$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa File: 2541f1b1-088d-30fb-a498-b60976d5c04d.roa (raw, json) Hash identifier: MotNBL/3VrwZS8URPv3bb3aUJ3PJKEM0+Nv9hIDVxWQ= Subject key identifier: CF:45:C8:FE:45:DA:64:50:B5:DD:FD:F2:71:28:17:4E:EA:A8:AC:5B Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F43285849D85F897E9E65BC63613BD300 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 395363 IP address blocks: 52.119.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:89:7e:9e:65:bc:63:61:3b:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=8d72b450-caad-403b-a85c-7cb21b6e8ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:69:6d:f2:fb:a5:9f:e4:66:a1:62:e0:92: e6:2c:05:b7:95:a2:c6:53:41:e4:a2:9c:6e:d2:e5: c1:76:9e:0d:a5:fe:a8:dc:13:20:14:1f:ff:79:a2: 5d:13:b8:2b:a0:f9:c3:06:09:3e:49:00:4a:1e:53: bf:41:27:f6:98:9c:fa:54:d6:e4:bf:4d:19:ca:94: 84:da:9d:3b:a1:7a:94:8e:84:9e:89:ea:8a:47:3c: 2e:f7:4e:79:1f:d9:fd:50:cc:b0:e0:30:38:c7:b3: f2:3d:c2:ad:71:45:5c:a9:7b:95:10:37:62:72:c8: e2:4a:74:36:41:00:2c:cd:29:5d:b2:5a:75:df:19: fb:e7:42:6f:d5:5e:7d:fc:6f:74:27:ce:68:05:ac: 8f:c9:95:7a:eb:d8:94:a5:ad:63:1b:96:c6:12:7c: cd:85:73:ba:0b:77:d4:91:7c:05:5a:f5:80:d8:bb: 1e:bd:67:39:b2:b4:96:67:01:7f:9f:5a:15:83:b8: 39:e8:48:e0:2e:db:8c:19:7e:04:b8:8e:8b:0d:9c: 92:92:e2:fd:da:d7:2d:40:4f:5e:1d:e1:4c:8d:50: 10:92:99:56:4a:c3:c0:7f:c5:45:72:71:26:46:fb: be:d2:f8:5a:67:a7:c4:37:c3:f4:bc:51:74:04:a6: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:45:C8:FE:45:DA:64:50:B5:DD:FD:F2:71:28:17:4E:EA:A8:AC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0e:e7:02:16:15:5a:19:a2:98:bd:dc:a6:28:39:ad:a4:df: 34:f7:2e:ba:81:0f:be:89:11:55:a1:ed:7f:0d:e8:79:c7:7b: 80:fd:71:13:df:1b:38:f3:f8:3d:73:ff:2b:10:5d:56:b9:ed: 8d:74:2e:5e:49:10:f0:da:dc:d2:6c:c4:8d:20:f4:77:59:94: 06:c5:9a:58:64:c7:1e:05:cc:a9:83:33:3e:7d:c9:b6:84:01: 59:22:e4:f2:ea:cc:91:42:a2:42:72:c4:79:65:09:19:7b:7f: 23:26:67:ce:a2:27:7f:fc:f8:7a:81:c1:29:ba:f1:a5:ae:95: b9:18:a3:e0:e3:cc:29:90:6c:d4:32:8d:48:a6:d3:ea:62:f6: ec:2d:3c:e4:00:e7:e1:47:d1:22:aa:de:20:f2:58:e0:fa:dc: 0b:7c:c7:4b:72:c3:52:49:67:69:1c:2e:6e:27:0a:79:33:36: 51:6c:9a:70:07:b1:72:ab:02:66:6f:d6:af:d2:50:a1:eb:2a: c3:40:50:97:45:aa:7b:f5:4f:e9:1d:9d:7e:68:6c:f1:14:ab: cd:19:e5:1d:84:90:ad:4c:64:37:2c:ce:4b:87:0b:9b:ba:86: 30:f5:68:65:0a:9b:70:f1:31:77:6c:aa:23:f6:27:2c:0d:89: 0f:f9:d5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4l+nmW8Y2E70wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OGQ3MmI0NTAtY2FhZC00MDNiLWE4NWMtN2NiMjFiNmU4ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhpbfL7pZ/kZqFi4JLmLAW3laLGU0Hkopxu 0uXBdp4Npf6o3BMgFB//eaJdE7groPnDBgk+SQBKHlO/QSf2mJz6VNbkv00ZypSE 2p07oXqUjoSeieqKRzwu9055H9n9UMyw4DA4x7PyPcKtcUVcqXuVEDdicsjiSnQ2 QQAszSldslp13xn750Jv1V59/G90J85oBayPyZV669iUpa1jG5bGEnzNhXO6C3fU kXwFWvWA2LsevWc5srSWZwF/n1oVg7g56EjgLtuMGX4EuI6LDZySkuL92tctQE9e HeFMjVAQkplWSsPAf8VFcnEmRvu+0vhaZ6fEN8P0vFF0BKbLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9FyP5F2mRQtd398nEoF07qqKxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvMjU0MWYxYjEtMDg4ZC0z MGZiLWE0OTgtYjYwOTc2ZDVjMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsO5wIWFVoZopi93KYoOa2k3zT3LrqBD76JEVWh7X8N6HnHe4D9cRPf Gzjz+D1z/ysQXVa57Y10Ll5JEPDa3NJsxI0g9HdZlAbFmlhkxx4FzKmDMz59ybaE AVki5PLqzJFCokJyxHllCRl7fyMmZ86iJ3/8+HqBwSm68aWulbkYo+DjzCmQbNQy jUim0+pi9uwtPOQA5+FH0SKq3iDyWOD63At8x0tyw1JJZ2kcLm4nCnkzNlFsmnAH sXKrAmZv1q/SUKHrKsNAUJdFqnv1T+kdnX5obPEUq80Z5R2EkK1MZDcszkuHC5u6 hjD1aGUKm3DxMXdsqiP2JywNiQ/51Zw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:11 2025 by rpki-client