$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a252758e-5955-39d1-97dc-992a42178661.roa File: a252758e-5955-39d1-97dc-992a42178661.roa (raw, json) Hash identifier: w1vaAiWPue3T/B2VpRceC2f8ZeBBW6ftFhx4AchMSRc= Subject key identifier: D2:35:B6:EE:95:42:E8:33:AE:46:DD:9F:E8:80:AB:61:09:20:11:0F Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285848F65BD6C493EC1C0CC1710680 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a252758e-5955-39d1-97dc-992a42178661.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 52.129.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d6:c4:93:ec:1c:0c:c1:71:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b396f626-26f0-490d-89c2-2691a07138fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:de:cc:f4:85:d4:30:e8:00:bd:bd:76:54: e2:39:2d:9e:a7:ea:e8:83:1b:56:57:5f:dc:dd:99: b2:0a:0e:ef:28:c3:b2:f1:09:f5:74:a8:ac:ac:42: fe:d9:82:35:d6:0d:75:6e:91:f3:50:6a:2e:c9:b1: fd:12:f6:b5:8d:c2:a3:b4:bf:e9:4a:ae:c5:73:da: fc:a6:77:46:1a:8d:8c:3f:d3:96:32:7b:76:3a:6d: 1b:5f:17:dd:2c:d5:7e:33:41:3b:64:1d:66:fb:da: 2d:aa:cf:c1:46:ba:44:5f:84:75:b9:3b:ef:90:7e: fa:28:04:7d:f5:05:12:01:75:28:41:c5:3f:3a:78: d5:04:e3:d9:a2:ad:60:b4:2a:68:a4:00:33:e7:5d: 4c:0c:41:e9:8c:31:1f:8b:9a:7b:a8:95:bb:0c:8c: 77:e1:4e:a7:59:47:09:15:13:24:1d:9a:89:e1:25: 64:88:95:93:0f:24:b4:ca:a8:fd:ab:5b:a3:09:d1: 2c:b5:ed:42:12:9a:b0:a9:2c:3d:3f:10:65:24:e7: 13:1c:27:0e:43:61:d0:6e:a1:de:81:ee:d1:58:53: ad:1b:f6:93:d8:62:45:24:82:11:93:9d:03:5e:78: 79:82:f6:74:b1:c0:3d:d3:88:40:0b:82:19:6d:2a: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:B6:EE:95:42:E8:33:AE:46:DD:9F:E8:80:AB:61:09:20:11:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a252758e-5955-39d1-97dc-992a42178661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d5:0c:25:5b:5f:bc:ff:59:07:0b:d4:99:59:45:86:a7:b2: 3c:27:85:53:ac:fb:50:13:92:b3:33:9a:57:4e:69:3e:be:b4: 25:59:53:be:9f:63:64:4b:e0:13:f1:de:f7:d2:86:e2:d6:b1: 3e:04:3f:18:84:2a:92:65:1c:03:f8:58:61:a7:f9:fa:84:2f: 27:96:6e:19:42:f7:f3:e3:07:36:05:95:18:df:f6:55:4b:6f: d2:fd:5e:69:c4:9a:85:11:44:62:21:af:b8:61:c4:23:24:02: 62:07:91:a5:a4:61:3d:83:cc:49:82:6d:9b:9c:09:2f:0a:9c: 6c:67:78:ea:2f:43:e6:ea:0b:98:d6:46:ac:5e:f1:01:1b:bf: f7:f1:f3:14:cb:30:ec:ed:2d:16:6c:eb:e5:e7:f6:5a:96:7c: 42:2a:51:26:63:4c:6e:e5:21:e6:1e:44:a0:ca:dc:2c:36:49: 16:95:82:b4:26:bc:4a:3b:77:e8:d3:ce:7b:78:01:52:ef:09: f5:df:1b:eb:7b:60:bb:b7:29:21:84:cc:51:25:de:ca:63:ae: d2:6a:69:72:12:0a:17:56:77:ad:3a:eb:5e:37:4c:09:41:80: 19:22:f5:df:9a:ec:64:5c:4e:7f:da:d4:b7:a3:01:8f:3c:27: f6:dd:82:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9bEk+wcDMFxBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjM5NmY2MjYtMjZmMC00OTBkLTg5YzItMjY5MWEwNzEzOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9DezPSF1DDoAL29dlTiOS2ep+rogxtWV1/c 3ZmyCg7vKMOy8Qn1dKisrEL+2YI11g11bpHzUGouybH9Eva1jcKjtL/pSq7Fc9r8 pndGGo2MP9OWMnt2Om0bXxfdLNV+M0E7ZB1m+9otqs/BRrpEX4R1uTvvkH76KAR9 9QUSAXUoQcU/OnjVBOPZoq1gtCpopAAz511MDEHpjDEfi5p7qJW7DIx34U6nWUcJ FRMkHZqJ4SVkiJWTDyS0yqj9q1ujCdEste1CEpqwqSw9PxBlJOcTHCcOQ2HQbqHe ge7RWFOtG/aT2GJFJIIRk50DXnh5gvZ0scA904hAC4IZbSpXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI1tu6VQugzrkbdn+iAq2EJIBEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYTI1Mjc1OGUtNTk1NS0z OWQxLTk3ZGMtOTkyYTQyMTc4NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3VDCVbX7z/WQcL1JlZRYansjwnhVOs+1ATkrMzmldOaT6+tCVZU76f Y2RL4BPx3vfShuLWsT4EPxiEKpJlHAP4WGGn+fqELyeWbhlC9/PjBzYFlRjf9lVL b9L9XmnEmoURRGIhr7hhxCMkAmIHkaWkYT2DzEmCbZucCS8KnGxneOovQ+bqC5jW Rqxe8QEbv/fx8xTLMOztLRZs6+Xn9lqWfEIqUSZjTG7lIeYeRKDK3Cw2SRaVgrQm vEo7d+jTznt4AVLvCfXfG+t7YLu3KSGEzFEl3spjrtJqaXISChdWd6066143TAlB gBki9d+a7GRcTn/a1LejAY88J/bdgmI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:50 2025 by rpki-client