$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa File: c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa (raw, json) Hash identifier: ttyes8kA4LOswZ53clInIXnpNslc7+XIwEpLSm+wB5s= Subject key identifier: 51:A2:FA:29:49:D2:28:29:51:4D:8D:71:6B:EB:3C:F8:2A:24:A2:0F Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F43285849E7BA896E7B7F80CE30258A50 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 7018 IP address blocks: 52.128.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:89:6e:7b:7f:80:ce:30:25:8a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=e67dffb1-38db-43b0-bbba-7c386f4dedcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:3e:ab:9a:45:a4:a3:5a:9d:e9:d8:19:d1: 66:88:fe:cd:8a:f6:0e:20:40:41:5e:0b:82:9f:cf: 29:80:8a:a5:21:7b:17:b8:e4:25:4e:32:b8:53:14: 9e:a4:e5:52:49:78:f8:8a:73:94:00:fd:4a:b2:e5: de:e7:8b:3c:a9:ee:6b:96:33:9b:28:c5:38:b4:55: 66:eb:e4:f9:af:4e:23:72:27:b0:bb:f6:cf:cb:a1: 2d:e1:f0:10:57:4a:08:fd:05:b9:07:4e:20:17:24: 7d:ed:8a:54:c6:ff:e1:9c:38:7c:9e:39:46:b3:41: a6:d9:1b:6f:c7:74:0f:e1:57:72:af:ea:26:80:21: 54:42:19:68:a7:db:bf:12:71:ff:33:da:0d:38:d0: ed:42:da:fa:e3:6b:56:60:cf:95:ef:a8:97:1d:fd: 25:3e:c8:77:ee:57:8f:5b:20:99:14:3e:7c:66:b9: 62:f1:4a:84:96:80:9b:30:3d:14:cd:82:e7:10:50: 0a:f7:c0:39:79:cb:87:9e:fb:fa:1b:13:0d:f2:1f: 5d:7a:50:42:4e:7d:f3:ce:6e:1e:97:68:00:30:08: b3:71:43:c8:05:da:aa:6a:67:71:c2:d9:4f:8b:fb: 93:4f:a0:01:d1:e7:8c:15:c1:08:f2:51:8b:6e:c2: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A2:FA:29:49:D2:28:29:51:4D:8D:71:6B:EB:3C:F8:2A:24:A2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dc:3a:cd:5d:84:27:8c:48:af:d2:db:83:16:03:1e:30:14: 95:7d:6a:c9:3b:43:d4:1d:c0:ff:e3:ff:86:07:07:50:42:c2: 98:98:fb:d6:35:19:06:a7:02:f1:a9:9f:64:f2:c3:87:b1:de: dd:79:5c:10:5c:e8:27:93:45:be:4e:89:4e:60:fc:13:f7:05: d2:18:14:fc:3d:4e:c9:fa:be:08:90:1b:6b:f3:23:83:69:23: ad:d0:59:05:7a:f2:e2:3a:91:60:c8:71:ce:9c:43:19:b2:fa: 8c:9a:bf:cc:05:ed:5d:b5:28:d9:73:3b:97:e4:1a:36:91:9f: e8:79:41:51:e7:5c:29:56:58:91:ed:a4:01:68:b2:64:42:c2: cf:98:f1:b8:38:da:88:6b:53:2d:23:af:6a:ae:7c:c5:d3:79: bb:00:2e:57:10:ea:fc:49:27:06:84:31:96:b7:f5:eb:a4:10: 6f:bd:74:6a:c2:1f:5a:c6:88:51:5c:8b:6c:27:dd:c6:e4:7c: af:3c:19:f3:e0:f7:42:b5:a5:15:38:27:6e:c6:58:71:fe:5b: 9f:b8:c3:f6:8b:06:af:48:1b:07:6c:d0:8a:35:cd:d9:56:a5: e5:ae:e7:22:78:13:34:71:ca:d7:bf:60:c4:fa:47:da:22:e5: ac:f5:d3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuolue3+AzjAlilAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZTY3ZGZmYjEtMzhkYi00M2IwLWJiYmEtN2MzODZmNGRlZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMs+q5pFpKNanenYGdFmiP7NivYOIEBBXguC n88pgIqlIXsXuOQlTjK4UxSepOVSSXj4inOUAP1KsuXe54s8qe5rljObKMU4tFVm 6+T5r04jciewu/bPy6Et4fAQV0oI/QW5B04gFyR97YpUxv/hnDh8njlGs0Gm2Rtv x3QP4Vdyr+omgCFUQhlop9u/EnH/M9oNONDtQtr642tWYM+V76iXHf0lPsh37leP WyCZFD58Zrli8UqEloCbMD0UzYLnEFAK98A5ecuHnvv6GxMN8h9delBCTn3zzm4e l2gAMAizcUPIBdqqamdxwtlPi/uTT6AB0eeMFcEI8lGLbsJpDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGi+ilJ0igpUU2NcWvrPPgqJKIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvYzhkMjQ5ZjAtZDYwYS0z ZmY4LTgwYTgtYmE5ZjhjZmU4MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/cOs1dhCeMSK/S24MWAx4wFJV9ask7Q9QdwP/j/4YHB1BCwpiY+9Y1 GQanAvGpn2Tyw4ex3t15XBBc6CeTRb5OiU5g/BP3BdIYFPw9Tsn6vgiQG2vzI4Np I63QWQV68uI6kWDIcc6cQxmy+oyav8wF7V21KNlzO5fkGjaRn+h5QVHnXClWWJHt pAFosmRCws+Y8bg42ohrUy0jr2qufMXTebsALlcQ6vxJJwaEMZa39eukEG+9dGrC H1rGiFFci2wn3cbkfK88GfPg90K1pRU4J27GWHH+W5+4w/aLBq9IGwds0Io1zdlW peWu5yJ4EzRxyte/YMT6R9oi5az101k= -----END CERTIFICATE-----Generated at Sun Jun 15 05:04:01 2025 by rpki-client