$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/2e0c7825-7c66-384a-b7b1-0cf27c078432.roa File: 2e0c7825-7c66-384a-b7b1-0cf27c078432.roa (raw, json) Hash identifier: jzZKgPMxV+79HD+NM7Tyy+6USTV1265SZb/EmOPjLwo= Subject key identifier: 50:55:45:84:A7:54:0C:16:CE:1C:46:38:DC:A8:1E:2D:B1:B3:06:DD Certificate issuer: /CN=7724368b-bd6f-4bd6-b91b-628aa487e321 Certificate serial: 010D0C9F43285848A9961D7826474379C624E900 Authority key identifier: 3B:D2:BC:C7:EE:ED:28:31:B7:BE:0F:5D:84:49:F2:D3:E1:86:E0:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/2e0c7825-7c66-384a-b7b1-0cf27c078432.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397298 IP address blocks: 52.124.26.0/24 maxlen: 24 52.124.27.0/24 maxlen: 24 164.152.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/7724368b-bd6f-4bd6-b91b-628aa487e321.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/7724368b-bd6f-4bd6-b91b-628aa487e321.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1d:78:26:47:43:79:c6:24:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7724368b-bd6f-4bd6-b91b-628aa487e321 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=defdaae3-5df1-4ced-aeae-73a0351536bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:22:e1:23:30:44:cd:1c:96:83:28:78:35: 4c:bf:fd:95:a4:a2:88:74:10:70:04:eb:60:7d:a1: f2:d0:22:ae:c7:b6:26:60:09:e7:23:ec:29:2f:16: 18:2c:6a:9e:0a:0e:49:77:9f:b4:d8:9c:c4:9c:4a: eb:75:f5:f8:f4:d7:bf:7b:61:c0:50:4c:2b:72:3e: 50:cb:1e:83:67:57:3f:21:e4:ef:8a:85:1f:6e:ed: 36:a4:1f:19:d3:dc:52:a8:2b:ee:32:39:be:97:7f: 90:7c:3f:c5:9b:34:56:5d:f0:dc:73:02:96:01:37: f4:8c:db:20:ae:1a:cc:b0:13:1b:fa:24:73:31:35: 8e:99:af:7b:4c:2b:bd:d6:15:fa:ba:f6:4d:09:45: e5:09:7a:cd:03:ce:c9:26:eb:13:fe:f8:b3:5c:1f: 07:b7:7c:eb:04:74:81:6b:2e:82:84:f4:9a:cd:2a: f0:8f:8c:6c:82:d6:45:fa:19:b7:53:ee:23:7f:7b: 3d:3f:13:f4:48:bb:8e:d2:7b:98:89:e1:02:cc:e1: 20:97:69:5f:9c:bc:27:a8:92:29:b2:65:22:3a:3c: 19:81:8f:b3:f9:b3:eb:c6:65:c2:ff:c2:22:9e:ae: 0e:3c:87:8b:05:6e:65:b4:9d:d8:92:29:77:e3:2f: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:55:45:84:A7:54:0C:16:CE:1C:46:38:DC:A8:1E:2D:B1:B3:06:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/2e0c7825-7c66-384a-b7b1-0cf27c078432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321/7724368b-bd6f-4bd6-b91b-628aa487e321.crl X509v3 Authority Key Identifier: keyid:3B:D2:BC:C7:EE:ED:28:31:B7:BE:0F:5D:84:49:F2:D3:E1:86:E0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7724368b-bd6f-4bd6-b91b-628aa487e321.cer sbgp-ipAddrBlock: critical IPv4: 52.124.26.0/23 164.152.