$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa File: 57255afb-e05f-3ef2-8797-83efde89cf68.roa (raw, json) Hash identifier: UrKcHDvOm/kwSUmD8ncYnNGMJmb6f4lQVn7wxlrWTKA= Subject key identifier: C2:7B:D8:66:87:28:37:39:DC:48:1B:9C:CA:B7:8A:D6:E2:04:35:78 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584891DB31D90E47E903EC631E80 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 400745 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:31:d9:0e:47:e9:03:ec:63:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=2874bf14-44c5-483f-a166-aeeb93e0ae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:5b:04:14:82:63:e8:ed:b1:db:56:a5:5a: ca:43:d9:a3:fb:0a:0b:bc:b3:d3:88:6a:a1:d7:1f: e9:a5:69:ee:ab:9d:e3:b5:0e:b2:3d:93:43:c4:0c: a8:f8:73:50:b7:41:d0:cb:de:70:ba:98:a3:04:a3: c6:4d:47:f8:93:1f:35:3d:f7:ed:02:b8:2d:2d:98: f0:91:7f:46:26:96:48:7d:a4:43:55:d7:b7:39:63: 12:06:98:65:4a:da:f3:fb:ab:35:c6:8b:97:c4:3e: ed:f9:de:05:e7:12:ce:ee:0d:f7:35:66:9e:b7:e2: 6f:9a:ea:e8:34:53:c6:00:c9:8a:18:df:68:34:a0: 3e:0a:bd:35:b3:04:70:79:ca:ff:33:9f:9e:85:98: 61:47:8e:e6:82:6b:0f:d2:af:a9:46:6f:93:3a:a5: 74:26:b1:41:d2:25:e9:5e:73:3a:f4:fb:4e:8c:7b: f9:13:96:e6:fa:89:7f:57:89:20:84:59:ee:64:f8: d2:55:38:e7:d7:1f:12:85:8a:96:28:29:c4:9d:8f: 9e:54:0d:55:35:30:e4:b8:e2:01:46:fc:0a:7a:51: a3:2c:06:09:f3:dd:07:4c:7e:85:e1:ee:b2:3f:76: 33:5c:1e:c2:5b:30:64:76:10:56:fd:9a:2d:58:9d: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:D8:66:87:28:37:39:DC:48:1B:9C:CA:B7:8A:D6:E2:04:35:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:88:99:9f:cc:f1:72:11:97:e9:db:52:16:81:79:ab:96:4b: 87:4d:08:e4:21:40:f8:27:d2:63:50:1b:d3:4b:a2:ce:7e:8e: a9:ff:75:53:8e:ba:e9:c4:48:92:d1:4b:44:da:f7:f4:60:2c: ad:64:67:96:61:95:ca:e2:49:04:19:85:82:71:20:5c:51:0a: f4:8a:cf:91:34:51:1c:e4:a8:4d:5d:f9:92:d8:6f:ae:1b:b1: aa:0c:e8:ad:c1:28:ea:cc:d4:2b:94:f5:92:df:b1:a6:12:51: 55:48:17:73:70:c3:61:c4:89:c7:69:ce:fe:c3:72:09:88:2a: 0e:4e:52:12:89:1a:5d:0c:a7:85:c6:15:4f:c9:ef:7c:b5:49: 61:08:ac:cf:51:4c:95:9c:d2:51:15:38:54:51:fc:10:b3:b2: 23:75:56:4b:3b:97:2b:f5:d4:bc:41:cf:97:0a:e4:a6:3e:ec: 1f:f0:a9:4f:20:d7:7f:f8:56:c0:d0:ee:99:03:7f:83:01:25: ab:8c:d2:b7:96:22:d4:ad:5c:86:4f:70:74:4c:97:e0:35:a3: 68:a0:a8:6e:34:96:63:c1:9d:c2:1d:8e:ea:48:11:ea:6f:f4: 2d:c8:d4:b9:17:9b:d7:7c:31:73:ba:9c:44:86:ee:36:b9:88: ea:a0:0c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zHZDkfpA+xjHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk Mjg3NGJmMTQtNDRjNS00ODNmLWExNjYtYWVlYjkzZTBhZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8BbBBSCY+jtsdtWpVrKQ9mj+woLvLPTiGqh 1x/ppWnuq53jtQ6yPZNDxAyo+HNQt0HQy95wupijBKPGTUf4kx81PfftArgtLZjw kX9GJpZIfaRDVde3OWMSBphlStrz+6s1xouXxD7t+d4F5xLO7g33NWaet+Jvmuro NFPGAMmKGN9oNKA+Cr01swRwecr/M5+ehZhhR47mgmsP0q+pRm+TOqV0JrFB0iXp XnM69PtOjHv5E5bm+ol/V4kghFnuZPjSVTjn1x8ShYqWKCnEnY+eVA1VNTDkuOIB RvwKelGjLAYJ890HTH6F4e6yP3YzXB7CWzBkdhBW/ZotWJ3CeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ72GaHKDc53EgbnMq3itbiBDV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvNTcyNTVhZmItZTA1Zi0z ZWYyLTg3OTctODNlZmRlODljZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6ImZ/M8XIRl+nbUhaBeauWS4dNCOQhQPgn0mNQG9NLos5+jqn/dVOO uunESJLRS0Ta9/RgLK1kZ5ZhlcriSQQZhYJxIFxRCvSKz5E0URzkqE1d+ZLYb64b saoM6K3BKOrM1CuU9ZLfsaYSUVVIF3Nww2HEicdpzv7DcgmIKg5OUhKJGl0Mp4XG FU/J73y1SWEIrM9RTJWc0lEVOFRR/BCzsiN1Vks7lyv11LxBz5cK5KY+7B/wqU8g 13/4VsDQ7pkDf4MBJauM0reWItStXIZPcHRMl+A1o2igqG40lmPBncIdjupIEepv 9C3I1LkXm9d8MXO6nESG7ja5iOqgDDg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:36 2025 by rpki-client