$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: 63jlby/cpbfXhnX+aIvt0NCdzPJ+LrFitlmCXZsvuOE= Subject key identifier: 3B:54:00:F5:26:36:56:71:CB:5E:B0:F4:52:32:99:D8:F9:AD:D6:D6 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584964844457EF9D39C19F8052E8 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:44:57:ef:9d:39:c1:9f:80:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=ec135bcd-412b-4e56-90a8-7f352e0dd230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:d1:00:a7:de:93:0d:f2:4f:9a:4b:7e:3d: f3:9c:68:8a:87:76:f5:d6:d8:1f:5a:41:30:e1:9c: 06:65:07:39:39:01:3a:a3:12:f4:f2:d6:0f:cf:ca: 06:d1:42:0c:89:5d:cb:25:cb:eb:5c:55:7b:24:b7: b7:f1:f4:f6:97:dd:c9:ee:2f:8a:d8:12:17:3b:b6: 4c:cd:bc:80:cc:aa:72:7d:ac:40:eb:60:d8:d8:95: 43:82:d7:af:2e:57:7c:7c:32:8f:c3:b0:e5:94:3e: 71:3b:a5:c9:94:ad:d9:e9:2d:27:42:23:ad:f9:1c: b1:04:5e:f1:cc:7e:f1:65:ac:9c:63:1c:25:24:e1: 0f:08:79:a2:b4:21:2e:c1:82:63:03:f1:f5:bf:af: 6f:d1:63:2a:c5:3b:52:e0:59:a8:cf:30:86:2c:63: e6:4c:3f:fc:62:e3:c9:13:e6:66:af:7b:ca:73:00: 9d:50:6a:4c:83:43:2a:2a:9b:e2:84:3b:62:bc:85: 32:21:5f:3a:bf:3d:88:7c:79:9f:0f:21:3d:3e:3e: d6:e5:99:f1:e2:ab:95:16:ee:b1:f0:d1:e0:90:cb: f8:22:1d:64:e9:bc:11:7f:54:81:b7:a8:7f:56:8d: 6f:89:f7:31:95:44:b6:22:77:90:68:d9:40:8a:68: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:00:F5:26:36:56:71:CB:5E:B0:F4:52:32:99:D8:F9:AD:D6:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:21:a2:2e:e1:78:8a:82:ae:cf:bf:36:0f:17:43:b6:03:1a: 27:4a:c0:a9:9e:57:c2:95:0d:36:fa:42:df:4f:c0:a4:2d:89: 01:c3:dd:a6:ca:4a:53:ea:d4:69:dd:f7:b0:75:ce:a0:17:d9: c1:66:17:ea:d2:2f:af:05:cd:29:23:96:b6:2b:ef:84:0d:66: 5b:7f:e6:d4:b1:a3:8c:cc:44:5b:3f:32:90:d7:61:ad:eb:6d: 59:15:d1:cc:db:e9:dc:a1:e4:11:dc:bd:2d:56:43:8d:4c:dc: 9f:94:9e:00:18:1d:24:24:80:79:65:46:24:4c:a1:ed:66:05: e2:e0:a0:66:b4:a7:41:1a:d2:79:aa:46:d7:8c:74:d6:b2:d8: e7:55:46:0a:91:39:bf:69:16:19:e0:c1:aa:ac:78:b4:02:a1: da:21:54:9b:c6:68:3c:d1:a5:6f:77:d8:67:17:c6:e3:6e:cf: e1:82:ca:75:0e:70:23:12:70:e0:52:34:be:0d:3d:d9:99:b4: 54:16:13:c7:cd:65:5e:cd:a1:e0:8c:15:68:73:cb:b3:0d:f4: 45:1e:10:32:83:2d:2c:43:19:84:9c:d5:2c:9e:5e:c4:1a:f9: 59:7a:eb:be:f4:de:58:30:f2:ad:ee:43:eb:6b:cc:e3:62:e5: 2f:36:47:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhERX7505wZ+AUugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZWMxMzViY2QtNDEyYi00ZTU2LTkwYTgtN2YzNTJlMGRkMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVnRAKfekw3yT5pLfj3znGiKh3b11tgfWkEw 4ZwGZQc5OQE6oxL08tYPz8oG0UIMiV3LJcvrXFV7JLe38fT2l93J7i+K2BIXO7ZM zbyAzKpyfaxA62DY2JVDgtevLld8fDKPw7DllD5xO6XJlK3Z6S0nQiOt+RyxBF7x zH7xZaycYxwlJOEPCHmitCEuwYJjA/H1v69v0WMqxTtS4FmozzCGLGPmTD/8YuPJ E+Zmr3vKcwCdUGpMg0MqKpvihDtivIUyIV86vz2IfHmfDyE9Pj7W5Znx4quVFu6x 8NHgkMv4Ih1k6bwRf1SBt6h/Vo1vifcxlUS2IneQaNlAimgLjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtUAPUmNlZxy16w9FIymdj5rdbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEhoi7heIqCrs+/Ng8XQ7YDGidKwKmeV8KVDTb6Qt9PwKQtiQHD3abK SlPq1Gnd97B1zqAX2cFmF+rSL68FzSkjlrYr74QNZlt/5tSxo4zMRFs/MpDXYa3r bVkV0czb6dyh5BHcvS1WQ41M3J+UngAYHSQkgHllRiRMoe1mBeLgoGa0p0Ea0nmq RteMdNay2OdVRgqROb9pFhngwaqseLQCodohVJvGaDzRpW932GcXxuNuz+GCynUO cCMScOBSNL4NPdmZtFQWE8fNZV7NoeCMFWhzy7MN9EUeEDKDLSxDGYSc1SyeXsQa +Vl667703lgw8q3uQ+trzONi5S82R+Q= -----END CERTIFICATE-----Generated at Sun Apr 27 13:01:58 2025 by rpki-client