$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa File: dd445671-6815-3a61-a556-1bfd773ca1e6.roa (raw, json) Hash identifier: 2bLOWuCEsRomhxl20XT3fXv/ebCV2rXQZ+K+tp2LPeM= Subject key identifier: 95:B5:94:27:1D:E3:6B:AF:E9:61:EF:13:2D:50:FD:F1:1A:CE:40:9C Certificate issuer: /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Certificate serial: 010D0C9F43285849287E649DCD5FA348EB0F36C0 Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 399134 IP address blocks: 52.124.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:64:9d:cd:5f:a3:48:eb:0f:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=6129bbe8-4436-4d98-a73d-09bfa3d72c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:b9:16:3a:b9:58:aa:9b:aa:57:cb:ac:3b: f8:22:a4:3e:6e:84:1d:fe:a2:1f:7f:11:53:74:ff: d4:e4:69:71:cd:08:8f:b2:f1:aa:e8:91:62:06:73: fa:ea:7f:42:6b:99:f5:a2:cb:fc:9f:97:fa:8c:21: cb:f7:b9:66:cb:78:80:de:18:5a:21:4a:2b:3a:e3: a7:64:5d:16:07:62:30:ad:62:28:aa:08:ad:9e:d7: 84:49:dc:cb:52:6a:ca:4d:cc:13:d3:31:d6:53:70: 75:d6:41:e6:98:52:ab:83:d0:6b:83:47:b6:43:15: e2:99:23:e5:22:43:34:f4:fb:d0:25:51:d1:20:97: dd:07:21:22:ff:ed:d4:31:f7:f4:55:f2:39:e9:5b: 03:df:cb:52:57:2f:35:7f:c2:86:93:29:85:c9:d5: dc:a2:dc:50:27:98:5c:59:c3:cb:df:63:11:67:a2: 5e:c8:e3:63:87:fc:56:c2:2c:6c:ef:7e:13:92:c4: 56:db:ad:fe:8b:8f:cd:ec:c3:b7:83:72:5e:79:48: 55:dd:85:7b:7f:e3:1c:e8:af:50:52:26:0a:e8:1d: 88:fb:27:08:bb:4a:6a:4f:7f:cf:96:61:71:a4:1c: 1c:d3:1e:ec:b2:22:39:28:46:a0:45:b6:6c:51:ab: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B5:94:27:1D:E3:6B:AF:E9:61:EF:13:2D:50:FD:F1:1A:CE:40:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl X509v3 Authority Key Identifier: keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer sbgp-ipAddrBlock: critical IPv4: 52.124.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:f7:be:87:92:27:2b:e9:f8:cc:21:aa:5d:e7:da:d0:6f:94: d4:5d:1c:ce:52:35:0d:9c:cb:c9:42:17:f8:54:01:da:e5:bd: 70:5d:9c:9c:38:cf:a1:42:35:d7:1d:0f:b8:54:39:26:fd:b4: b6:39:76:7d:3d:67:01:1c:3b:79:f0:c5:2f:fd:35:28:9d:e2: 9b:b9:12:e7:74:c2:7a:15:50:9d:47:e5:69:67:a2:c8:87:6d: 32:eb:7e:f4:3d:54:26:ae:9e:41:ed:00:0d:81:14:16:8a:f3: 0b:0e:ab:00:a9:69:6b:63:c5:45:c9:30:8b:78:d3:a1:6a:30: 50:a6:0a:4b:4d:35:ca:4d:06:dc:1f:4a:82:8c:53:17:0e:92: dc:c5:e4:d6:92:4d:d2:e2:11:cb:93:56:9e:f2:00:19:b3:3a: 8f:5f:72:f7:99:bd:a0:4a:93:da:94:ea:3e:81:7f:2a:63:e9: da:17:5b:0b:f7:0b:88:13:6a:de:c4:75:59:9f:31:e6:3d:1f: a9:7d:a4:f6:75:2d:bd:2d:e0:af:62:48:6a:69:c0:62:2b:38: e7:90:3b:5e:22:44:ab:56:2f:73:a1:84:dc:4f:79:55:72:ee: 97:f8:c5:55:6c:da:3e:b4:f2:25:db:f5:f8:85:e7:61:32:e6: 29:17:ec:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmSdzV+jSOsPNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzMmZhNjctNzE1OC00NDM3LTllNjQtZjA5MjZjNGU0 ZDI2MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjEyOWJiZTgtNDQzNi00ZDk4LWE3M2QtMDliZmEzZDcyYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmm5Fjq5WKqbqlfLrDv4IqQ+boQd/qIffxFT dP/U5GlxzQiPsvGq6JFiBnP66n9Ca5n1osv8n5f6jCHL97lmy3iA3hhaIUorOuOn ZF0WB2IwrWIoqgitnteESdzLUmrKTcwT0zHWU3B11kHmmFKrg9Brg0e2QxXimSPl IkM09PvQJVHRIJfdByEi/+3UMff0VfI56VsD38tSVy81f8KGkymFydXcotxQJ5hc WcPL32MRZ6JeyONjh/xWwixs734TksRW263+i4/N7MO3g3JeeUhV3YV7f+Mc6K9Q UiYK6B2I+ycIu0pqT3/PlmFxpBwc0x7ssiI5KEagRbZsUaudswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW1lCcd42uv6WHvEy1Q/fEazkCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMy ZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0ZTRkMjYvZGQ0NDU2NzEtNjgxNS0z YTYxLWE1NTYtMWJmZDc3M2NhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQzMmZhNjctNzE1OC00NDM3LTll NjQtZjA5MjZjNGU0ZDI2LzBkMzJmYTY3LTcxNTgtNDQzNy05ZTY0LWYwOTI2YzRl NGQyNi5jcmwwHwYDVR0jBBgwFoAUBEx1DkW6xAnA6QI7v20+IM7/BdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDky NmM0ZTRkMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANL3voeSJyvp+Mwhql3n2tBvlNRdHM5SNQ2cy8lCF/hUAdrlvXBdnJw4 z6FCNdcdD7hUOSb9tLY5dn09ZwEcO3nwxS/9NSid4pu5Eud0wnoVUJ1H5WlnosiH bTLrfvQ9VCaunkHtAA2BFBaK8wsOqwCpaWtjxUXJMIt406FqMFCmCktNNcpNBtwf SoKMUxcOktzF5NaSTdLiEcuTVp7yABmzOo9fcveZvaBKk9qU6j6Bfypj6doXWwv3 C4gTat7EdVmfMeY9H6l9pPZ1Lb0t4K9iSGppwGIrOOeQO14iRKtWL3OhhNxPeVVy 7pf4xVVs2j608iXb9fiF52Ey5ikX7Fs= -----END CERTIFICATE-----Generated at Fri Apr 18 05:59:35 2025 by rpki-client