$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json) Hash identifier: +AW3zOq7mnGhA1NKv4OieIGMbXzp/+1JtiYeo4T23tk= Subject key identifier: 01:7C:7A:35:4C:15:61:B1:DA:6C:A1:7F:45:1F:E8:39:3F:E7:94:6F Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Certificate serial: 010D0C9F4328584902EC1534A2B84DB146D484C0 Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 394875 IP address blocks: 52.144.25.0/24 maxlen: 24 2620:f9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:15:34:a2:b8:4d:b1:46:d4:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ff450ca6-1548-4513-b6c9-6ccf9dd34323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ac:ff:6c:b4:c0:10:e7:72:56:aa:2a:29:eb: 2d:57:15:88:6a:62:e5:48:5c:05:00:96:ce:6f:a4: cc:c5:10:dd:e2:14:b6:3d:ff:02:e1:f9:80:4e:f3: e4:bb:3a:f3:a5:81:4d:95:2d:a5:78:35:a4:7b:9c: 60:a1:ab:e4:65:7c:01:f8:ba:e3:b2:52:ac:9e:1d: bf:ee:62:52:93:d4:2e:c5:35:58:5d:70:2c:a3:7f: c6:6e:c6:61:c7:81:82:a4:c9:fd:b5:1c:0a:e3:2c: 4d:82:77:69:a6:22:f8:7d:ef:a5:58:00:c7:b1:b9: f5:65:f8:a5:4a:ed:b1:1b:aa:8e:99:e9:3e:1d:33: 68:2c:b1:e0:a7:16:9d:4f:c7:dd:6e:99:13:86:fe: 26:29:34:69:05:cc:48:ac:98:9b:05:ba:09:72:7e: d2:98:81:98:81:a0:1c:6c:cb:57:fc:c4:d0:1f:c5: 88:46:0e:af:77:a4:61:f9:e3:cd:c6:9e:89:33:29: b7:19:de:4c:de:01:84:61:50:4d:15:16:1e:0f:2d: e2:e2:83:d2:6a:51:b2:d0:a1:3f:e0:d6:71:68:a1: a2:ec:d9:57:2f:e2:15:99:10:4a:83:77:40:11:be: a0:20:ae:90:53:fe:86:da:b2:a5:21:b6:66:86:0c: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:7A:35:4C:15:61:B1:DA:6C:A1:7F:45:1F:E8:39:3F:E7:94:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl X509v3 Authority Key Identifier: keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer sbgp-ipAddrBlock: critical IPv4: 52.144.25.0/24 IPv6: 2620:f9:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ac:57:8c:dc:cc:a0:b7:14:24:fc:a7:c8:78:85:15:23:2c: e9:de:43:3c:9d:21:e8:ba:19:db:6b:04:a4:dc:4b:44:20:19: b8:9b:fa:9b:fe:54:97:1f:b2:f8:80:f3:9f:f2:a5:02:7a:66: f4:ab:2c:62:70:b6:3d:88:a5:3e:7d:31:ad:95:f1:da:cd:67: 33:e0:00:e3:69:11:53:0a:67:2b:96:5e:3b:fb:4d:0f:4d:e3: 85:cf:1e:05:b2:10:f7:b8:b2:29:93:fe:14:c3:94:c9:58:07: d1:56:ff:cf:c6:47:dd:f4:5a:58:75:f8:70:51:9c:40:c2:c3: 7b:c3:55:31:17:ea:8d:1e:ae:3f:86:bf:6d:62:78:a3:7c:03: f5:aa:98:2c:19:ff:f8:98:be:23:05:10:a4:c2:c3:9c:a1:1e: af:db:c9:bf:ad:78:1e:3b:06:3f:91:49:51:4f:08:85:3a:35: c1:d7:ff:22:eb:d7:e7:00:b5:7b:33:6b:cb:ed:f8:30:05:2d: 06:95:99:11:3d:e4:70:fd:f0:ad:3b:e8:5e:f0:5a:bf:ef:2f: 19:ee:31:2c:dd:76:2c:a3:15:a8:b3:88:3a:84:83:fd:8b:8a: 8d:bf:4d:b6:7a:23:42:70:c9:94:1c:f9:d4:28:36:4f:67:da: 9b:80:e3:9a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkC7BU0orhNsUbUhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh ZDZiMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZmY0NTBjYTYtMTU0OC00NTEzLWI2YzktNmNjZjlkZDM0MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6z/bLTAEOdyVqoqKestVxWIamLlSFwFAJbO b6TMxRDd4hS2Pf8C4fmATvPkuzrzpYFNlS2leDWke5xgoavkZXwB+LrjslKsnh2/ 7mJSk9QuxTVYXXAso3/GbsZhx4GCpMn9tRwK4yxNgndppiL4fe+lWADHsbn1Zfil Su2xG6qOmek+HTNoLLHgpxadT8fdbpkThv4mKTRpBcxIrJibBboJcn7SmIGYgaAc bMtX/MTQH8WIRg6vd6Rh+ePNxp6JMym3Gd5M3gGEYVBNFRYeDy3i4oPSalGy0KE/ 4NZxaKGi7NlXL+IVmRBKg3dAEb6gIK6QU/6G2rKlIbZmhgzgzQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAF8ejVMFWGx2myhf0Uf6Dk/55RvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABKxXjNzMoLcUJPynyHiFFSMs6d5DPJ0h 6LoZ22sEpNxLRCAZuJv6m/5Ulx+y+IDzn/KlAnpm9KssYnC2PYilPn0xrZXx2s1n M+AA42kRUwpnK5ZeO/tND03jhc8eBbIQ97iyKZP+FMOUyVgH0Vb/z8ZH3fRaWHX4 cFGcQMLDe8NVMRfqjR6uP4a/bWJ4o3wD9aqYLBn/+Ji+IwUQpMLDnKEer9vJv614 HjsGP5FJUU8IhTo1wdf/IuvX5wC1ezNry+34MAUtBpWZET3kcP3wrTvoXvBav+8v Ge4xLN12LKMVqLOIOoSD/YuKjb9NtnojQnDJlBz51Cg2T2fam4Djmg== -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:45 2025 by rpki-client