$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa File: 29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa (raw, json) Hash identifier: jWVylvAYh4v4YhKlD3XhyOQSJNQfkQv++Omd7LpQepY= Subject key identifier: C8:0D:E3:42:D4:19:B8:35:13:F4:79:A3:DC:54:94:9C:41:11:F0:C3 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F432858499C59E81B5E44DC31EFA98280 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 22241 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e8:1b:5e:44:dc:31:ef:a9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=0d0f3abb-6f2c-4f31-9c84-176e02ce1a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:b8:74:1b:a4:0d:a9:7c:aa:6c:5d:50:7e: 5b:86:e2:70:69:d7:24:d1:52:2d:5c:6b:39:68:b6: d4:a2:29:91:4a:ba:74:b2:b1:7f:8f:ff:15:cc:0c: 2b:82:fa:b2:e5:d7:b4:68:e2:1d:d8:20:37:6b:fb: 2e:d9:36:f0:7f:45:62:40:35:ca:aa:42:11:eb:3f: 1d:78:1a:b2:fa:a2:1a:c6:65:5f:6a:0b:b7:46:5c: fe:f0:43:2f:76:61:f9:8d:4d:2a:66:18:db:b0:82: 1c:2b:34:b2:ce:6b:01:df:3e:e2:f4:8b:b6:b2:13: 85:82:bb:43:a5:6b:95:74:f7:59:b4:ee:84:ad:b2: 18:6b:bf:a4:18:b6:c3:cd:49:c8:50:77:dd:cf:1d: b2:f8:b0:ec:ff:3f:45:24:20:d7:0f:aa:77:ef:fe: 9c:d1:78:a9:b6:99:55:a3:d8:e0:2f:7a:c0:0e:5e: 92:98:4f:d2:f6:5c:7b:f0:aa:aa:c2:9c:f2:ce:b5: 10:0d:31:db:3a:dd:4d:a9:ee:2f:8e:77:50:17:8f: d8:cc:7d:fb:2f:a0:3a:b2:83:43:61:c6:6b:a0:f8: da:f9:6f:be:1f:93:ee:91:41:e3:31:8b:61:d0:75: 7e:5e:93:18:71:68:38:df:b9:c4:c1:45:f8:df:ef: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0D:E3:42:D4:19:B8:35:13:F4:79:A3:DC:54:94:9C:41:11:F0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:a3:c4:8c:55:25:19:98:d3:8d:22:3b:51:70:4d:37:99: 0b:a4:33:ae:58:67:25:07:b9:c9:82:d2:df:43:d2:60:28:2d: 13:b7:d2:d0:a0:be:9a:93:31:e9:90:7b:66:02:6e:d5:f9:d0: 83:81:7b:2b:8a:03:e7:95:20:51:f1:c3:5d:dd:ae:ea:fb:54: 19:61:b8:17:d7:46:2e:ec:11:2f:1f:b6:97:fa:9b:39:71:59: e8:e1:ff:ca:c2:dc:12:c2:5f:0f:b6:97:60:1c:1a:12:80:92: 75:c6:61:57:94:92:21:eb:ff:80:47:e3:32:99:1c:4b:24:b3: e7:40:04:53:f7:e6:44:a5:c1:fc:48:91:a5:49:0c:15:7d:8e: 83:63:da:ba:e6:04:a6:5a:8b:aa:7b:16:07:af:76:ef:e3:2d: 70:ff:bb:19:8a:7c:a3:fe:81:b7:2b:45:3f:49:db:63:24:e2: 54:0b:65:5e:45:53:c1:05:e7:02:84:df:32:fa:76:7f:11:af: d7:f4:73:25:2f:02:ff:36:29:d5:42:61:53:9d:2a:92:ff:25: 00:a6:53:b0:f9:70:6e:c1:cb:42:b4:8e:22:6a:dd:4d:20:33: fa:4d:e3:e4:9c:31:e6:fb:be:9e:2f:e1:1e:6a:b0:c3:7c:8f: 05:ff:c1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWegbXkTcMe+pgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MGQwZjNhYmItNmYyYy00ZjMxLTljODQtMTc2ZTAyY2UxYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj+4dBukDal8qmxdUH5bhuJwadck0VItXGs5 aLbUoimRSrp0srF/j/8VzAwrgvqy5de0aOId2CA3a/su2Tbwf0ViQDXKqkIR6z8d eBqy+qIaxmVfagu3Rlz+8EMvdmH5jU0qZhjbsIIcKzSyzmsB3z7i9Iu2shOFgrtD pWuVdPdZtO6ErbIYa7+kGLbDzUnIUHfdzx2y+LDs/z9FJCDXD6p37/6c0XiptplV o9jgL3rADl6SmE/S9lx78KqqwpzyzrUQDTHbOt1Nqe4vjndQF4/YzH37L6A6soND YcZroPja+W++H5PukUHjMYth0HV+XpMYcWg437nEwUX43+92CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgN40LUGbg1E/R5o9xUlJxBEfDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjlkN2VlMmItNDc4My0z NzUxLWFiZTAtYzFlOTVhYWE5ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp5o8SMVSUZmNONIjtRcE03mQukM65YZyUHucmC0t9D0mAoLRO30tCg vpqTMemQe2YCbtX50IOBeyuKA+eVIFHxw13drur7VBlhuBfXRi7sES8ftpf6mzlx Wejh/8rC3BLCXw+2l2AcGhKAknXGYVeUkiHr/4BH4zKZHEsks+dABFP35kSlwfxI kaVJDBV9joNj2rrmBKZai6p7Fgevdu/jLXD/uxmKfKP+gbcrRT9J22Mk4lQLZV5F U8EF5wKE3zL6dn8Rr9f0cyUvAv82KdVCYVOdKpL/JQCmU7D5cG7By0K0jiJq3U0g M/pN4+ScMeb7vp4v4R5qsMN8jwX/wXc= -----END CERTIFICATE-----Generated at Tue Apr 29 07:07:48 2025 by rpki-client