$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa File: 29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa (raw, json) Hash identifier: f6Qb+eWGnUZM7X0aNEeEQHZPSSIm4rUQho+pVVF+p68= Subject key identifier: 67:69:C8:0C:58:15:3A:50:C3:F0:FA:CC:A3:1B:8C:CA:6B:27:E9:62 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F43285848BD20E66EA5AB62542D0F7860 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 22241 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e6:6e:a5:ab:62:54:2d:0f:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=318cc1fe-4da0-47ea-95ad-b897824fc547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:b1:95:0d:8a:2a:d4:9b:cb:3a:33:02:fa: c6:66:25:f6:4b:b3:e3:42:ff:db:06:ed:1b:ef:77: 36:b0:11:ae:39:28:6b:55:24:12:84:05:b1:83:36: e0:b6:74:8a:94:db:be:c1:d9:51:21:d3:8a:50:24: a6:58:fb:9e:1c:7c:c1:92:b7:8e:5d:e3:ed:0b:79: 18:69:f3:83:16:0e:48:3b:57:ea:0b:97:53:0b:fd: 69:5c:ef:6f:f1:99:c3:48:86:3e:ce:19:fe:11:39: cc:5b:13:60:29:a2:48:64:d1:30:88:25:86:39:22: f7:c7:bc:7b:eb:d7:e6:5e:0a:1a:c9:8e:76:ac:af: f8:19:48:d9:3d:b0:50:7c:f3:81:13:9c:88:17:ba: 37:aa:e2:21:c3:69:92:b8:77:53:e9:1e:06:f3:05: d8:02:09:81:1b:62:79:b0:3a:7c:96:be:24:cb:3c: 72:3a:8c:46:ca:70:13:c6:08:47:63:e7:a7:f2:cc: 73:cc:ae:d7:97:c8:e4:d6:37:b6:60:81:85:3e:fa: f2:3d:d7:1e:dd:0d:2d:ea:52:f8:22:d2:f6:68:13: 7d:07:c6:82:af:ff:0e:04:b4:2b:ae:5e:7d:68:8a: 83:af:55:71:c3:1c:c0:bc:e0:d5:ab:ab:ce:d7:cd: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:C8:0C:58:15:3A:50:C3:F0:FA:CC:A3:1B:8C:CA:6B:27:E9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ff:17:89:ad:15:f2:33:6d:62:84:98:bb:f5:2b:f8:cb:e9: c0:38:83:f4:89:49:bc:c5:0f:58:e0:2a:c0:7a:f1:09:bc:77: e9:37:2f:ef:04:38:8f:e8:8c:57:68:dd:29:10:b0:bf:21:c5: e7:10:41:fd:da:31:56:22:dc:dd:bb:5c:2e:4f:26:ce:67:14: f0:3f:39:39:dc:50:86:42:c9:2f:2c:76:f0:46:a7:86:c0:c7: 66:b9:33:93:46:62:8a:ac:48:8b:43:ab:c6:52:db:04:38:4e: 7d:5e:03:ad:a5:21:f9:a6:e6:f3:a5:62:c6:56:77:78:83:48: 66:ed:f1:21:6a:a7:65:94:0f:97:d3:94:d1:7d:a0:20:c5:e9: 8e:a0:aa:00:dc:ca:e0:ff:15:51:39:3a:6d:1b:d1:93:ba:05: 2c:0d:7a:fd:28:45:9b:8a:59:bd:48:d9:a6:4b:06:b7:b7:3f: 7a:61:27:99:67:38:c4:81:0c:21:e3:79:43:fb:f4:d7:97:42: 82:3a:0c:9c:88:b7:19:f6:ca:36:6e:9d:aa:ae:fb:8f:07:98: 64:23:92:43:2c:09:e7:75:c7:88:a6:7d:b3:41:8d:33:d3:0d: 3f:e6:1a:e7:f0:1b:c0:4c:ef:3f:8d:93:a1:99:6b:97:39:8a: 1d:b1:0e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOZupatiVC0PeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MzE4Y2MxZmUtNGRhMC00N2VhLTk1YWQtYjg5NzgyNGZjNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXixlQ2KKtSbyzozAvrGZiX2S7PjQv/bBu0b 73c2sBGuOShrVSQShAWxgzbgtnSKlNu+wdlRIdOKUCSmWPueHHzBkreOXePtC3kY afODFg5IO1fqC5dTC/1pXO9v8ZnDSIY+zhn+ETnMWxNgKaJIZNEwiCWGOSL3x7x7 69fmXgoayY52rK/4GUjZPbBQfPOBE5yIF7o3quIhw2mSuHdT6R4G8wXYAgmBG2J5 sDp8lr4kyzxyOoxGynATxghHY+en8sxzzK7Xl8jk1je2YIGFPvryPdce3Q0t6lL4 ItL2aBN9B8aCr/8OBLQrrl59aIqDr1VxwxzAvODVq6vO183BOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdpyAxYFTpQw/D6zKMbjMprJ+liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjlkN2VlMmItNDc4My0z NzUxLWFiZTAtYzFlOTVhYWE5ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb/F4mtFfIzbWKEmLv1K/jL6cA4g/SJSbzFD1jgKsB68Qm8d+k3L+8E OI/ojFdo3SkQsL8hxecQQf3aMVYi3N27XC5PJs5nFPA/OTncUIZCyS8sdvBGp4bA x2a5M5NGYoqsSItDq8ZS2wQ4Tn1eA62lIfmm5vOlYsZWd3iDSGbt8SFqp2WUD5fT lNF9oCDF6Y6gqgDcyuD/FVE5Om0b0ZO6BSwNev0oRZuKWb1I2aZLBre3P3phJ5ln OMSBDCHjeUP79NeXQoI6DJyItxn2yjZunaqu+48HmGQjkkMsCed1x4imfbNBjTPT DT/mGufwG8BM7z+Nk6GZa5c5ih2xDmA= -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:05 2025 by rpki-client