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cc:f1:91:97:a7:05:e7:69:ce:48:b6:25:32:d6:90:ba:5f: b1:a6:d6:83:88:ec:0b:ae:d6:ea:fd:7d:d7:a8:ca:09:b8:77: 74:5b:ee:e3:f5:25:24:87:f4:e1:92:a5:f4:3a:aa:94:67:a1: 6c:5c:ae:28:ad:58:3d:14:a7:69:b8:f6:fa:a3:13:c6:3f:ed: 51:48:a2:e5:1f:f6:96:b4:3f:e9:b1:69:47:46:d9:50:cd:96: fe:7b:04:16:b0:9e:af:11:ee:d0:9f:96:57:71:5a:11:63:4b: 9e:71:02:30:3f:e4:fa:30:29:96:e2:da:d9:f5:4f:6d:0c:c5: a3:34:b4:80:56:d7:97:23:df:bd:81:2f:77:04:e6:dc:f0:11: 7c:b5:9a:36:4d:41:0d:64:cd:02:1c:b1:aa:94:87:d7:8a:5d: bb:02:3f:11:05:5b:9b:50:02:9b:ed:fe:df:66:c1:2e:88:ac: d5:70:ff:f1:f0:03:cf:7e:3a:93:5f:38:03:01:13:0d:d5:34: 6d:ce:26:71:8e:de:7c:91:1b:55:96:d8:a1:15:5b:d1:7c:43: 75:19:93:77:aa:49:43:c7:5b:ac:fb:02:04:04:3b:24:d3:f6: ed:eb:ad:62:5d:3d:40:55:50:5a:a0:10:d0:d0:35:2e:54:ff: d1:65:47:c0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiplh14JkdDecYk6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzcyNDM2OGItYmQ2Zi00YmQ2LWI5MWItNjI4YWE0ODdl MzIxMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGVmZGFhZTMtNWRmMS00Y2VkLWFlYWUtNzNhMDM1MTUzNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0i4SMwRM0cloMoeDVMv/2VpKKIdBBwBOtg faHy0CKux7YmYAnnI+wpLxYYLGqeCg5Jd5+02JzEnErrdfX49Ne/e2HAUEwrcj5Q yx6DZ1c/IeTvioUfbu02pB8Z09xSqCvuMjm+l3+QfD/FmzRWXfDccwKWATf0jNsg rhrMsBMb+iRzMTWOma97TCu91hX6uvZNCUXlCXrNA87JJusT/vizXB8Ht3zrBHSB ay6ChPSazSrwj4xsgtZF+hm3U+4jf3s9PxP0SLuO0nuYieECzOEgl2lfnLwnqJIp smUiOjwZgY+z+bPrxmXC/8Iinq4OPIeLBW5ltJ3Ykil34y9UkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFBVRYSnVAwWzhxGONyoHi2xswbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NzI0 MzY4Yi1iZDZmLTRiZDYtYjkxYi02MjhhYTQ4N2UzMjEvMmUwYzc4MjUtN2M2Ni0z ODRhLWI3YjEtMGNmMjdjMDc4NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzcyNDM2OGItYmQ2Zi00YmQ2LWI5 MWItNjI4YWE0ODdlMzIxLzc3MjQzNjhiLWJkNmYtNGJkNi1iOTFiLTYyOGFhNDg3 ZTMyMS5jcmwwHwYDVR0jBBgwFoAUO9K8x+7tKDG3vg9dhEny0+GG4FAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NzI0MzY4Yi1iZDZmLTRiZDYtYjkxYi02Mjhh YTQ4N2UzMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBNHwaAwQB pJjOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG/M8ZGXpwXnac5ItiUy1pC6X7Gm1oOI7Auu1ur9fdeoygm4 d3Rb7uP1JSSH9OGSpfQ6qpRnoWxcriitWD0Up2m49vqjE8Y/7VFIouUf9pa0P+mx aUdG2VDNlv57BBawnq8R7tCflldxWhFjS55xAjA/5PowKZbi2tn1T20MxaM0tIBW 15cj372BL3cE5tzwEXy1mjZNQQ1kzQIcsaqUh9eKXbsCPxEFW5tQApvt/t9mwS6I rNVw//HwA89+OpNfOAMBEw3VNG3OJnGO3nyRG1WW2KEVW9F8Q3UZk3eqSUPHW6z7 AgQEOyTT9u3rrWJdPUBVUFqgENDQNS5U/9FlR8A= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:34 2025 by rpki-client