$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa File: bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa (raw, json) Hash identifier: Nb5Nt7QrhHSvfrrp2OKr19hmF1jWN4NIS8A9BG30Iu8= Subject key identifier: 67:D1:F5:37:36:E3:50:22:AB:DF:CD:04:66:EC:46:3D:B7:D7:59:63 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F432858487CEB321104EC1EE724280120 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:32:11:04:ec:1e:e7:24:28:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=0cb92d0b-4489-40f0-bb1f-b03ef55a0228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:dd:66:3d:a5:1c:e6:ad:b1:d5:9a:4c:c8:4a: cf:85:3c:d5:36:24:6f:86:b8:45:f6:a3:04:dc:23: b2:67:81:60:3f:df:bb:e1:31:80:6d:fc:1f:fd:a1: ae:f5:94:94:83:45:62:21:66:ef:55:23:75:da:78: 41:bc:0b:5c:39:95:d6:c0:32:7a:d2:51:c4:65:01: 02:64:53:00:7d:35:06:67:9e:63:d5:16:fb:c8:ec: 8b:26:a6:37:6a:f3:80:d9:06:9d:6a:1c:d0:af:fd: d0:c2:16:67:fb:3a:d3:e0:15:07:1c:6f:03:a1:21: 9a:c7:48:ec:df:6b:0c:ab:cc:35:64:44:6d:e0:33: 56:ed:32:2a:a1:d1:72:ff:12:3f:13:79:9b:bc:06: 0d:39:fe:0e:68:83:e0:df:95:11:24:d4:5b:09:b2: 4e:c4:df:af:99:9e:08:ea:ab:4e:ea:21:f1:fe:43: 69:df:ef:e2:42:bd:78:09:67:a8:59:ec:cd:a2:3a: f8:84:95:65:1d:9f:80:13:7b:0e:a2:95:01:1c:46: 0e:dc:18:a1:00:0b:1f:9d:ff:b9:3f:56:11:a3:59: 4f:bd:04:dc:b4:d1:3d:29:2c:fd:fe:f8:13:bd:65: 4e:4a:79:a1:84:ce:bf:93:ad:4f:ed:02:be:a8:f5: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:F5:37:36:E3:50:22:AB:DF:CD:04:66:EC:46:3D:B7:D7:59:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:41:b3:f1:19:34:ed:84:11:8e:96:c7:63:5a:9c:b6:be:f4: 86:21:e1:e8:6e:22:09:c5:30:e9:d5:75:03:70:01:7d:67:14: f1:15:2b:81:2b:ff:9f:02:07:32:d9:e7:32:5e:1c:fc:de:80: 96:40:82:58:3f:30:54:5c:12:f6:03:de:15:20:66:c1:47:47: 39:fe:6f:31:58:ea:8a:ac:38:1d:e3:22:01:2f:e2:5a:1e:2f: 69:7d:04:a1:7d:f1:e2:02:e2:26:e4:fd:7d:83:a2:e9:72:76: a3:a3:3d:61:66:be:29:0d:52:3a:90:58:d9:f0:ee:6a:64:50: 85:59:d1:76:eb:0c:36:f3:89:11:49:08:fa:cc:e6:7a:68:04: 4e:bc:51:88:16:a1:68:06:38:ea:bc:57:f5:00:c6:6c:04:91: 3d:8a:62:03:1f:78:76:89:1b:10:8e:3d:a2:09:32:20:ab:83: ff:2e:95:42:98:fc:a5:86:80:e6:82:b8:e7:f3:f4:1a:41:08: 2c:1f:8d:4d:2a:dc:1a:f5:2f:cf:59:e5:1d:dc:40:57:07:07: 82:78:ce:f3:29:ac:7a:ab:e9:ec:70:2e:20:a3:bc:ee:f5:b1: a6:aa:a8:89:31:99:3a:15:45:14:45:3a:55:e8:66:dc:eb:56: 96:b6:c4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zIRBOwe5yQoASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MGNiOTJkMGItNDQ4OS00MGYwLWJiMWYtYjAzZWY1NWEwMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+d1mPaUc5q2x1ZpMyErPhTzVNiRvhrhF9qME 3COyZ4FgP9+74TGAbfwf/aGu9ZSUg0ViIWbvVSN12nhBvAtcOZXWwDJ60lHEZQEC ZFMAfTUGZ55j1Rb7yOyLJqY3avOA2QadahzQr/3QwhZn+zrT4BUHHG8DoSGax0js 32sMq8w1ZERt4DNW7TIqodFy/xI/E3mbvAYNOf4OaIPg35URJNRbCbJOxN+vmZ4I 6qtO6iHx/kNp3+/iQr14CWeoWezNojr4hJVlHZ+AE3sOopUBHEYO3BihAAsfnf+5 P1YRo1lPvQTctNE9KSz9/vgTvWVOSnmhhM6/k61P7QK+qPXesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfR9Tc241Aiq9/NBGbsRj2311ljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYmFkMDMxMWItYjFhMi0z N2E2LTlhNTQtYTRiMjVlNDE0YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpBs/EZNO2EEY6Wx2NanLa+9IYh4ehuIgnFMOnVdQNwAX1nFPEVK4Er /58CBzLZ5zJeHPzegJZAglg/MFRcEvYD3hUgZsFHRzn+bzFY6oqsOB3jIgEv4loe L2l9BKF98eIC4ibk/X2DoulydqOjPWFmvikNUjqQWNnw7mpkUIVZ0XbrDDbziRFJ CPrM5npoBE68UYgWoWgGOOq8V/UAxmwEkT2KYgMfeHaJGxCOPaIJMiCrg/8ulUKY /KWGgOaCuOfz9BpBCCwfjU0q3Br1L89Z5R3cQFcHB4J4zvMprHqr6exwLiCjvO71 saaqqIkxmToVRRRFOlXoZtzrVpa2xOA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:17 2025 by rpki-client