMzub4IgHGMzGpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGlpOvBMyr0ucgrRnkvEeTXX6SoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvMDBmOGJjMzQtMmZkNi0z MzI4LTkyNGQtMTI5Y2I1MGQ5MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRxb1jj8hiyhVxK1YdoMB3cjfvZbRvmYZ1qVcfBsJAzUKXANpLgzLES 3ubXSu1721rwsTqmfr/81VCtUWiUZSUruRC6e7Sf5DKoM+d+apqnuGHQS8ZbQD12 ISFatWgUZlsVbnjHlJahwQkcxAVtA3h2WmjFSFVW9exwNJrzsk/h3YeyeAwkmck/ KVe66+I/6yxZgvDthYTc1cQLDXVhPEpSQ5pU5ONDurmPZIp3l76vNJ4e6r/UG4pY g9KdDofPrwuB8wnW24ZgPpeQurKHdZID1vgZMHkiQBMEe8iy+xcEvQoiFB3hi81P CMKp+HCd9FPDSgupixVoymJ/9m1mVNw= -----END CERTIFICATE-----Generated at Fri Apr 4 21:11:21 2025 by rpki-client