$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53f0953a-c6c1-33d9-a6a3-9b5f56e47a1d.roa File: 53f0953a-c6c1-33d9-a6a3-9b5f56e47a1d.roa (raw, json) Hash identifier: q7f4rp9lg9PWB8LAdj4wObebidRJfRluYA5tr69AqNA= Subject key identifier: EA:61:64:C0:20:DB:ED:BB:9A:7F:B0:7C:40:4B:EF:C7:42:27:C5:75 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285848F65BD6B44DC695A5700D9EC0 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53f0953a-c6c1-33d9-a6a3-9b5f56e47a1d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 52.129.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d6:b4:4d:c6:95:a5:70:0d:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=30219a2a-76c3-465c-9230-57d08f49f16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:d1:ef:c5:27:46:ed:54:0e:2e:45:b5:8f: 6a:6d:f0:e5:b6:b1:39:3e:72:b5:39:b8:f6:89:21: 0d:fa:f0:b9:1e:35:fc:e4:3e:d4:a7:4a:b7:da:f7: 36:f6:c8:d1:50:91:5e:59:fd:6d:05:8c:0f:6d:d8: 4a:0b:ec:87:ac:ad:21:a4:70:60:f8:f7:c9:21:15: 58:5f:10:e0:a8:15:26:5b:f5:d2:33:c5:40:4d:9b: 23:45:68:8a:de:62:ba:ff:6e:00:a3:91:d8:37:7b: a7:91:7b:f8:6e:43:9d:c3:01:2e:9e:f0:94:c8:6f: ec:ae:01:6c:63:d0:6c:a6:69:48:90:23:a3:f4:1a: 6a:47:44:40:f9:dc:d5:86:7c:92:a6:b5:df:83:0e: 8d:47:56:30:99:fb:7d:d5:4c:df:e0:bc:cc:d5:93: 44:88:81:84:e5:65:e5:9a:6e:3b:35:21:6b:17:0b: ba:b2:d5:77:88:b4:7b:72:12:5f:27:d6:d4:1c:9a: 84:1a:d8:d8:0d:9e:fd:e0:33:67:ee:67:cd:2d:66: 51:12:ff:44:b4:57:db:2f:80:66:70:ba:7f:e7:f3: 94:89:be:59:ae:96:a0:a5:b0:9d:25:e0:2f:9e:48: ef:cf:ab:3f:f4:55:b9:5e:9e:66:f9:65:53:40:eb: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:64:C0:20:DB:ED:BB:9A:7F:B0:7C:40:4B:EF:C7:42:27:C5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/53f0953a-c6c1-33d9-a6a3-9b5f56e47a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b5:81:55:a1:5a:7b:dd:f8:1f:6c:4e:eb:06:c6:73:5c:6b: 4b:d2:f5:e3:1c:31:a6:ad:49:3f:8c:e1:9f:8e:a2:af:68:7c: 7a:23:e1:d8:36:02:13:25:2f:9b:06:bb:e3:fe:1d:ac:6c:59: 69:3f:1c:5e:e9:4e:63:b0:1a:27:7e:af:f9:d7:ab:d5:8c:65: bf:e8:04:4f:52:70:d3:c9:c9:63:35:eb:de:8f:97:53:97:6b: 9a:51:15:dd:68:0c:d2:a9:1d:ff:59:c5:51:48:83:82:6e:f1: c1:b0:fb:41:2a:92:ff:89:37:45:93:07:c9:b0:86:70:7a:9e: b7:c6:d4:c2:e1:d3:da:46:4f:c5:d6:c4:14:25:f1:2f:d8:b5: 9c:9e:e1:aa:7a:e4:6f:ea:b4:69:a6:b9:ce:d1:8a:30:2d:f9: e0:eb:de:c9:ae:fb:b1:63:94:d3:ab:01:b9:15:27:90:03:b5: c6:57:3c:a9:c7:fe:a2:c1:db:0c:95:2e:e1:83:9e:a1:f5:77: ef:5b:ff:83:27:66:f0:4a:85:b4:e4:77:a2:34:27:59:7a:16: 8a:84:f8:b6:ce:4e:97:91:6a:4c:4f:03:74:17:46:9b:59:ca: 22:38:d7:a2:f5:31:e4:a9:cf:66:1c:54:ae:3c:3b:cf:32:52: 5f:bd:39:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9a0TcaVpXANnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzAyMTlhMmEtNzZjMy00NjVjLTkyMzAtNTdkMDhmNDlmMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaHR78UnRu1UDi5FtY9qbfDltrE5PnK1Obj2 iSEN+vC5HjX85D7Up0q32vc29sjRUJFeWf1tBYwPbdhKC+yHrK0hpHBg+PfJIRVY XxDgqBUmW/XSM8VATZsjRWiK3mK6/24Ao5HYN3unkXv4bkOdwwEunvCUyG/srgFs Y9BspmlIkCOj9BpqR0RA+dzVhnySprXfgw6NR1Ywmft91Uzf4LzM1ZNEiIGE5WXl mm47NSFrFwu6stV3iLR7chJfJ9bUHJqEGtjYDZ794DNn7mfNLWZREv9EtFfbL4Bm cLp/5/OUib5ZrpagpbCdJeAvnkjvz6s/9FW5Xp5m+WVTQOuVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOphZMAg2+27mn+wfEBL78dCJ8V1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNTNmMDk1M2EtYzZjMS0z M2Q5LWE2YTMtOWI1ZjU2ZTQ3YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm1gVWhWnvd+B9sTusGxnNca0vS9eMcMaatST+M4Z+Ooq9ofHoj4dg2 AhMlL5sGu+P+HaxsWWk/HF7pTmOwGid+r/nXq9WMZb/oBE9ScNPJyWM1696Pl1OX a5pRFd1oDNKpHf9ZxVFIg4Ju8cGw+0Eqkv+JN0WTB8mwhnB6nrfG1MLh09pGT8XW xBQl8S/YtZye4ap65G/qtGmmuc7RijAt+eDr3smu+7FjlNOrAbkVJ5ADtcZXPKnH /qLB2wyVLuGDnqH1d+9b/4MnZvBKhbTkd6I0J1l6FoqE+LbOTpeRakxPA3QXRptZ yiI416L1MeSpz2YcVK48O88yUl+9OaE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:14 2025 by rpki-client