$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: r/3dxQu1F10pqDDexL+P67QOpg/xtyrBT4PotQa8dVw= Subject key identifier: 48:AE:DF:AF:7D:F8:D3:01:47:2D:B9:14:22:6A:42:69:01:E8:72:FB Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584971143590DDBE980FB3569880 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:35:90:dd:be:98:0f:b3:56:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=972183d2-4f9b-4002-8433-d20293241bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:a1:53:28:36:57:6b:07:cb:0d:af:3c:22: 26:40:6d:0d:e4:e6:62:49:20:2d:4e:23:26:60:c0: f2:29:e3:13:1f:be:c8:0b:b6:c6:86:70:b9:0b:ce: d5:9b:49:b3:d8:4a:99:a2:64:17:79:1e:00:42:6d: 45:5e:8e:98:55:8c:f9:f2:49:9a:0f:c2:d3:8e:e4: a8:ad:3e:e5:71:a9:a2:f3:8d:1b:53:8f:0b:c6:fb: 62:8c:75:49:fe:29:a3:c5:a5:3f:f2:e4:bd:5e:60: 7e:ff:bf:99:a1:d8:24:36:25:5b:9b:9e:6c:62:88: 72:36:91:4d:2a:dd:03:2f:cf:29:d4:32:33:91:6e: 03:94:6a:23:b6:c8:9f:73:57:39:2c:0b:4c:54:44: 1b:92:b5:9a:c6:7e:45:46:15:ba:a8:68:ca:79:b9: 67:66:89:1e:60:8b:04:c5:f2:01:8e:fe:05:01:d9: 77:05:be:80:84:24:c5:62:b6:23:93:29:0e:e2:b5: 52:ff:78:d9:a9:a2:88:f1:b5:97:5d:eb:08:78:3d: ff:65:e0:9b:17:c0:77:30:8c:90:f7:4f:e4:8d:fc: 77:ab:b2:80:d7:29:90:75:2d:35:f9:29:8c:70:42: 34:fb:5d:bf:6d:da:c6:52:bf:f0:61:fd:a4:24:26: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:DF:AF:7D:F8:D3:01:47:2D:B9:14:22:6A:42:69:01:E8:72:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:71:a3:44:3e:a5:bd:a2:dd:ae:02:c5:1c:59:aa:08:42:56: a8:6c:5b:2a:2d:48:d0:26:b7:ad:56:f1:d2:65:ea:91:63:2d: 94:12:1c:10:7e:71:43:b6:dc:14:b3:e1:4e:64:f7:b4:08:ca: 72:02:bb:6f:15:3b:a6:21:9e:93:f4:b2:2c:49:30:6a:20:a3: 60:26:2e:a2:5f:db:27:9c:b1:09:a6:36:be:4a:39:42:da:2e: 80:b6:e0:26:33:88:09:b3:cc:17:3d:26:67:b8:76:af:b3:74: 9f:1b:5d:bb:6c:8a:8b:ca:b3:01:ad:34:03:57:aa:10:05:01: c0:85:00:85:61:6b:41:52:bb:b6:72:f6:43:e6:fb:5a:9a:97: 74:af:01:68:0c:d8:81:2e:58:91:64:c4:a4:44:f0:f8:4b:86: 13:cd:f2:f9:13:ac:95:60:44:8a:be:36:f1:e2:84:b6:84:a9: 48:93:73:11:88:3e:61:7d:b7:c1:93:cc:40:2e:d9:11:04:b9: c4:d7:a7:ff:b4:02:92:86:f4:88:db:75:14:7b:d1:2a:16:7e: 24:50:a6:49:d0:72:a8:c0:21:f0:00:b8:d8:6e:cb:df:53:5e: ed:7a:93:e3:07:90:c9:8e:ed:d0:b2:cf:71:31:8f:9a:a1:59: fa:c4:b0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDWQ3b6YD7NWmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk OTcyMTgzZDItNGY5Yi00MDAyLTg0MzMtZDIwMjkzMjQxYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/qhUyg2V2sHyw2vPCImQG0N5OZiSSAtTiMm YMDyKeMTH77IC7bGhnC5C87Vm0mz2EqZomQXeR4AQm1FXo6YVYz58kmaD8LTjuSo rT7lcami840bU48LxvtijHVJ/imjxaU/8uS9XmB+/7+ZodgkNiVbm55sYohyNpFN Kt0DL88p1DIzkW4DlGojtsifc1c5LAtMVEQbkrWaxn5FRhW6qGjKeblnZokeYIsE xfIBjv4FAdl3Bb6AhCTFYrYjkykO4rVS/3jZqaKI8bWXXesIeD3/ZeCbF8B3MIyQ 90/kjfx3q7KA1ymQdS01+SmMcEI0+12/bdrGUr/wYf2kJCbr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiu3699+NMBRy25FCJqQmkB6HL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVxo0Q+pb2i3a4CxRxZqghCVqhsWyotSNAmt61W8dJl6pFjLZQSHBB+ cUO23BSz4U5k97QIynICu28VO6YhnpP0sixJMGogo2AmLqJf2yecsQmmNr5KOULa LoC24CYziAmzzBc9Jme4dq+zdJ8bXbtsiovKswGtNANXqhAFAcCFAIVha0FSu7Zy 9kPm+1qal3SvAWgM2IEuWJFkxKRE8PhLhhPN8vkTrJVgRIq+NvHihLaEqUiTcxGI PmF9t8GTzEAu2REEucTXp/+0ApKG9IjbdRR70SoWfiRQpknQcqjAIfAAuNhuy99T Xu16k+MHkMmO7dCyz3Exj5qhWfrEsEY= -----END CERTIFICATE-----Generated at Mon Apr 28 02:05:30 2025 by rpki-client