$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa File: 949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json) Hash identifier: GbU3npGYBQFRlUKuQZsjr5MawcrBSxjmV1rlBBtunfc= Subject key identifier: E5:E3:FA:F3:7A:2F:D7:69:34:39:2E:32:85:1A:15:07:69:65:97:12 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A1B5FFCAC1B7ABBB45E802D00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 26967 IP address blocks: 52.144.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fc:ac:1b:7a:bb:b4:5e:80:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=fd6c7561-32f2-483c-8009-fb1648aef66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bf:94:f9:13:14:60:a0:32:07:84:ec:5f:cc: d1:22:cc:53:bd:5a:db:48:5c:57:0d:f5:ec:86:be: 86:24:c2:28:c9:b4:22:14:c3:72:57:d6:01:5d:92: 43:70:c2:d3:5b:fe:d2:82:3a:c4:b5:7b:bf:0a:df: 0a:25:4e:1f:f7:ae:57:61:5e:31:92:c7:a3:3a:ef: eb:8c:4c:e2:42:87:2f:1d:3f:13:c7:bb:c1:45:6b: a0:05:9b:ca:51:84:13:09:b4:39:0a:21:51:b1:8b: 7f:75:22:d2:35:09:60:ea:03:c8:72:46:c9:aa:14: 9f:55:18:20:25:77:df:f4:a8:a0:4e:26:13:4a:a1: ea:9b:70:96:7c:3c:36:da:24:2b:3d:fe:a9:e2:71: eb:57:8e:25:2a:bc:90:9e:ed:10:38:d9:27:d4:91: 85:4a:70:97:41:9f:33:5d:28:19:9e:44:e7:25:93: 4d:33:80:1d:09:ce:a2:d0:db:20:77:6f:d3:a3:22: 1d:5b:6d:66:4f:90:ff:6c:7f:25:18:bc:96:cb:f2: 09:04:5c:22:9d:37:b4:7c:82:e6:4c:b0:02:d6:95: 10:c1:1e:6f:23:da:cb:44:d5:e0:9b:df:d5:57:f2: 73:cd:18:3a:4b:fb:df:0f:0e:73:5d:41:a2:c1:f9: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:FA:F3:7A:2F:D7:69:34:39:2E:32:85:1A:15:07:69:65:97:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ee:a9:55:b6:b1:d0:54:38:48:6a:05:f4:c3:80:68:82:c7: e2:e0:91:a4:a8:3a:ef:d5:4d:3d:e6:fe:28:01:44:8d:58:cc: 41:56:86:0b:03:14:2f:f0:81:d0:1b:b6:15:5b:a3:ea:c9:56: b1:cc:a0:c8:7e:9d:60:56:43:38:dd:96:91:41:cb:ec:4a:b1: d4:f2:45:e9:b6:53:3b:4d:6d:0a:3d:50:38:f8:6d:42:20:3e: bd:a9:b5:f9:f4:e6:4d:c2:00:95:e6:bd:80:51:11:bb:4e:6c: ab:55:aa:02:54:85:4c:ac:7b:79:f9:fa:71:7c:9d:56:6a:e2: 8a:e2:5a:3a:9a:d9:b8:df:30:c8:5f:c9:96:a4:0c:cc:11:f1: 6f:8b:95:01:9a:8d:6f:6b:d7:e3:a4:13:d5:f1:c5:50:41:bd: b9:09:35:08:6e:7c:f7:86:50:5c:0b:51:e3:e4:5d:1b:53:63: 5f:e7:3c:f1:01:df:a4:e5:1f:ae:07:26:82:fd:8d:73:7e:4e: d8:0c:74:bb:27:37:72:80:cf:84:88:13:7d:0d:7f:d9:fc:47: 92:6c:a3:e8:0f:3a:30:a9:12:0a:ab:a4:a4:dc:b1:f6:c7:85: cc:46:db:39:ad:f1:55:02:42:b9:fd:80:4a:cd:10:f9:ad:2d: d0:5b:b7:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/ysG3q7tF6ALQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZmQ2Yzc1NjEtMzJmMi00ODNjLTgwMDktZmIxNjQ4YWVmNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7+U+RMUYKAyB4TsX8zRIsxTvVrbSFxXDfXs hr6GJMIoybQiFMNyV9YBXZJDcMLTW/7SgjrEtXu/Ct8KJU4f965XYV4xksejOu/r jEziQocvHT8Tx7vBRWugBZvKUYQTCbQ5CiFRsYt/dSLSNQlg6gPIckbJqhSfVRgg JXff9KigTiYTSqHqm3CWfDw22iQrPf6p4nHrV44lKryQnu0QONkn1JGFSnCXQZ8z XSgZnkTnJZNNM4AdCc6i0Nsgd2/ToyIdW21mT5D/bH8lGLyWy/IJBFwinTe0fILm TLAC1pUQwR5vI9rLRNXgm9/VV/JzzRg6S/vfDw5zXUGiwfkPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXj+vN6L9dpNDkuMoUaFQdpZZcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTQ5YjljNzEtYWY3Ni0z ZGNhLWJmOTItNzcxNzNmNjJhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHuqVW2sdBUOEhqBfTDgGiCx+LgkaSoOu/VTT3m/igBRI1YzEFWhgsD FC/wgdAbthVbo+rJVrHMoMh+nWBWQzjdlpFBy+xKsdTyRem2UztNbQo9UDj4bUIg Pr2ptfn05k3CAJXmvYBREbtObKtVqgJUhUyse3n5+nF8nVZq4oriWjqa2bjfMMhf yZakDMwR8W+LlQGajW9r1+OkE9XxxVBBvbkJNQhufPeGUFwLUePkXRtTY1/nPPEB 36TlH64HJoL9jXN+TtgMdLsnN3KAz4SIE30Nf9n8R5Jso+gPOjCpEgqrpKTcsfbH hcxG2zmt8VUCQrn9gErNEPmtLdBbtzk= -----END CERTIFICATE-----Generated at Sun Jun 8 18:23:20 2025 by rpki-client