$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa File: 29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa (raw, json) Hash identifier: SmxJTWpNo9PdnXwW0qjrWMPbhz3OFMFIu66b0BPaayk= Subject key identifier: DA:B5:D1:38:11:2A:C9:EB:32:1A:CE:08:4F:28:61:47:E6:8D:37:72 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584A7BB0B8575AEFF8787D916830 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 22241 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b8:57:5a:ef:f8:78:7d:91:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=054a9ba9-a2b6-40e9-b991-5bde71b19763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:af:c5:4e:c4:e4:ee:69:e0:22:aa:9c:ef: 3c:c8:35:58:73:08:bc:f7:ba:81:f6:64:62:82:ac: 3a:3a:b8:0b:39:92:e1:3d:99:73:2d:e2:12:b4:54: ce:e6:01:62:96:97:0d:7b:0d:a3:cc:cc:41:2f:78: c8:f2:8f:03:2a:cf:9e:9b:1e:1f:7f:a9:d4:f2:ff: 82:79:9d:8e:60:86:0d:9f:53:77:e2:78:63:d3:dd: 13:5c:14:81:3e:b6:bb:18:a4:78:21:a2:f7:4c:3d: 77:86:1b:af:4f:cc:84:fe:ff:78:39:24:66:19:66: fa:50:98:e0:be:a1:a1:f1:07:8b:78:d1:5f:34:6f: 1f:aa:42:6c:43:93:3b:22:54:4a:f9:f2:fe:75:01: c9:fd:31:0c:66:ff:b7:4a:70:f9:6c:47:8a:ba:9f: c9:5a:99:7a:34:fe:70:94:ed:f4:62:b4:4b:2b:bc: 1a:61:f7:8d:7f:c1:23:32:f1:5e:89:c8:67:08:b4: 19:f4:ee:a2:12:89:c3:8f:79:a2:52:4e:16:35:de: fc:ff:2f:c7:50:e8:7e:22:ed:62:1f:02:41:60:43: b2:97:5f:e3:8e:00:aa:34:22:1c:9b:a2:51:c1:11: f9:53:2e:ee:20:16:75:54:70:b1:11:df:e7:9c:ac: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:D1:38:11:2A:C9:EB:32:1A:CE:08:4F:28:61:47:E6:8D:37:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/29d7ee2b-4783-3751-abe0-c1e95aaa9ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:12:fd:9d:3c:53:25:5a:37:08:5d:42:8d:a3:dc:7b:b0:c6: 41:6d:c6:c1:8a:09:60:40:30:05:1b:0c:21:14:37:21:ce:36: 48:c8:a0:6b:e0:c1:18:22:c5:1f:98:1d:bc:78:e2:52:ad:15: 85:b4:21:f2:12:00:90:58:ae:63:68:29:5f:26:d5:9a:3f:69: a9:e3:61:32:8c:2d:9c:78:3e:56:fa:9d:fd:91:61:3c:82:a4: be:cd:73:c3:8a:04:fe:93:02:be:9e:82:92:ea:a7:3d:b5:65: 5d:29:8a:45:cd:60:97:73:83:b1:c6:18:26:2b:9f:91:32:1d: 1d:7f:bb:50:a9:fd:7e:70:11:6c:92:f8:f8:29:06:d1:e3:77: e7:78:a5:ca:3e:55:04:a2:4d:94:f4:21:15:3c:e3:c1:cd:2e: 82:8b:6f:54:08:c6:43:c5:b8:e3:fc:c4:94:f3:75:4c:a1:34: 38:86:66:90:26:5f:98:e0:be:8b:92:75:3f:86:00:8d:03:2e: 50:4f:3d:70:c3:46:87:c9:15:8e:73:9a:45:49:68:b9:ad:29: 79:06:8a:e7:8e:80:e7:77:19:c2:ba:6d:a9:38:57:73:a3:73: ed:55:c6:d5:41:4d:94:a9:56:1e:f8:1a:16:cd:64:7c:11:a2: e5:a1:1a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLhXWu/4eH2RaDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MDU0YTliYTktYTJiNi00MGU5LWI5OTEtNWJkZTcxYjE5NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikmvxU7E5O5p4CKqnO88yDVYcwi897qB9mRi gqw6OrgLOZLhPZlzLeIStFTO5gFilpcNew2jzMxBL3jI8o8DKs+emx4ff6nU8v+C eZ2OYIYNn1N34nhj090TXBSBPra7GKR4IaL3TD13hhuvT8yE/v94OSRmGWb6UJjg vqGh8QeLeNFfNG8fqkJsQ5M7IlRK+fL+dQHJ/TEMZv+3SnD5bEeKup/JWpl6NP5w lO30YrRLK7waYfeNf8EjMvFeichnCLQZ9O6iEonDj3miUk4WNd78/y/HUOh+Iu1i HwJBYEOyl1/jjgCqNCIcm6JRwRH5Uy7uIBZ1VHCxEd/nnKxAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq10TgRKsnrMhrOCE8oYUfmjTdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjlkN2VlMmItNDc4My0z NzUxLWFiZTAtYzFlOTVhYWE5ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIES/Z08UyVaNwhdQo2j3HuwxkFtxsGKCWBAMAUbDCEUNyHONkjIoGvg wRgixR+YHbx44lKtFYW0IfISAJBYrmNoKV8m1Zo/aanjYTKMLZx4Plb6nf2RYTyC pL7Nc8OKBP6TAr6egpLqpz21ZV0pikXNYJdzg7HGGCYrn5EyHR1/u1Cp/X5wEWyS +PgpBtHjd+d4pco+VQSiTZT0IRU848HNLoKLb1QIxkPFuOP8xJTzdUyhNDiGZpAm X5jgvouSdT+GAI0DLlBPPXDDRofJFY5zmkVJaLmtKXkGiueOgOd3GcK6bak4V3Oj c+1VxtVBTZSpVh74GhbNZHwRouWhGi0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:18 2025 by rpki-client