$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa File: db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa (raw, json) Hash identifier: VycU9wAn8EO77hVuPzh6E7HfspIqpxAnc35w8/fk2bo= Subject key identifier: B9:34:AA:57:40:5C:1E:39:25:71:67:05:F3:A1:41:E1:8C:65:83:19 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F432858491ED6DE066578D8296C25F840 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 399150 IP address blocks: 52.128.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:de:06:65:78:d8:29:6c:25:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=eda1bf2c-4863-4b05-bd50-971052d3721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:da:83:1c:1c:90:3d:7f:b8:5c:ef:be:ad: 20:92:65:a1:e2:2d:3f:71:f6:78:e5:2f:4b:f3:5a: 8c:cb:9a:22:42:8b:cf:33:91:54:63:a9:c0:35:36: 2a:4d:93:55:0e:92:08:40:42:82:c3:32:c9:00:5e: e5:58:fa:63:e1:08:35:a8:15:22:0c:a6:73:d3:59: 45:fd:ee:ea:92:a6:81:a5:f7:e7:58:9e:fc:2a:c5: 3d:88:e4:41:b0:fc:50:eb:48:cb:12:27:2c:aa:c9: 4c:3c:9c:cb:fd:24:7a:3d:b9:9d:67:dd:a8:e4:dc: 66:72:84:a6:92:8c:fd:24:d7:4b:26:41:80:87:66: 73:16:01:73:ab:cc:d1:6d:84:7f:a3:b6:a7:e8:40: fb:b4:5b:a5:2b:b6:17:0b:43:48:d8:e7:79:64:96: 36:0d:36:66:21:a1:15:b3:77:a1:c4:14:b7:67:ef: 7e:ed:5d:64:b0:45:68:04:a6:49:35:40:be:7c:6a: 57:02:ac:5c:f7:c6:f7:45:88:6b:7b:81:ee:69:05: a0:ed:f0:f1:74:27:a8:cf:0d:42:a1:ab:71:de:86: 09:b6:80:8d:4c:28:44:41:c9:fa:0e:07:9c:49:53: fc:e4:e2:f5:ed:73:c1:38:a8:72:f5:20:f9:2d:51: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:34:AA:57:40:5C:1E:39:25:71:67:05:F3:A1:41:E1:8C:65:83:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:15:f1:91:a2:95:d7:13:97:51:2b:d0:1d:2b:66:1d:ed:85: cc:4d:9b:57:d9:c4:5a:2f:d1:75:c0:db:6c:7c:7e:49:71:74: 6c:95:50:4a:65:44:47:01:08:fb:eb:62:f1:65:b0:f6:54:9a: ca:4d:d3:e1:8c:5d:39:51:f3:03:49:0b:d9:a9:10:b8:86:3e: a3:3d:46:69:e3:bc:a8:c2:d1:81:15:fe:56:86:2b:eb:4d:83: bc:e8:af:90:ba:23:03:c4:f1:67:4e:33:65:e6:6a:26:25:6f: ac:4c:0a:ff:0d:63:24:b0:cf:19:a6:b4:67:1d:b3:7c:49:e5: d2:70:5b:28:4a:3f:df:56:e0:88:c7:3c:aa:93:bd:fd:47:7f: 54:b3:09:25:40:e8:b5:f5:85:5d:6d:c9:74:d0:2d:b9:f3:9a: 8f:09:c3:62:36:6c:68:af:67:01:a7:31:a8:7d:f4:64:f1:23: 3b:66:19:95:cf:af:b9:3d:6d:30:1d:0f:7b:7f:70:84:fd:81: 63:4d:c2:b0:a1:48:8a:52:7f:74:0b:6e:52:6c:ab:97:b8:d2: 7a:22:21:5e:bd:7f:77:18:50:15:4d:3a:d6:c8:57:3d:0d:a0: 80:41:e8:6d:a1:89:d5:fa:9d:94:37:f7:90:dc:9b:ad:32:98: e1:02:59:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t4GZXjYKWwl+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZWRhMWJmMmMtNDg2My00YjA1LWJkNTAtOTcxMDUyZDM3MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzujagxwckD1/uFzvvq0gkmWh4i0/cfZ45S9L 81qMy5oiQovPM5FUY6nANTYqTZNVDpIIQEKCwzLJAF7lWPpj4Qg1qBUiDKZz01lF /e7qkqaBpffnWJ78KsU9iORBsPxQ60jLEicsqslMPJzL/SR6PbmdZ92o5NxmcoSm koz9JNdLJkGAh2ZzFgFzq8zRbYR/o7an6ED7tFulK7YXC0NI2Od5ZJY2DTZmIaEV s3ehxBS3Z+9+7V1ksEVoBKZJNUC+fGpXAqxc98b3RYhre4HuaQWg7fDxdCeozw1C oatx3oYJtoCNTChEQcn6DgecSVP85OL17XPBOKhy9SD5LVHEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk0qldAXB45JXFnBfOhQeGMZYMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvZGI3ZDZhZWItYmMyZC0z OTA4LTkwZmItZTM1ODkxOTZkYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIV8ZGildcTl1Er0B0rZh3thcxNm1fZxFov0XXA22x8fklxdGyVUEpl REcBCPvrYvFlsPZUmspN0+GMXTlR8wNJC9mpELiGPqM9RmnjvKjC0YEV/laGK+tN g7zor5C6IwPE8WdOM2XmaiYlb6xMCv8NYySwzxmmtGcds3xJ5dJwWyhKP99W4IjH PKqTvf1Hf1SzCSVA6LX1hV1tyXTQLbnzmo8Jw2I2bGivZwGnMah99GTxIztmGZXP r7k9bTAdD3t/cIT9gWNNwrChSIpSf3QLblJsq5e40noiIV69f3cYUBVNOtbIVz0N oIBB6G2hidX6nZQ395Dcm60ymOECWf8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:22 2025 by rpki-client