$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa File: dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa (raw, json) Hash identifier: KhUd4K5roFOifMgS8KwZXKcAetBavcte/J7dkkQ9L8o= Subject key identifier: 00:9A:57:C9:4B:AB:90:DA:39:B8:F2:5E:EB:EE:12:84:B2:99:B1:77 Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae Certificate serial: 010D0C9F43285848F22BE2D3BDEEDD1E127766E0 Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 52.129.152.0/21 maxlen: 24 52.129.160.0/19 maxlen: 24 52.129.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e2:d3:bd:ee:dd:1e:12:77:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=134e3b07-6f09-4f62-b149-52dfc25ddac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:b7:5b:6a:f9:4e:4c:03:cb:ba:28:fe:b0: f1:ac:0d:14:c6:50:f9:92:b0:75:3d:ee:73:bf:32: b9:42:d5:07:17:3c:98:e2:a1:97:52:9b:19:23:fc: 39:e1:89:93:cd:54:2d:5b:80:43:f5:12:b2:51:c5: f1:5a:3b:9f:51:f3:5f:e5:09:4b:c4:78:64:be:ea: 7e:81:29:ed:0e:9c:b0:24:d5:6d:d9:00:90:52:15: d8:63:b3:25:c9:0e:a4:ea:44:18:a5:a5:a8:57:5c: 01:81:63:9f:b1:68:ec:32:d2:2b:47:cf:ea:41:5f: 4a:37:b8:96:1e:00:2a:5a:79:56:08:93:a8:df:39: 6c:82:d7:28:6a:2c:2f:dc:ab:1a:9a:c7:07:fc:bb: 60:81:07:2e:e0:47:3e:a2:69:0d:07:84:2e:25:1b: a8:3c:96:cb:7e:95:ab:ee:3f:50:e7:41:9b:e7:d7: aa:9d:05:dd:74:0b:e8:8c:c9:9b:0b:e4:f3:10:c9: 7d:08:bb:a4:2e:9d:78:8f:92:44:0c:63:86:dd:1f: 51:a4:74:7d:3d:8e:43:49:4e:a0:d0:86:eb:c5:95: 00:95:c8:db:f0:e5:c5:0d:2b:5d:27:a1:49:38:16: 4e:1c:6f:ba:63:dc:2d:7f:7d:6a:75:66:3f:7e:c1: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:57:C9:4B:AB:90:DA:39:B8:F2:5E:EB:EE:12:84:B2:99:B1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl X509v3 Authority Key Identifier: keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer sbgp-ipAddrBlock: critical IPv4: 52.129.152.0-52.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b8:a7:b0:70:50:2c:77:7a:29:b5:04:78:97:9f:25:70:ba: 60:33:a7:c1:47:95:d6:f3:33:c3:42:c0:72:89:ff:21:63:1f: 48:d2:01:3c:e0:48:02:b6:64:b8:a4:94:4d:a9:85:9e:dd:13: 6b:50:12:cb:d0:f4:8e:8d:22:76:b4:7c:16:0d:9b:05:75:6c: e7:15:c3:de:53:57:e0:8a:27:16:8e:45:27:03:5a:1d:b0:5f: 69:fb:e5:ac:36:33:a8:1a:44:ac:66:cf:7f:a3:d5:e9:6b:0f: 90:15:68:fc:4e:02:6e:5b:68:8c:b0:09:11:ff:03:a3:6b:47: f8:06:8f:90:ef:dd:11:4c:f6:01:59:a4:c5:ca:76:f0:67:b4: 3e:72:0c:e6:c8:4f:96:50:43:d9:f9:ce:ca:dc:81:78:36:30: 5c:88:0a:fc:ae:0d:0a:88:13:38:75:e0:4b:62:08:8c:bd:5a: 0f:de:74:93:dc:40:5a:1b:c0:95:bf:b3:9c:14:ab:7c:aa:7b: fd:fa:7f:2d:86:09:ef:18:08:2f:ac:17:97:bb:a9:eb:ad:a5: 47:f3:0b:a8:9d:f2:e6:ea:bc:f1:26:9f:b4:1b:16:a2:4f:37: 20:0d:5a:95:67:4b:f8:39:ab:b6:8a:b0:e8:8d:05:b7:d0:bd: 4c:e7:4c:69 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEjyK+LTve7dHhJ3ZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYyNzc1NmEtYjMyMi00OWU2LTk0MWUtZWQzMGU5YWI5 ZWFlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTM0ZTNiMDctNmYwOS00ZjYyLWIxNDktNTJkZmMyNWRkYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrW3W2r5TkwDy7oo/rDxrA0UxlD5krB1Pe5z vzK5QtUHFzyY4qGXUpsZI/w54YmTzVQtW4BD9RKyUcXxWjufUfNf5QlLxHhkvup+ gSntDpywJNVt2QCQUhXYY7MlyQ6k6kQYpaWoV1wBgWOfsWjsMtIrR8/qQV9KN7iW HgAqWnlWCJOo3zlsgtcoaiwv3KsamscH/LtggQcu4Ec+omkNB4QuJRuoPJbLfpWr 7j9Q50Gb59eqnQXddAvojMmbC+TzEMl9CLukLp14j5JEDGOG3R9RpHR9PY5DSU6g 0IbrxZUAlcjb8OXFDStdJ6FJOBZOHG+6Y9wtf31qdWY/fsEK1wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFACaV8lLq5DaObjyXuvuEoSymbF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3 NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMwZTlhYjllYWUvZGJmZjZhZDItNjg1OS0z OWFlLWE3NGEtM2E2YWZmYWE4MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYyNzc1NmEtYjMyMi00OWU2LTk0 MWUtZWQzMGU5YWI5ZWFlLzI2Mjc3NTZhLWIzMjItNDllNi05NDFlLWVkMzBlOWFi OWVhZS5jcmwwHwYDVR0jBBgwFoAUhEDJBl4qqtMfJnCblEkUz3KanGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMw ZTlhYjllYWUuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAM0gZgD AwE0gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCQuKewcFAsd3optQR4l58lcLpgM6fBR5XW8zPDQsByif8h Yx9I0gE84EgCtmS4pJRNqYWe3RNrUBLL0PSOjSJ2tHwWDZsFdWznFcPeU1fgiicW jkUnA1odsF9p++WsNjOoGkSsZs9/o9Xpaw+QFWj8TgJuW2iMsAkR/wOja0f4Bo+Q 790RTPYBWaTFynbwZ7Q+cgzmyE+WUEPZ+c7K3IF4NjBciAr8rg0KiBM4deBLYgiM vVoP3nST3EBaG8CVv7OcFKt8qnv9+n8thgnvGAgvrBeXu6nrraVH8wuonfLm6rzx Jp+0GxaiTzcgDVqVZ0v4Oau2irDojQW30L1M50xp -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:23 2025 by rpki-client