$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa File: 70f0d2e5-f571-34d1-a278-88605dcf02db.roa (raw, json) Hash identifier: SP0aaQ+P4UHZsOzZx5MpbmEyz0CFrJu1Ar26suqruEk= Subject key identifier: B8:F7:57:31:95:97:E3:4F:29:90:4E:0C:DD:F2:B7:C1:65:CF:0B:CA Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584AB650D547AEB3B2950D34D880 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 52.129.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d5:47:ae:b3:b2:95:0d:34:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f5c0ddaf-e8f1-4242-b8f9-eb180aa34e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:6b:1e:7a:4b:da:2f:fd:71:03:ac:3c:86: d0:53:5a:a1:86:fb:c0:5f:e3:56:8d:1d:c9:72:f8: 9a:f2:24:81:38:b2:a6:d0:dd:bf:ab:df:d3:7b:c2: d1:e9:e8:da:50:49:f0:01:2b:2b:16:57:f2:ed:51: 33:d4:50:2e:f0:d1:52:e2:49:14:88:7c:16:4f:16: a1:6c:80:a6:4e:9a:b1:98:d1:f3:6b:25:e5:40:f4: 2f:20:3b:37:83:59:ce:02:db:56:d0:67:d5:0c:f5: 9b:8e:d3:ed:08:7c:30:68:31:c2:cc:4a:da:3f:ab: a1:1b:50:4e:1b:42:83:4c:ba:2d:a4:99:a5:13:9d: 93:7c:9e:9d:70:db:20:60:d5:d7:a1:a1:fe:5e:7d: db:11:11:d6:20:6f:32:00:8f:91:4a:f2:33:d5:14: 8e:65:6d:35:5c:c8:ae:e1:cb:62:e3:e7:fd:ba:4a: d8:59:5d:ac:3e:20:24:32:7d:84:44:53:2e:f4:6e: 80:29:1b:a6:36:d9:0f:36:b4:d3:c2:8c:ab:dc:63: 84:d0:8d:bd:93:f5:a6:3d:f7:a1:b8:52:e7:77:c8: e8:a6:ae:9c:f2:1d:a5:be:df:84:62:39:89:26:f8: 30:86:69:b6:59:10:ac:3d:9d:cd:96:eb:b8:8c:84: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F7:57:31:95:97:E3:4F:29:90:4E:0C:DD:F2:B7:C1:65:CF:0B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ae:0e:fa:c6:5a:81:06:77:5d:69:79:b1:b8:e8:53:c7:10: 80:38:77:fe:e1:9e:68:b8:84:84:51:f6:e7:9b:17:2c:4a:a6: 0b:19:e8:af:c6:a7:96:a4:b5:61:9e:b0:c3:75:94:0e:64:b1: b2:c8:5d:97:9f:6d:6a:d6:a8:10:0b:9a:09:25:76:51:f4:1f: f0:b2:cb:79:9a:22:3d:62:f9:35:5d:7c:8e:08:33:68:ce:01: c9:4f:a1:94:61:c6:97:8c:e8:8c:1c:c4:7b:86:94:96:6d:2b: 5c:1b:d1:0c:d1:f9:d7:f0:8b:97:59:5e:05:23:c1:5e:bf:11: b3:a9:0a:f3:09:ee:d9:dc:74:a1:ae:a4:41:0d:bb:a3:16:cd: e4:68:db:74:a6:3e:4d:98:e6:b2:dc:d1:8f:1d:0a:62:f7:b1: 06:0a:ca:3e:e6:16:e9:3c:26:55:47:27:64:e4:4f:83:7e:b6: ad:d3:17:c7:55:d8:73:60:b0:45:c7:11:d2:1e:03:f4:e9:b6: 2b:76:72:56:55:a1:29:a1:5c:50:a5:8b:ce:1a:f1:1a:49:ad: cc:50:92:01:46:50:58:07:80:ec:73:de:bb:06:6e:b3:a5:b8: 42:76:78:8b:8d:c0:80:84:f5:60:9d:33:4d:09:b9:00:1f:76: 18:8b:78:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNVHrrOylQ002IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjVjMGRkYWYtZThmMS00MjQyLWI4ZjktZWIxODBhYTM0ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpdrHnpL2i/9cQOsPIbQU1qhhvvAX+NWjR3J cvia8iSBOLKm0N2/q9/Te8LR6ejaUEnwASsrFlfy7VEz1FAu8NFS4kkUiHwWTxah bICmTpqxmNHzayXlQPQvIDs3g1nOAttW0GfVDPWbjtPtCHwwaDHCzEraP6uhG1BO G0KDTLotpJmlE52TfJ6dcNsgYNXXoaH+Xn3bERHWIG8yAI+RSvIz1RSOZW01XMiu 4cti4+f9ukrYWV2sPiAkMn2ERFMu9G6AKRumNtkPNrTTwoyr3GOE0I29k/WmPfeh uFLnd8jopq6c8h2lvt+EYjmJJvgwhmm2WRCsPZ3Nluu4jISnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj3VzGVl+NPKZBODN3yt8FlzwvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNzBmMGQyZTUtZjU3MS0z NGQxLWEyNzgtODg2MDVkY2YwMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABquDvrGWoEGd11pebG46FPHEIA4d/7hnmi4hIRR9uebFyxKpgsZ6K/G p5aktWGesMN1lA5ksbLIXZefbWrWqBALmgkldlH0H/Cyy3maIj1i+TVdfI4IM2jO AclPoZRhxpeM6IwcxHuGlJZtK1wb0QzR+dfwi5dZXgUjwV6/EbOpCvMJ7tncdKGu pEENu6MWzeRo23SmPk2Y5rLc0Y8dCmL3sQYKyj7mFuk8JlVHJ2TkT4N+tq3TF8dV 2HNgsEXHEdIeA/Tptit2clZVoSmhXFCli84a8RpJrcxQkgFGUFgHgOxz3rsGbrOl uEJ2eIuNwICE9WCdM00JuQAfdhiLeHM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:21 2025 by rpki-client