$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa File: 3f92065a-b3a0-372f-8c62-07e06fdd990e.roa (raw, json) Hash identifier: ETzkS/eKWFqLhSODNPQby/mTGKsEBuQX6qAFPCs2bAQ= Subject key identifier: 9C:7B:21:50:7E:04:8C:59:7F:72:78:C2:0C:9A:09:D7:55:05:18:23 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F432858491ED6DDAA3F96248F8652AE40 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 398712 IP address blocks: 52.128.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:dd:aa:3f:96:24:8f:86:52:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=bd117431-262f-405f-b832-0b9ae4515d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:8f:f2:6a:29:a4:7f:b2:2a:55:e3:5a:84: 30:d8:01:48:f3:cf:7e:3c:e3:79:2a:76:51:76:12: 95:03:7c:51:3b:5f:83:40:79:f7:48:dc:4d:bb:6c: 6b:dd:ae:15:fc:cd:f0:78:e0:5a:73:ac:85:dd:77: 1d:97:98:a6:c4:d9:9a:44:4d:b8:53:29:38:a2:1c: 56:06:82:be:2b:f1:04:22:75:fd:20:9a:1f:66:0f: ca:83:12:75:fb:15:dd:c9:bd:15:f3:ff:cc:6e:72: 38:41:ea:6d:6c:e2:81:fa:f8:59:96:85:bb:67:4b: 6e:9d:04:58:3d:ae:e4:a2:d1:03:e2:41:49:45:ce: 06:aa:d8:9f:63:48:da:93:34:af:a6:a9:90:c6:5c: ac:92:8a:cf:ed:9e:f8:99:8d:44:cc:cf:a7:72:54: 30:46:31:d1:9f:b7:82:d2:1f:1e:94:01:17:3c:ef: 29:2e:19:91:a5:a4:2c:b6:58:45:86:80:d0:4e:8b: 10:f2:b6:3c:ed:83:08:ba:04:d2:1e:c6:f1:f0:a9: 0c:6d:4a:8c:da:38:05:20:2e:ca:02:69:ef:5a:6b: 60:2d:f8:2f:1a:c3:e8:0e:f8:22:4d:e6:96:c1:51: 3a:5d:29:85:86:b0:22:76:ea:42:e0:79:12:80:97: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7B:21:50:7E:04:8C:59:7F:72:78:C2:0C:9A:09:D7:55:05:18:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/3f92065a-b3a0-372f-8c62-07e06fdd990e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:32:de:8b:dc:ee:e9:79:9c:72:da:03:f8:ce:b8:0f:73:19: c9:38:43:3c:49:56:3d:60:ae:47:9b:f1:9c:cf:46:8d:94:c1: 53:1b:5e:94:d0:37:73:18:0c:d8:d4:09:b7:d9:0d:34:32:3c: 0d:ee:f7:8b:3d:2a:e7:a2:2a:09:21:b4:e4:f1:01:71:f1:83: 3e:b9:42:71:d4:8a:58:f0:a2:b0:57:ef:28:d3:6e:7a:29:b6: b7:80:d6:34:2c:8c:f6:74:23:80:da:c7:21:da:53:a8:17:55: 99:a2:da:19:13:ce:7e:2b:44:c1:60:f5:bc:b9:76:65:87:5a: c2:f3:47:b4:e1:89:75:40:5a:5a:e4:2b:f5:8e:0a:e9:04:2f: d9:40:cf:63:b3:8d:2c:b7:ee:e0:32:3d:9e:d3:5e:33:1e:b8: 93:59:0c:cd:6a:af:a8:bb:1e:c0:45:b1:15:3a:d3:3a:01:2f: e7:2c:0b:aa:53:11:2d:94:1f:d5:b5:a6:9d:7e:42:54:da:4d: b7:cc:8f:7b:04:44:72:6c:bf:4b:bb:92:ac:89:46:b8:79:6e: 74:00:3b:2f:9e:1c:b9:6b:d1:0a:5d:ef:32:dd:f1:7a:40:a8: a4:7a:6b:7e:42:99:ee:e3:f7:3d:af:f5:bd:1f:70:e8:fe:a8: e3:aa:0b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t2qP5Ykj4ZSrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YmQxMTc0MzEtMjYyZi00MDVmLWI4MzItMGI5YWU0NTE1ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVWP8moppH+yKlXjWoQw2AFI889+PON5KnZR dhKVA3xRO1+DQHn3SNxNu2xr3a4V/M3weOBac6yF3Xcdl5imxNmaRE24Uyk4ohxW BoK+K/EEInX9IJofZg/KgxJ1+xXdyb0V8//MbnI4QeptbOKB+vhZloW7Z0tunQRY Pa7kotED4kFJRc4GqtifY0jakzSvpqmQxlyskorP7Z74mY1EzM+nclQwRjHRn7eC 0h8elAEXPO8pLhmRpaQstlhFhoDQTosQ8rY87YMIugTSHsbx8KkMbUqM2jgFIC7K AmnvWmtgLfgvGsPoDvgiTeaWwVE6XSmFhrAidupC4HkSgJeRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx7IVB+BIxZf3J4wgyaCddVBRgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvM2Y5MjA2NWEtYjNhMC0z NzJmLThjNjItMDdlMDZmZGQ5OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEy3ovc7ul5nHLaA/jOuA9zGck4QzxJVj1grkeb8ZzPRo2UwVMbXpTQ N3MYDNjUCbfZDTQyPA3u94s9KueiKgkhtOTxAXHxgz65QnHUiljworBX7yjTbnop treA1jQsjPZ0I4DaxyHaU6gXVZmi2hkTzn4rRMFg9by5dmWHWsLzR7ThiXVAWlrk K/WOCukEL9lAz2OzjSy37uAyPZ7TXjMeuJNZDM1qr6i7HsBFsRU60zoBL+csC6pT ES2UH9W1pp1+QlTaTbfMj3sERHJsv0u7kqyJRrh5bnQAOy+eHLlr0Qpd7zLd8XpA qKR6a35Cme7j9z2v9b0fcOj+qOOqC3E= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:48 2025 by rpki-client