$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa File: 5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa (raw, json) Hash identifier: LCRFJ6MbP2BiJ+qq7iZMd90mWx8outxEekkh5fcYLmQ= Subject key identifier: E5:84:0B:AA:AD:A0:72:13:53:F6:23:CD:F2:E6:60:3F:10:82:5A:62 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F43285848F65BD6D443DDB612846E72A0 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 52.129.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d6:d4:43:dd:b6:12:84:6e:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4d284beb-9849-4b52-aeee-e71830ab8368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:fc:d7:81:b4:86:4e:f6:b8:ce:f4:96:49: b1:27:0c:63:ba:21:7c:2c:b1:15:cc:4e:0c:5f:e8: 00:01:54:ea:b0:3f:63:7e:ac:99:95:61:1b:fd:de: a8:63:39:bb:31:6d:5f:ce:dd:bd:ae:37:86:b9:55: 08:4d:7c:4c:08:dc:98:6c:59:e1:23:cc:e7:9b:d0: 24:a8:b9:fb:54:62:97:80:29:6b:b8:a6:27:a9:21: 48:c2:83:7f:67:2d:cc:b6:41:15:dd:9f:55:7f:05: 4d:bb:af:42:1c:30:82:8a:9c:cc:27:7e:92:e0:ff: 4f:8a:1b:ab:64:2c:f8:47:57:e9:ae:f7:ef:b8:2b: 20:fd:d5:24:0b:aa:00:2d:b3:74:f0:c2:23:73:ec: 8f:34:e8:65:c2:f5:07:26:b7:70:c1:dd:b5:ad:0c: 17:cb:18:d8:17:bb:62:3c:5d:be:40:19:67:eb:a9: 88:73:03:28:41:23:05:2b:a7:e6:e7:5b:27:6e:e8: 71:00:b6:3e:83:16:8b:28:dd:b8:a8:54:b5:97:fd: 67:f1:4b:e7:d7:1a:ac:0a:4f:e0:f8:34:b8:c8:92: 3d:6e:0a:b0:50:e2:0d:cd:fd:89:87:19:3f:e6:60: 42:82:ab:b4:2b:1a:c4:aa:f3:bd:ce:78:8a:22:55: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:84:0B:AA:AD:A0:72:13:53:F6:23:CD:F2:E6:60:3F:10:82:5A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0d:47:00:52:91:13:e9:b4:0b:14:0c:8c:3b:0d:cc:56:72: 87:d6:34:84:65:97:f8:e0:c6:11:d5:bc:19:9f:ce:aa:a3:39: d7:cf:e0:bb:62:72:8b:83:f7:f6:e4:46:9d:61:2e:d0:82:9c: 0c:f0:bd:58:07:02:de:68:f1:b9:64:e5:6e:13:f0:9e:95:7e: c6:2c:5a:2d:8f:d0:89:ca:c8:14:9c:30:8e:b0:78:fe:7e:cb: 0a:35:a1:d6:bb:8c:f5:b8:b1:8d:57:00:f7:da:45:87:29:d9: fb:fc:b7:f8:bc:46:16:5d:2c:25:9a:89:4c:66:f7:15:e7:66: 02:a1:ab:ee:93:62:31:c2:59:c8:f5:70:fa:da:53:f0:d6:a0: 28:e0:6d:48:68:2d:3f:b3:db:61:78:b2:d5:34:a7:31:56:cc: b9:9d:ec:d5:40:f3:95:7e:11:0a:86:df:e5:09:55:db:41:4e: fe:e7:3c:07:3b:99:95:cb:ee:b7:cd:60:da:04:26:db:75:23: 3e:d8:77:4e:72:8a:5b:87:76:41:5d:7f:ae:7f:2a:94:80:d7: 0a:5a:66:0d:a1:dc:95:18:53:d2:a0:92:2f:63:d2:36:05:90: 22:3b:7f:ce:ed:a4:77:a0:4a:06:66:24:89:19:27:39:3b:e6: b8:d5:78:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9bUQ922EoRucqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NGQyODRiZWItOTg0OS00YjUyLWFlZWUtZTcxODMwYWI4MzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHP814G0hk72uM70lkmxJwxjuiF8LLEVzE4M X+gAAVTqsD9jfqyZlWEb/d6oYzm7MW1fzt29rjeGuVUITXxMCNyYbFnhI8znm9Ak qLn7VGKXgClruKYnqSFIwoN/Zy3MtkEV3Z9VfwVNu69CHDCCipzMJ36S4P9Pihur ZCz4R1fprvfvuCsg/dUkC6oALbN08MIjc+yPNOhlwvUHJrdwwd21rQwXyxjYF7ti PF2+QBln66mIcwMoQSMFK6fm51snbuhxALY+gxaLKN24qFS1l/1n8Uvn1xqsCk/g +DS4yJI9bgqwUOINzf2Jhxk/5mBCgqu0KxrEqvO9zniKIlVs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWEC6qtoHITU/YjzfLmYD8QglpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNWM2MDlhMzAtMGE4NS0z ZTkzLWE0Y2QtMWQ5NzYwNDhiOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4NRwBSkRPptAsUDIw7DcxWcofWNIRll/jgxhHVvBmfzqqjOdfP4Lti couD9/bkRp1hLtCCnAzwvVgHAt5o8blk5W4T8J6VfsYsWi2P0InKyBScMI6weP5+ ywo1oda7jPW4sY1XAPfaRYcp2fv8t/i8RhZdLCWaiUxm9xXnZgKhq+6TYjHCWcj1 cPraU/DWoCjgbUhoLT+z22F4stU0pzFWzLmd7NVA85V+EQqG3+UJVdtBTv7nPAc7 mZXL7rfNYNoEJtt1Iz7Yd05yiluHdkFdf65/KpSA1wpaZg2h3JUYU9Kgki9j0jYF kCI7f87tpHegSgZmJIkZJzk75rjVeKM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:46 2025 by rpki-client