$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa File: 3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa (raw, json) Hash identifier: QNlESXRAqbGFOD9p0BaoGVUHfudpTUff40nwXvnJqvI= Subject key identifier: 30:F5:9F:40:0B:40:CE:50:B4:8C:4A:A3:D2:65:6C:02:29:8C:C5:89 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F43285848A29B4E5EE234A6E6554AB780 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 394667 IP address blocks: 52.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4e:5e:e2:34:a6:e6:55:4a:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=cbb7dc93-326b-4b58-8d18-ad79615fca2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:7f:45:8d:9f:a8:c6:d8:3a:c6:e5:4d:48: 0f:b1:44:51:4f:9b:e2:1f:ca:c8:0a:58:27:fd:ec: f9:fa:51:b5:a2:3b:43:63:7a:95:10:c1:73:e6:1c: 46:77:ec:1e:cf:ad:96:be:d0:ac:db:6f:ee:a1:7a: 75:24:f8:0a:a4:18:99:42:13:c4:a9:0c:3c:8f:67: 45:f9:45:2e:2f:e3:4a:e1:e7:9a:ab:da:8d:12:ff: aa:9c:97:d7:c1:36:12:72:e2:72:8b:21:6d:ae:fd: 1b:aa:73:68:96:23:cd:cc:91:c3:fd:56:b9:e1:44: f2:9c:af:ef:68:8f:b3:e7:d6:98:34:0d:e1:d8:60: d1:a0:9e:ae:98:e8:72:1c:b9:30:e9:39:f6:d0:2f: 29:d4:c2:1c:c9:8f:39:64:31:31:94:e7:de:7f:f7: 37:f9:4c:92:71:22:7b:6d:b1:9d:3c:bc:95:0b:1c: b2:d8:6c:1f:3e:49:d5:29:b0:a3:6f:98:99:6e:db: 22:a6:de:d6:64:0d:7b:4b:1e:5f:cd:94:47:0d:c6: 42:38:23:ce:1f:63:05:93:f6:d7:35:80:e5:37:f6: 45:8c:64:58:d2:dc:3e:b7:ff:e2:10:f5:ab:29:b8: 97:98:2c:f3:8e:94:dd:13:ea:fc:eb:ad:84:b1:97: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:9F:40:0B:40:CE:50:B4:8C:4A:A3:D2:65:6C:02:29:8C:C5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:45:2b:38:de:58:f5:1c:63:49:84:e3:d7:92:48:31:fb:26: 0e:bf:4a:e7:ef:75:ea:63:e2:38:2b:f9:15:65:da:54:7e:53: 4b:c8:f7:ba:16:bf:75:f1:92:ad:5c:83:6f:67:97:58:86:e1: dc:22:e6:af:f8:d8:e0:16:a2:bc:39:50:de:dc:97:79:28:5b: 6a:90:71:4e:51:96:87:d2:7a:07:15:4b:03:20:7e:c7:2f:a7: 20:53:26:b0:75:8c:5a:16:9e:d0:52:6f:e7:0d:e5:40:29:df: 34:69:d0:3f:0f:30:48:ae:89:df:64:0d:76:d4:d3:06:ac:83: 66:53:cc:0e:d8:0e:ef:bf:52:68:69:90:f0:6f:c3:0e:c2:44: ba:ec:1b:3d:18:f8:e5:89:a4:f8:f7:15:e3:e2:51:4a:f6:d9: 74:4e:c1:24:a3:57:7a:68:2c:e9:5b:48:dd:73:51:a4:6f:82: d6:9e:34:30:6b:5c:e8:6a:39:54:24:ed:ab:72:65:24:a5:34: 33:4f:bf:26:79:09:f4:df:a1:c2:4e:05:ef:a4:48:84:5b:c6: c2:76:2d:87:2f:2e:e6:26:a7:e4:21:b0:6a:1f:a4:d0:bf:42: 92:35:57:d2:8a:aa:af:9c:15:63:ac:e6:14:0b:c0:58:48:46: 29:2a:db:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim05e4jSm5lVKt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2JiN2RjOTMtMzI2Yi00YjU4LThkMTgtYWQ3OTYxNWZjYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFd/RY2fqMbYOsblTUgPsURRT5viH8rIClgn /ez5+lG1ojtDY3qVEMFz5hxGd+wez62WvtCs22/uoXp1JPgKpBiZQhPEqQw8j2dF +UUuL+NK4eeaq9qNEv+qnJfXwTYScuJyiyFtrv0bqnNoliPNzJHD/Va54UTynK/v aI+z59aYNA3h2GDRoJ6umOhyHLkw6Tn20C8p1MIcyY85ZDExlOfef/c3+UyScSJ7 bbGdPLyVCxyy2GwfPknVKbCjb5iZbtsipt7WZA17Sx5fzZRHDcZCOCPOH2MFk/bX NYDlN/ZFjGRY0tw+t//iEPWrKbiXmCzzjpTdE+r8662EsZehGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD1n0ALQM5QtIxKo9JlbAIpjMWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvMzA0MGU1ZDktMjNhNS0z YzA3LTk4NTQtNWYxYzNiMTBjODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBFKzjeWPUcY0mE49eSSDH7Jg6/Sufvdepj4jgr+RVl2lR+U0vI97oW v3Xxkq1cg29nl1iG4dwi5q/42OAWorw5UN7cl3koW2qQcU5RlofSegcVSwMgfscv pyBTJrB1jFoWntBSb+cN5UAp3zRp0D8PMEiuid9kDXbU0wasg2ZTzA7YDu+/Umhp kPBvww7CRLrsGz0Y+OWJpPj3FePiUUr22XROwSSjV3poLOlbSN1zUaRvgtaeNDBr XOhqOVQk7atyZSSlNDNPvyZ5CfTfocJOBe+kSIRbxsJ2LYcvLuYmp+QhsGofpNC/ QpI1V9KKqq+cFWOs5hQLwFhIRikq23U= -----END CERTIFICATE-----Generated at Sat Apr 5 17:49:57 2025 by rpki-client