$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa File: dd445671-6815-3a61-a556-1bfd773ca1e6.roa (raw, json) Hash identifier: golblDp6LqM5enhFLDmAmY8+c9zlSO6nWKp4Mv/vWFY= Subject key identifier: 22:8B:FB:65:D4:FD:49:7B:A5:36:70:0F:4F:14:C6:64:32:06:A9:99 Certificate issuer: /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Certificate serial: 010D0C9F4328584A07D52EA34CB48D839597C5C0 Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 399134 IP address blocks: 52.124.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2e:a3:4c:b4:8d:83:95:97:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2969d66f-f243-4aea-8aa1-bb1f8dc45c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:ab:51:c3:d8:71:ef:f3:0c:25:93:6d:b5: 06:b2:ff:ba:6e:63:b4:3e:8c:1a:3f:56:53:6e:29: aa:09:4a:20:f7:36:9e:44:1f:e1:0e:f8:84:eb:50: 9c:9d:31:63:f8:15:74:96:44:b5:6d:67:a2:fc:93: a0:46:d4:11:45:9c:61:89:f0:0e:52:b2:f0:c2:40: 62:a9:44:f9:d9:f7:08:0a:40:f8:6c:2c:18:33:77: 7d:7d:09:09:83:4a:52:3c:f5:37:6b:a2:b9:0d:f3: 5d:2b:5d:b4:04:80:86:ef:86:3f:39:66:0d:29:9c: c9:c3:11:fc:67:62:1d:44:20:1f:44:f4:ca:e9:f5: 99:0b:b5:4c:a9:ba:fb:0f:ea:15:31:24:5c:ea:47: 1f:79:60:e1:55:26:ef:88:18:75:2c:26:7f:9e:19: aa:49:26:03:0a:f2:e8:fa:30:a1:3a:61:53:84:54: 66:35:1a:f8:4a:53:36:ef:78:2f:46:9e:da:7a:91: f9:b4:72:c1:8a:ee:62:e9:0b:8a:6b:48:21:dc:89: 54:8c:cf:8e:74:db:28:3c:cb:87:81:2f:e2:76:a9: e6:67:7a:92:08:74:54:8a:21:d0:b4:35:36:12:0f: 45:1c:f9:9d:e8:f3:6b:c0:98:51:ea:73:93:14:86: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:FB:65:D4:FD:49:7B:A5:36:70:0F:4F:14:C6:64:32:06:A9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl X509v3 Authority Key Identifier: keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer sbgp-ipAddrBlock: critical IPv4: 52.124.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:22:8b:15:95:4f:ff:a6:5f:6e:8d:a7:64:73:5a:b7:a6:de: d0:2d:61:96:29:e2:4d:1d:0b:5b:ac:fa:a7:a8:03:4a:36:48: fa:bb:09:7c:ef:4e:95:44:d0:13:ba:ea:c6:3b:14:e3:1c:f4: 11:3e:b1:a6:4d:1e:38:58:d4:f9:fd:07:14:80:11:5b:c6:21: 3f:42:1a:3f:51:a8:01:61:ab:c4:87:79:02:68:23:93:c2:cd: aa:2c:4e:3e:ba:f2:7c:1d:ad:7f:e9:8b:32:72:65:0b:16:ea: cf:47:17:fd:7a:94:01:7a:7f:bc:26:85:5b:1a:f7:8c:4b:97: f6:22:f8:52:fc:42:9f:1d:83:ae:2b:b7:a3:bc:aa:2d:11:5b: 82:28:0b:dd:e0:67:eb:a0:e7:35:19:b8:fe:b6:da:3b:23:cf: b3:e3:47:51:93:36:42:35:66:4c:98:a2:fe:0c:bc:35:e7:55: b6:be:89:ec:b4:4e:38:03:b0:a0:44:9e:8a:cf:68:5a:fe:ac: 1d:2e:0b:03:df:10:f3:0e:2f:52:53:e2:e2:e0:5f:00:6f:ae: 43:8f:af:39:2c:ce:67:d3:06:87:33:39:ec:28:d2:81:41:ad: 6b:e4:49:0d:d5:c8:bc:58:e7:34:99:e5:71:d8:f7:a5:dd:a8: c2:2e:74:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1S6jTLSNg5WXxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzMmZhNjctNzE1OC00NDM3LTllNjQtZjA5MjZjNGU0 ZDI2MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk Mjk2OWQ2NmYtZjI0My00YWVhLThhYTEtYmIxZjhkYzQ1Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDyrUcPYce/zDCWTbbUGsv+6bmO0PowaP1ZT bimqCUog9zaeRB/hDviE61CcnTFj+BV0lkS1bWei/JOgRtQRRZxhifAOUrLwwkBi qUT52fcICkD4bCwYM3d9fQkJg0pSPPU3a6K5DfNdK120BICG74Y/OWYNKZzJwxH8 Z2IdRCAfRPTK6fWZC7VMqbr7D+oVMSRc6kcfeWDhVSbviBh1LCZ/nhmqSSYDCvLo +jChOmFThFRmNRr4SlM273gvRp7aepH5tHLBiu5i6QuKa0gh3IlUjM+OdNsoPMuH gS/idqnmZ3qSCHRUiiHQtDU2Eg9FHPmd6PNrwJhR6nOTFIaSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKL+2XU/Ul7pTZwD08UxmQyBqmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMy ZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0ZTRkMjYvZGQ0NDU2NzEtNjgxNS0z YTYxLWE1NTYtMWJmZDc3M2NhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQzMmZhNjctNzE1OC00NDM3LTll NjQtZjA5MjZjNGU0ZDI2LzBkMzJmYTY3LTcxNTgtNDQzNy05ZTY0LWYwOTI2YzRl NGQyNi5jcmwwHwYDVR0jBBgwFoAUBEx1DkW6xAnA6QI7v20+IM7/BdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDky NmM0ZTRkMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4iixWVT/+mX26Np2RzWrem3tAtYZYp4k0dC1us+qeoA0o2SPq7CXzv TpVE0BO66sY7FOMc9BE+saZNHjhY1Pn9BxSAEVvGIT9CGj9RqAFhq8SHeQJoI5PC zaosTj668nwdrX/pizJyZQsW6s9HF/16lAF6f7wmhVsa94xLl/Yi+FL8Qp8dg64r t6O8qi0RW4IoC93gZ+ug5zUZuP622jsjz7PjR1GTNkI1ZkyYov4MvDXnVba+iey0 TjgDsKBEnorPaFr+rB0uCwPfEPMOL1JT4uLgXwBvrkOPrzkszmfTBoczOewo0oFB rWvkSQ3VyLxY5zSZ5XHY96XdqMIudK8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:29:14 2025 by rpki-client