$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa File: f00f68e4-f811-3826-9ffc-52fd451fbc76.roa (raw, json) Hash identifier: +C8xgi1/hxPYVhueyvGy8mH+bOCbDWCpCdTW9bNgLok= Subject key identifier: CB:CD:76:05:BA:54:3F:A0:FD:CC:69:56:73:31:6F:20:43:F4:36:68 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285848159FE44CD68DFBEBBD046C00 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 14618 IP address blocks: 52.129.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:e4:4c:d6:8d:fb:eb:bd:04:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=936d86eb-de81-443f-af90-05efbb98d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:21:42:ef:7d:26:f5:9b:ea:a2:5d:89:37: 58:96:db:97:4c:6e:38:88:87:ba:72:bf:7b:a1:1c: cb:51:b3:40:74:9b:ed:ed:64:3b:23:b5:35:89:3d: 4a:23:ea:b7:77:71:2e:a3:aa:0f:a9:1f:c9:6e:8c: 88:e3:f3:c3:60:3f:10:d1:fa:5a:de:47:8e:93:17: 28:0f:50:04:03:7f:cc:de:07:9f:e8:85:d2:ba:f1: b0:15:98:14:06:46:11:d2:62:69:a4:56:2a:1a:56: 8a:ef:ca:62:24:b5:0a:2f:72:29:89:93:da:89:26: 70:bf:94:c7:44:8c:6f:c2:d3:d3:cc:fa:9e:96:00: 57:db:2e:3a:b5:a6:0d:95:f8:04:07:73:b4:26:fc: 57:54:27:02:37:89:8a:42:8a:44:1d:44:59:fa:09: 9c:a1:5a:0a:96:26:3f:c1:f4:9a:48:de:07:cc:0d: 9e:14:23:bc:77:a1:d0:6d:64:a7:c6:0d:05:97:d9: b2:08:2f:cc:fb:96:4d:f7:63:2f:96:05:98:71:22: 95:d9:4b:1a:1a:13:45:35:3b:d8:99:c2:34:bb:83: 18:a8:9e:0a:01:66:9f:e0:a1:0c:83:6f:64:7c:2f: 59:e0:9b:0c:55:20:66:f4:d0:e6:02:7b:9f:f5:13: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CD:76:05:BA:54:3F:A0:FD:CC:69:56:73:31:6F:20:43:F4:36:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/f00f68e4-f811-3826-9ffc-52fd451fbc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d6:22:ae:f8:cb:ce:30:fd:8c:77:a8:4c:24:2b:82:d4:92: 98:d7:d4:bf:3d:80:23:fb:62:73:4e:55:05:e2:97:ea:34:3a: a0:0e:ac:96:53:7a:61:d5:96:13:0f:1c:7f:55:3d:68:22:46: ad:a6:ee:24:49:c3:a2:ed:f8:c1:db:57:4f:af:a6:c2:71:35: 61:8d:b2:25:6b:c9:c5:25:a4:9c:76:4c:da:be:4e:73:51:7e: ad:6a:af:61:2f:4a:46:b1:f2:a1:f4:9e:e0:b2:8e:ad:f1:e9: 5d:cf:8e:da:f3:a9:9c:8a:91:62:5c:57:31:c7:a0:d3:a7:25: 5a:3c:04:57:1a:8d:97:e0:b3:70:45:ff:e2:54:a4:16:67:86: f8:53:0b:f3:95:d6:fe:1b:94:18:f8:51:36:fd:63:59:3f:ad: 2e:67:8d:7a:a7:20:b4:92:15:a8:c8:88:c7:d9:9a:8f:c3:93: 51:74:b9:e4:23:d2:aa:95:6d:ba:d2:ca:1d:45:70:9e:e6:48: 16:65:4c:2e:40:df:e6:7a:56:e3:0c:e1:80:68:d8:ca:e9:6c: 89:db:f2:40:d1:b6:dd:f3:b5:51:2f:96:0d:c8:4e:77:92:aa: ed:e9:d3:13:c2:e7:a5:30:5e:f8:a5:81:82:cb:7a:2c:da:2b: fd:64:b0:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+RM1o37670EbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk OTM2ZDg2ZWItZGU4MS00NDNmLWFmOTAtMDVlZmJiOThkODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0YhQu99JvWb6qJdiTdYltuXTG44iIe6cr97 oRzLUbNAdJvt7WQ7I7U1iT1KI+q3d3Euo6oPqR/JboyI4/PDYD8Q0fpa3keOkxco D1AEA3/M3gef6IXSuvGwFZgUBkYR0mJppFYqGlaK78piJLUKL3IpiZPaiSZwv5TH RIxvwtPTzPqelgBX2y46taYNlfgEB3O0JvxXVCcCN4mKQopEHURZ+gmcoVoKliY/ wfSaSN4HzA2eFCO8d6HQbWSnxg0Fl9myCC/M+5ZN92MvlgWYcSKV2UsaGhNFNTvY mcI0u4MYqJ4KAWaf4KEMg29kfC9Z4JsMVSBm9NDmAnuf9RPYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvNdgW6VD+g/cxpVnMxbyBD9DZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvZjAwZjY4ZTQtZjgxMS0z ODI2LTlmZmMtNTJmZDQ1MWZiYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3WIq74y84w/Yx3qEwkK4LUkpjX1L89gCP7YnNOVQXil+o0OqAOrJZT emHVlhMPHH9VPWgiRq2m7iRJw6Lt+MHbV0+vpsJxNWGNsiVrycUlpJx2TNq+TnNR fq1qr2EvSkax8qH0nuCyjq3x6V3PjtrzqZyKkWJcVzHHoNOnJVo8BFcajZfgs3BF /+JUpBZnhvhTC/OV1v4blBj4UTb9Y1k/rS5njXqnILSSFajIiMfZmo/Dk1F0ueQj 0qqVbbrSyh1FcJ7mSBZlTC5A3+Z6VuMM4YBo2MrpbInb8kDRtt3ztVEvlg3ITneS qu3p0xPC56UwXvilgYLLeizaK/1ksNY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:00 2025 by rpki-client