$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/abf6b21f-e145-3494-982d-ca8c8e232af0.roa File: abf6b21f-e145-3494-982d-ca8c8e232af0.roa (raw, json) Hash identifier: Psl+14p0TC/C10Lvfb3kAWPLjLak4s2X1J8B0tHfy30= Subject key identifier: CD:4D:DE:D5:36:68:50:E6:98:C7:20:71:53:58:55:E0:A0:28:D1:DE Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285848F65BD6E3FD915360A3B17AC0 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/abf6b21f-e145-3494-982d-ca8c8e232af0.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 52.129.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d6:e3:fd:91:53:60:a3:b1:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=35a7c2a8-1e66-499e-a450-ac1de7395124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:c4:e4:e1:82:a0:c1:72:96:55:8d:14:6a: ee:ac:f3:c0:fd:6e:30:d5:08:19:cf:4a:78:8a:e5: 42:4b:ad:4b:44:39:1f:d2:65:24:12:df:09:79:3f: c9:6c:fb:ae:04:31:83:bf:ec:b0:ca:cb:0b:80:94: 3a:13:c6:24:60:a4:8f:b7:76:f6:b5:03:42:f4:73: 54:2f:24:b7:07:0e:f4:73:3d:dc:60:a3:62:62:63: df:ef:8f:b7:f4:a0:c0:17:16:e5:17:20:ce:73:34: 45:c5:5a:83:fc:65:ca:5c:6b:6e:c1:4c:d2:b2:69: 50:1a:52:d2:de:01:10:b8:48:5f:aa:35:cd:6b:a9: 12:f6:5b:67:6d:e4:20:00:4b:bd:62:21:00:93:b2: b0:98:2f:52:b6:77:e2:43:7e:c7:e0:c9:7d:28:99: b7:9f:09:52:c8:99:7f:81:41:82:c7:7a:b6:02:71: 91:8a:e7:4c:62:e2:f9:90:cd:71:42:3f:de:c1:3c: e5:1d:8e:2f:5d:08:16:a1:2a:80:2a:d9:d5:89:8d: 29:aa:ac:cd:0a:f7:5b:b0:16:2f:bd:e5:4f:26:9c: 01:a4:6d:22:4a:5f:65:43:21:ef:56:2c:bd:98:c2: 26:40:c2:d2:ce:70:7d:3f:24:a9:9e:32:ba:63:89: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4D:DE:D5:36:68:50:E6:98:C7:20:71:53:58:55:E0:A0:28:D1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/abf6b21f-e145-3494-982d-ca8c8e232af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8d:82:a0:06:a9:81:58:0c:54:19:2f:53:d4:52:6b:e2:60: fb:61:c0:a0:bc:06:c4:2b:5f:92:36:df:4c:c7:84:0b:b1:27: 39:e9:9e:52:53:24:6e:4e:b9:cc:91:10:73:10:7f:b5:dd:ba: a5:d3:b7:33:31:2d:c2:e1:64:ba:5e:41:f3:27:63:1a:3c:d7: e1:7c:ca:07:62:24:cb:76:9a:83:e2:7f:ea:44:c2:2d:d2:65: 8c:7e:4a:d3:f6:61:53:ff:d8:8d:97:a9:af:44:35:d6:9f:28: 36:31:c8:e1:a5:c6:cb:8e:5f:ee:6a:65:1e:36:1e:4d:d9:6c: 54:67:28:12:ab:9d:11:1a:d8:d7:08:48:6d:75:e3:43:18:a1: b8:9d:5b:5e:da:6a:09:f9:73:81:03:ba:94:8d:76:68:aa:52: f9:ba:53:9b:03:93:ba:57:26:a0:36:da:8d:7f:34:5d:9c:2e: 02:2c:28:1f:8d:af:f3:05:4d:a5:33:46:6c:f7:2a:0a:76:52: 76:22:e3:75:f3:79:56:0c:32:bf:14:47:4a:8c:c6:d8:70:45: 82:32:d1:fc:88:df:4a:0b:d8:ad:0a:74:7f:08:ff:e8:09:a1: 32:2b:0e:34:3d:d7:7a:04:24:45:b1:4d:c8:f4:25:51:38:b3: 33:84:4f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9bj/ZFTYKOxesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzVhN2MyYTgtMWU2Ni00OTllLWE0NTAtYWMxZGU3Mzk1MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/E5OGCoMFyllWNFGrurPPA/W4w1QgZz0p4 iuVCS61LRDkf0mUkEt8JeT/JbPuuBDGDv+ywyssLgJQ6E8YkYKSPt3b2tQNC9HNU LyS3Bw70cz3cYKNiYmPf74+39KDAFxblFyDOczRFxVqD/GXKXGtuwUzSsmlQGlLS 3gEQuEhfqjXNa6kS9ltnbeQgAEu9YiEAk7KwmC9StnfiQ37H4Ml9KJm3nwlSyJl/ gUGCx3q2AnGRiudMYuL5kM1xQj/ewTzlHY4vXQgWoSqAKtnViY0pqqzNCvdbsBYv veVPJpwBpG0iSl9lQyHvViy9mMImQMLSznB9PySpnjK6Y4nOswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1N3tU2aFDmmMcgcVNYVeCgKNHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYWJmNmIyMWYtZTE0NS0z NDk0LTk4MmQtY2E4YzhlMjMyYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuNgqAGqYFYDFQZL1PUUmviYPthwKC8BsQrX5I230zHhAuxJznpnlJT JG5OucyREHMQf7XduqXTtzMxLcLhZLpeQfMnYxo81+F8ygdiJMt2moPif+pEwi3S ZYx+StP2YVP/2I2Xqa9ENdafKDYxyOGlxsuOX+5qZR42Hk3ZbFRnKBKrnREa2NcI SG1140MYobidW17aagn5c4EDupSNdmiqUvm6U5sDk7pXJqA22o1/NF2cLgIsKB+N r/MFTaUzRmz3Kgp2UnYi43XzeVYMMr8UR0qMxthwRYIy0fyI30oL2K0KdH8I/+gJ oTIrDjQ913oEJEWxTcj0JVE4szOET70= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:44 2025 by rpki-client