$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa File: 288fc8dd-efe9-316a-a798-5d9657553ed5.roa (raw, json) Hash identifier: a+Abr+Lm720a5KKVpuL70vm9FAatd70yK9C5fDoBmMk= Subject key identifier: B4:44:09:CD:E2:35:D7:E7:E4:21:D0:9D:8A:9B:CF:5F:63:63:2E:68 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584A7D1601975612DD6D84987180 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 22241 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:01:97:56:12:dd:6d:84:98:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=d42ca657-b095-4284-b11c-ccda6db7bd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:4e:e3:03:58:ef:99:30:4c:a1:6f:b7:40: fa:95:c7:e4:9b:fa:da:dd:3d:07:de:48:c3:1c:d2: f7:5e:13:bf:c1:37:1e:2a:01:77:93:ec:51:97:4f: 72:c8:08:da:06:46:7d:80:d6:52:da:65:a7:02:f6: 16:09:64:dd:25:a1:8d:0e:a7:69:ca:c9:68:0b:3f: ae:1c:64:5b:3e:9f:8f:37:17:c5:15:29:f6:c9:14: 41:3a:2c:a5:e3:03:71:8f:21:fe:57:8c:5b:d6:f9: ba:96:0b:f3:30:2e:42:ca:5a:04:ea:9c:40:e7:28: f3:92:9e:8f:77:1d:70:a8:ea:7f:a8:11:cb:2f:e4: 66:ec:76:67:15:a5:82:74:4a:5e:a5:40:79:d5:23: 7b:6a:1b:8b:36:13:f1:72:49:c9:5f:b9:4f:b9:20: 88:7b:41:3a:e9:f7:75:02:2c:03:b4:69:ff:b0:59: 8e:ee:a5:0d:a8:65:ce:5e:4a:03:16:15:35:c0:86: 0f:52:6d:bd:2e:40:20:1f:f2:f8:25:8c:fc:46:a0: ca:18:ef:52:83:ef:0b:3d:6c:78:d9:b7:ae:6f:38: 49:2f:31:24:7f:48:0f:b6:1b:d6:38:77:56:0f:ef: d1:74:43:b3:5c:6c:0f:24:fe:8e:fd:96:a2:d6:8a: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:09:CD:E2:35:D7:E7:E4:21:D0:9D:8A:9B:CF:5F:63:63:2E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b8:83:ff:27:8b:8d:bb:a8:32:fb:77:0a:4a:a7:29:f1:15: af:14:ff:c5:cd:72:4a:ad:01:25:3a:8e:1b:45:ca:9e:d1:1b: 53:45:f1:a3:8b:11:20:32:86:20:9d:69:c5:c5:71:c2:61:d6: 1d:f0:b9:b9:38:66:f0:cf:55:81:ee:90:21:0e:eb:c7:6c:bb: 45:30:8e:7a:1a:cd:24:32:c4:a4:55:59:ee:cd:cf:de:ef:16: f5:6e:6d:4e:e9:05:19:94:6a:c6:45:1b:07:2a:10:49:cc:9c: 1b:59:47:4c:22:69:71:a3:44:32:39:ea:db:3f:ae:04:ba:e0: f8:da:da:cf:56:b8:5b:4a:85:9e:7f:f6:5f:3d:a9:2d:54:3b: c0:93:a7:71:59:5f:5c:d6:6a:d6:a6:41:d0:de:7a:e1:b8:9c: 33:51:e3:5f:ca:60:b0:b6:ef:69:14:5b:aa:cf:0b:af:a7:36: 7a:65:98:ba:94:4c:d3:d3:99:68:3c:ce:fd:d5:76:64:ca:4a: f4:9d:f7:fc:73:60:7d:5d:a6:29:93:20:ba:de:25:51:f2:87: a4:5e:a1:84:e6:c7:c9:44:bb:a6:dc:48:11:19:86:1f:d1:3a: 8b:8b:b2:e9:a5:62:b0:19:fe:7a:3b:e8:ed:1f:dd:98:eb:5c: 12:07:8d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgGXVhLdbYSYcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDQyY2E2NTctYjA5NS00Mjg0LWIxMWMtY2NkYTZkYjdiZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX9O4wNY75kwTKFvt0D6lcfkm/ra3T0H3kjD HNL3XhO/wTceKgF3k+xRl09yyAjaBkZ9gNZS2mWnAvYWCWTdJaGNDqdpysloCz+u HGRbPp+PNxfFFSn2yRRBOiyl4wNxjyH+V4xb1vm6lgvzMC5CyloE6pxA5yjzkp6P dx1wqOp/qBHLL+Rm7HZnFaWCdEpepUB51SN7ahuLNhPxcknJX7lPuSCIe0E66fd1 AiwDtGn/sFmO7qUNqGXOXkoDFhU1wIYPUm29LkAgH/L4JYz8RqDKGO9Sg+8LPWx4 2beubzhJLzEkf0gPthvWOHdWD+/RdEOzXGwPJP6O/Zai1oqchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRECc3iNdfn5CHQnYqbz19jYy5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjg4ZmM4ZGQtZWZlOS0z MTZhLWE3OTgtNWQ5NjU3NTUzZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq4g/8ni427qDL7dwpKpynxFa8U/8XNckqtASU6jhtFyp7RG1NF8aOL ESAyhiCdacXFccJh1h3wubk4ZvDPVYHukCEO68dsu0UwjnoazSQyxKRVWe7Nz97v FvVubU7pBRmUasZFGwcqEEnMnBtZR0wiaXGjRDI56ts/rgS64Pja2s9WuFtKhZ5/ 9l89qS1UO8CTp3FZX1zWatamQdDeeuG4nDNR41/KYLC272kUW6rPC6+nNnplmLqU TNPTmWg8zv3VdmTKSvSd9/xzYH1dpimTILreJVHyh6ReoYTmx8lEu6bcSBEZhh/R OouLsumlYrAZ/no76O0f3ZjrXBIHjRA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:54:35 2025 by rpki-client