$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa File: 3e5453eb-9c31-3840-8aaf-140329db4864.roa (raw, json) Hash identifier: Tk8kVxvDFCkFCbk6BEpm2AszQAXtoVDK2KNMcYmJsTI= Subject key identifier: 57:CA:E1:99:1C:6B:9A:63:8E:20:43:AF:40:B9:9B:68:7B:00:39:BC Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F4328584A1465623BD1C6BD1769743180 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 52.129.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:62:3b:d1:c6:bd:17:69:74:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=c361fe56-fac8-4fc0-b26f-14f21966b44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:5b:a8:61:90:19:00:a7:0c:4c:22:f9:32: 5d:16:d1:a0:98:6b:42:db:24:74:49:48:f2:31:31: 8c:6d:ec:ce:75:0a:5f:d3:ca:92:9e:7d:f7:23:20: 6a:8d:cf:48:42:4d:36:68:b2:8e:6e:fb:77:36:0d: 98:3f:b6:f7:40:39:cd:be:48:de:b2:d8:fd:64:c2: a7:a1:22:ba:3b:3b:95:5f:ea:1d:07:2c:c1:c8:19: b1:fa:1c:6b:04:72:1a:1a:4b:70:a5:e6:02:eb:c6: ed:1a:a0:53:3c:b9:64:19:24:6d:c2:5b:b0:6a:cf: 8d:f6:39:a5:a6:28:34:c2:92:d2:cf:28:14:00:00: 94:2a:12:56:6f:14:b0:fa:8b:1e:37:d4:ba:55:18: b2:a3:00:f0:21:35:88:39:67:b0:57:a3:49:3d:ee: 84:1d:b7:40:a7:f3:21:53:89:30:6a:74:cf:81:af: ad:6e:a3:bc:31:20:ef:6e:d8:a4:74:4f:7e:a0:a6: c4:03:a7:4f:5b:19:3c:94:97:95:e9:66:cf:65:64: 9d:43:f1:41:26:00:9e:f8:0d:db:8a:3e:c5:03:90: b2:69:92:fc:17:81:89:d0:17:7e:8f:c8:c6:2a:86: 24:cc:da:a5:1e:ec:75:04:ee:f0:81:83:15:51:5c: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CA:E1:99:1C:6B:9A:63:8E:20:43:AF:40:B9:9B:68:7B:00:39:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:78:27:aa:74:ae:7b:eb:66:29:72:45:69:1e:91:d8:3b: a8:93:ba:cb:c4:fe:fa:40:e2:af:02:4a:84:5c:c3:78:aa:99: 23:1a:0a:5d:ed:9a:c3:1a:fc:89:1e:7c:b8:04:67:11:5c:47: c4:76:84:6a:0f:ac:96:b0:d2:cd:4e:10:34:0f:0d:e0:38:4c: 0d:f2:f4:2d:e0:ac:d7:c3:d7:71:7b:8c:19:37:e9:91:be:41: 43:a2:37:be:f6:1d:51:dc:d6:98:08:b8:a1:e6:47:4c:5f:0b: d4:87:c8:d6:50:ae:4f:24:95:21:49:ee:2e:82:39:1b:30:eb: ec:8a:b2:d9:15:31:65:ab:8e:08:c3:d4:45:84:57:5a:e1:7c: f2:25:a9:eb:66:2c:38:06:18:d0:78:b7:ff:e1:0f:62:2e:5e: 7d:66:33:83:e0:f5:81:81:12:10:50:7d:d1:05:74:90:68:0c: 27:e8:ae:a3:d1:3c:5d:64:b1:ab:35:dd:d7:dc:ab:b0:b2:92: db:4c:2b:28:87:18:7b:18:37:e4:1d:f5:9a:14:a8:26:8d:a6: 70:48:e9:22:f0:31:a6:96:b9:0c:ae:65:a2:61:59:c1:6f:5b: 36:e8:ca:54:8a:7b:1b:59:6d:75:7c:5f:95:b4:be:02:50:3d: 82:7e:73:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWI70ca9F2l0MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YzM2MWZlNTYtZmFjOC00ZmMwLWIyNmYtMTRmMjE5NjZiNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgchbqGGQGQCnDEwi+TJdFtGgmGtC2yR0SUjy MTGMbezOdQpf08qSnn33IyBqjc9IQk02aLKObvt3Ng2YP7b3QDnNvkjestj9ZMKn oSK6OzuVX+odByzByBmx+hxrBHIaGktwpeYC68btGqBTPLlkGSRtwluwas+N9jml pig0wpLSzygUAACUKhJWbxSw+oseN9S6VRiyowDwITWIOWewV6NJPe6EHbdAp/Mh U4kwanTPga+tbqO8MSDvbtikdE9+oKbEA6dPWxk8lJeV6WbPZWSdQ/FBJgCe+A3b ij7FA5CyaZL8F4GJ0Bd+j8jGKoYkzNqlHux1BO7wgYMVUVyVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfK4Zkca5pjjiBDr0C5m2h7ADm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvM2U1NDUzZWItOWMzMS0z ODQwLThhYWYtMTQwMzI5ZGI0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkteCeqdK5762YpckVpHpHYO6iTusvE/vpA4q8CSoRcw3iqmSMaCl3t msMa/IkefLgEZxFcR8R2hGoPrJaw0s1OEDQPDeA4TA3y9C3grNfD13F7jBk36ZG+ QUOiN772HVHc1pgIuKHmR0xfC9SHyNZQrk8klSFJ7i6CORsw6+yKstkVMWWrjgjD 1EWEV1rhfPIlqetmLDgGGNB4t//hD2IuXn1mM4Pg9YGBEhBQfdEFdJBoDCforqPR PF1ksas13dfcq7CykttMKyiHGHsYN+Qd9ZoUqCaNpnBI6SLwMaaWuQyuZaJhWcFv WzboylSKextZbXV8X5W0vgJQPYJ+c1I= -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:05 2025 by rpki-client