$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa File: cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa (raw, json) Hash identifier: vkVWjr5/7b+TpHQZwFnzo5fyhwhbCrR7PHfh0vgyfIM= Subject key identifier: 40:DF:95:54:F5:A0:71:83:8B:7D:E7:F0:9E:06:4E:A7:0A:9F:E8:89 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F43285849FE0FEE7251140DB2B199C080 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 399150 IP address blocks: 52.128.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ee:72:51:14:0d:b2:b1:99:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=43322d66-409f-4411-a209-4e464703b5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:96:0f:e9:58:bb:9f:3c:4f:bb:67:07:12: f5:a8:b0:51:c7:0c:f7:a7:ba:03:07:db:38:51:6f: 91:6e:f6:e2:a1:be:d8:9e:ff:a9:6e:71:df:fc:cc: 3f:4a:9b:b0:31:e5:1a:8e:e8:72:74:4c:44:ef:3f: 9b:12:77:22:de:d7:7c:02:7b:b6:bc:cf:e4:7d:48: 61:0c:4a:f7:91:dd:02:9c:3c:e7:8f:57:82:41:2c: 62:a9:8f:94:41:c5:d9:71:6a:2a:85:51:e5:e8:b5: 71:6e:ef:2b:46:b9:1a:ce:f8:f7:db:41:7d:0f:d5: 72:1d:de:f9:4c:63:d4:e8:b2:4f:65:3d:a3:83:52: 10:70:3d:d0:1f:7d:c9:62:f0:0f:1b:25:bc:40:69: 68:32:08:50:0a:da:0e:38:b2:bb:70:3b:33:84:a0: aa:04:a7:3f:96:24:05:c0:cc:54:82:03:1b:c9:47: 7b:e8:9c:12:a5:dc:89:df:55:0c:28:64:49:bb:03: 32:a3:24:8b:20:fd:a1:d4:5a:64:12:f4:89:1c:e5: 16:3a:f3:06:3c:20:29:0e:09:c7:09:d1:a2:64:ee: ed:79:ce:80:80:f2:e3:c9:d3:b1:96:54:f9:8b:e6: 06:d3:fa:44:ad:e0:f4:31:fb:0c:5c:93:87:5e:a6: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DF:95:54:F5:A0:71:83:8B:7D:E7:F0:9E:06:4E:A7:0A:9F:E8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/cd8bd0ae-e51f-308d-9ef9-cb93ae872a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1c:7c:f5:99:70:e9:c2:8f:13:c9:1d:c0:46:51:e4:ba:dc: ee:4f:10:f5:99:96:57:6b:ae:0a:f9:bf:c6:1c:2e:5d:32:0e: 0d:f0:6d:4c:09:f6:95:e6:c2:90:27:ab:bf:d1:9b:c1:0f:54: 49:6b:a2:27:46:08:6e:95:3b:8c:f9:cd:a2:65:42:65:3a:b1: 6d:1c:e3:23:fb:33:6d:30:8c:fe:4e:32:0c:fa:5a:15:43:41: a8:63:4f:40:92:bf:fa:1c:40:e6:2f:24:ff:d5:d7:ae:c8:d5: a6:59:85:11:1d:1c:87:c8:7f:61:f7:19:ef:ff:47:4a:1f:0c: e3:86:53:79:19:9b:68:8f:ed:b2:df:cc:65:9a:bb:6d:e1:f8: 65:e2:57:22:6d:cb:ca:4e:5d:1d:f3:54:ae:12:6b:15:28:cb: ac:a4:6e:08:97:9a:dc:ba:9b:b5:f0:c0:d0:5c:dd:2f:49:13: ff:f2:3b:87:e1:93:32:8d:2c:38:4d:28:02:a8:2b:a1:fe:3c: 97:2a:bf:ea:a2:f8:15:29:99:e9:10:28:b1:b8:81:b3:8e:33: fb:0c:66:1d:0b:a2:10:75:ad:06:de:68:6c:fa:71:e6:60:78: 34:8c:a6:1f:76:01:7f:2a:73:09:84:4d:5f:2d:15:2e:22:0b: 99:66:55:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+5yURQNsrGZwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDMzMjJkNjYtNDA5Zi00NDExLWEyMDktNGU0NjQ3MDNiNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFGWD+lYu588T7tnBxL1qLBRxwz3p7oDB9s4 UW+Rbvbiob7Ynv+pbnHf/Mw/SpuwMeUajuhydExE7z+bEnci3td8Anu2vM/kfUhh DEr3kd0CnDznj1eCQSxiqY+UQcXZcWoqhVHl6LVxbu8rRrkazvj320F9D9VyHd75 TGPU6LJPZT2jg1IQcD3QH33JYvAPGyW8QGloMghQCtoOOLK7cDszhKCqBKc/liQF wMxUggMbyUd76JwSpdyJ31UMKGRJuwMyoySLIP2h1FpkEvSJHOUWOvMGPCApDgnH CdGiZO7tec6AgPLjydOxllT5i+YG0/pEreD0MfsMXJOHXqbXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDflVT1oHGDi33n8J4GTqcKn+iJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvY2Q4YmQwYWUtZTUxZi0z MDhkLTllZjktY2I5M2FlODcyYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8cfPWZcOnCjxPJHcBGUeS63O5PEPWZlldrrgr5v8YcLl0yDg3wbUwJ 9pXmwpAnq7/Rm8EPVElroidGCG6VO4z5zaJlQmU6sW0c4yP7M20wjP5OMgz6WhVD QahjT0CSv/ocQOYvJP/V167I1aZZhREdHIfIf2H3Ge//R0ofDOOGU3kZm2iP7bLf zGWau23h+GXiVyJty8pOXR3zVK4SaxUoy6ykbgiXmty6m7XwwNBc3S9JE//yO4fh kzKNLDhNKAKoK6H+PJcqv+qi+BUpmekQKLG4gbOOM/sMZh0LohB1rQbeaGz6ceZg eDSMph92AX8qcwmETV8tFS4iC5lmVQ4= -----END CERTIFICATE-----Generated at Sun Jun 15 05:07:13 2025 by rpki-client