$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa File: 7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa (raw, json) Hash identifier: 6aiJwc1E0o+s4Ov4bnO7nK23lY4wnkclyvGpEIsbJqE= Subject key identifier: 84:F6:66:8B:34:AB:57:4E:F4:10:27:EE:49:C7:CA:32:92:FF:C4:38 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F43285848E59BC34381DE045121B60580 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c3:43:81:de:04:51:21:b6:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=4cc566b5-b281-4752-99d5-c721b0ca4a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:08:7c:2d:4e:0b:6c:8a:5b:c2:0d:06:43: 43:e0:3d:de:bc:85:ce:0a:00:66:c3:5f:91:fb:43: 79:f8:4a:34:2c:53:39:e7:84:03:21:41:33:a5:60: ef:c7:db:44:b3:c0:e1:66:ea:c8:e2:7a:18:1b:63: 22:8a:6f:13:33:8a:3f:6c:42:a0:34:18:5c:37:42: 8f:f4:e7:6a:ba:f8:77:ba:95:44:e7:93:c5:e9:0f: 11:fb:c5:e0:66:7f:89:6d:4c:8c:d7:38:31:64:fc: 00:f1:fa:9a:76:35:a5:2d:6c:05:2b:31:c8:b3:cf: 35:81:72:33:15:de:2b:3c:80:ee:a8:9c:d6:a7:a1: ed:12:7f:c6:e8:46:22:25:f9:51:2e:7e:ec:cf:67: bd:84:9a:d8:c9:e4:f6:bd:3e:65:2a:7d:d2:37:d5: 91:68:92:ad:e9:12:3f:84:27:96:ab:da:3e:8e:27: 51:e9:c7:ab:06:7e:68:24:7a:b4:1a:f8:7b:cf:13: b1:63:40:77:ae:23:88:8f:a9:f1:2e:33:50:15:9c: 19:a5:f1:fa:4d:83:0b:9d:23:50:8b:74:ec:00:d4: a2:e6:38:4b:2a:f2:59:56:0f:15:f3:65:b8:69:7d: 39:1d:6a:8a:48:19:7f:43:fe:92:18:6c:f7:89:0b: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F6:66:8B:34:AB:57:4E:F4:10:27:EE:49:C7:CA:32:92:FF:C4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:39:a5:c4:19:89:83:6b:ae:81:e4:1f:f2:c2:e6:8b:bf: 5a:5b:f5:10:7b:70:69:b9:14:3f:93:b7:35:1c:e1:01:08:19: 71:de:15:9e:d1:52:69:2e:0c:e5:7f:ff:f0:4c:64:73:50:fb: 42:5f:25:64:e9:93:7c:7f:52:b8:19:d0:75:39:56:0f:e3:c0: 65:d8:b6:ae:9d:9e:82:0e:4b:6c:98:be:fb:77:27:09:6d:86: 83:e9:36:38:3c:18:a0:2c:fb:e5:38:f6:df:d2:29:42:66:91: b2:0c:16:d5:72:c4:ad:a4:0d:7d:1a:67:1f:aa:08:4d:ca:8c: 93:34:24:9b:f2:32:29:83:7e:fb:33:e6:70:de:9b:aa:02:09: 4f:4b:10:f2:a3:c8:0f:a6:e7:59:e8:b5:3c:27:b9:dc:64:4d: ac:1f:21:cf:4b:e5:67:4e:92:ce:03:03:d6:4d:db:01:54:83: 42:5a:60:88:03:bd:eb:55:c9:30:f9:f8:bb:12:dc:ef:28:dc: 1f:84:e5:e1:f6:03:e4:1f:08:bd:3f:6a:a9:20:f8:84:e9:28: 4f:3a:d0:8c:b4:91:25:f9:29:1d:e9:14:70:95:04:92:81:31: 3a:3c:0a:d8:7e:11:32:6c:c0:40:12:2b:30:01:ac:25:56:85: 56:92:91:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8NDgd4EUSG2BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NGNjNTY2YjUtYjI4MS00NzUyLTk5ZDUtYzcyMWIwY2E0YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYsIfC1OC2yKW8INBkND4D3evIXOCgBmw1+R +0N5+Eo0LFM554QDIUEzpWDvx9tEs8DhZurI4noYG2Miim8TM4o/bEKgNBhcN0KP 9Odquvh3upVE55PF6Q8R+8XgZn+JbUyM1zgxZPwA8fqadjWlLWwFKzHIs881gXIz Fd4rPIDuqJzWp6HtEn/G6EYiJflRLn7sz2e9hJrYyeT2vT5lKn3SN9WRaJKt6RI/ hCeWq9o+jidR6cerBn5oJHq0Gvh7zxOxY0B3riOIj6nxLjNQFZwZpfH6TYMLnSNQ i3TsANSi5jhLKvJZVg8V82W4aX05HWqKSBl/Q/6SGGz3iQs6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT2Zos0q1dO9BAn7knHyjKS/8Q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvN2JmNDUwYjItZWQwZS0z MzRiLThmNWEtZjBjMDUyMDZlNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJOaXEGYmDa66B5B/ywuaLv1pb9RB7cGm5FD+TtzUc4QEIGXHeFZ7R UmkuDOV///BMZHNQ+0JfJWTpk3x/UrgZ0HU5Vg/jwGXYtq6dnoIOS2yYvvt3Jwlt hoPpNjg8GKAs++U49t/SKUJmkbIMFtVyxK2kDX0aZx+qCE3KjJM0JJvyMimDfvsz 5nDem6oCCU9LEPKjyA+m51notTwnudxkTawfIc9L5WdOks4DA9ZN2wFUg0JaYIgD vetVyTD5+LsS3O8o3B+E5eH2A+QfCL0/aqkg+ITpKE860Iy0kSX5KR3pFHCVBJKB MTo8Cth+ETJswEASKzABrCVWhVaSkUY= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:10 2025 by rpki-client