$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa File: 288fc8dd-efe9-316a-a798-5d9657553ed5.roa (raw, json) Hash identifier: 0Z9vP/d9E9/oktTigceoigNBsKG7b6hlucJ3Z4avt1Q= Subject key identifier: E5:8B:18:04:17:8A:7E:00:A3:33:DD:3D:12:43:FA:18:9D:A5:13:DB Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F432858499DBF39FABA07C032957CFAE0 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 22241 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:39:fa:ba:07:c0:32:95:7c:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=a21b65e0-8add-4b6c-bf7c-dd40c50edbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:d1:f2:21:ec:f1:c3:c4:de:0b:a9:5a:cd: a8:82:3e:92:15:8b:bc:0c:a4:e1:ad:43:04:60:4f: 0c:1c:d0:e1:e2:8e:73:72:da:2a:9e:6e:4c:e0:12: e4:e9:cb:4c:4e:6c:50:0e:8c:46:e5:d5:a1:bc:6a: dc:57:c9:7c:5d:42:67:25:3a:24:45:86:46:58:71: 2b:86:3b:18:76:34:f4:40:b1:b9:0d:de:62:15:82: 27:ee:80:a9:b7:af:26:8d:68:de:94:88:5f:93:b8: 25:df:e7:7e:89:87:f5:d5:f2:b5:49:fb:e9:60:81: a2:20:a0:67:0f:f5:a3:a0:24:b0:ec:e3:15:42:3f: 94:89:ef:8a:fd:ab:2a:54:b5:31:22:47:94:f3:f4: df:9b:3e:51:27:38:14:18:7c:32:ce:e6:01:b9:69: 12:fb:a3:4a:1f:37:f4:5c:c6:15:cf:02:0e:16:ba: b6:e4:9a:2a:03:be:97:43:59:de:8f:36:7c:f6:59: 4b:b1:87:27:23:f0:a8:46:f3:8a:60:27:36:34:4c: 52:88:a2:d3:63:8f:35:86:e5:37:f8:99:05:75:df: 1f:cd:12:9f:4d:49:d4:78:78:63:c1:ad:71:27:74: 38:57:b3:99:c9:73:01:df:d5:f2:61:5b:b5:38:bc: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8B:18:04:17:8A:7E:00:A3:33:DD:3D:12:43:FA:18:9D:A5:13:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:a3:06:ff:05:0e:81:04:e5:92:42:65:75:48:7a:f1:c9: b0:51:d1:f4:8e:32:5e:96:8d:fb:4c:76:0c:d8:4e:bc:87:25: 9c:ec:a7:60:de:31:eb:71:fc:84:ae:2a:a6:b4:2e:90:80:91: af:9c:d6:36:aa:53:13:e2:ed:9d:32:7f:97:29:2c:b2:f5:de: a0:96:47:bc:50:fb:33:0c:bb:f2:11:28:15:da:00:a7:d6:23: 17:b0:83:6c:76:a4:4e:8a:70:2d:86:e1:d0:6f:f2:80:18:00: 67:95:d8:9f:33:b7:55:81:cc:32:9f:e1:c6:09:68:8e:4e:a1: 20:d2:29:88:de:75:c2:0f:85:94:7d:ac:da:ac:f6:f6:6e:4f: 5c:15:15:be:da:04:c0:d8:a3:f4:de:0e:82:cf:8a:c3:8c:9a: 02:e0:0e:13:f7:ef:e4:b3:46:ff:5a:de:08:a2:b8:b2:ab:2b: 32:fb:87:9f:ce:1a:4b:67:25:6a:ea:bb:7e:d1:a5:03:b0:81: c9:5a:86:5c:43:04:8d:ed:41:68:31:8b:8e:bc:b4:4f:c4:f8: 5e:38:18:66:21:54:04:4f:56:c1:ec:29:f7:62:79:1e:8e:db: 98:d1:ae:21:ab:9c:b0:c0:79:a7:47:d2:e5:99:c0:b6:98:3e: 2e:74:31:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzn6ugfAMpV8+uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YTIxYjY1ZTAtOGFkZC00YjZjLWJmN2MtZGQ0MGM1MGVkYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqHR8iHs8cPE3gupWs2ogj6SFYu8DKThrUME YE8MHNDh4o5zctoqnm5M4BLk6ctMTmxQDoxG5dWhvGrcV8l8XUJnJTokRYZGWHEr hjsYdjT0QLG5Dd5iFYIn7oCpt68mjWjelIhfk7gl3+d+iYf11fK1SfvpYIGiIKBn D/WjoCSw7OMVQj+Uie+K/asqVLUxIkeU8/Tfmz5RJzgUGHwyzuYBuWkS+6NKHzf0 XMYVzwIOFrq25JoqA76XQ1nejzZ89llLsYcnI/CoRvOKYCc2NExSiKLTY481huU3 +JkFdd8fzRKfTUnUeHhjwa1xJ3Q4V7OZyXMB39XyYVu1OLzGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWLGAQXin4AozPdPRJD+hidpRPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjg4ZmM4ZGQtZWZlOS0z MTZhLWE3OTgtNWQ5NjU3NTUzZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Cowb/BQ6BBOWSQmV1SHrxybBR0fSOMl6WjftMdgzYTryHJZzsp2De Metx/ISuKqa0LpCAka+c1jaqUxPi7Z0yf5cpLLL13qCWR7xQ+zMMu/IRKBXaAKfW Ixewg2x2pE6KcC2G4dBv8oAYAGeV2J8zt1WBzDKf4cYJaI5OoSDSKYjedcIPhZR9 rNqs9vZuT1wVFb7aBMDYo/TeDoLPisOMmgLgDhP37+SzRv9a3giiuLKrKzL7h5/O GktnJWrqu37RpQOwgclahlxDBI3tQWgxi468tE/E+F44GGYhVARPVsHsKfdieR6O 25jRriGrnLDAeadH0uWZwLaYPi50MZo= -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:55 2025 by rpki-client