$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa File: ad214fa9-5028-3913-a474-0fc7cd823fbd.roa (raw, json) Hash identifier: 3TXy0sMKszlJ1E0DXfpL4WqMh8LPpAyrdLzf4K6c9v8= Subject key identifier: 09:BF:78:62:C3:34:DE:36:23:71:51:34:2A:EC:F0:BB:E1:48:BA:04 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584981D458B9A3DB8993777B6150 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 16509 IP address blocks: 52.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:58:b9:a3:db:89:93:77:7b:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=aece5906-e201-4bc6-a2eb-137a30c42673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:57:32:c5:87:65:6c:97:6c:e7:f3:2a:11: 50:94:de:32:18:a1:c5:e2:f2:4c:00:13:c9:47:e5: bc:63:58:60:bc:bd:50:d2:8b:e7:16:d1:09:c5:2d: 62:be:16:c3:ef:32:ca:ac:1e:c4:18:01:53:cd:59: 35:ed:8a:e3:f5:c9:ed:4d:72:8a:13:2a:dd:4a:1a: 2e:3a:4a:70:33:f8:54:71:7a:07:2b:ba:ab:a2:57: 25:ce:2a:7c:9c:d4:aa:2d:9e:47:0f:cb:3c:9d:66: 83:d8:70:43:e3:76:80:13:ec:93:28:07:a2:f1:81: eb:e1:0f:a5:3c:e7:c2:b3:31:21:3b:3f:fa:4a:33: db:4c:71:0c:ae:11:78:bd:b0:28:5e:2f:b2:2e:7e: a3:68:e4:75:82:8e:cc:0f:6f:80:89:9a:9e:c9:ec: 4d:fe:85:07:f9:be:47:ba:4d:6d:7d:0a:50:50:ff: de:1c:75:0b:84:a0:77:6f:94:2c:75:28:81:52:b7: d0:2a:94:90:b8:ad:02:c5:74:13:01:a1:4f:82:2a: 09:a1:de:0a:de:57:5f:5d:cf:a2:bd:cc:69:b0:6f: e4:68:74:23:a0:65:8e:c1:10:67:3c:06:76:6b:35: 03:b1:14:99:33:f9:73:7f:cb:e5:f9:44:94:70:a9: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:78:62:C3:34:DE:36:23:71:51:34:2A:EC:F0:BB:E1:48:BA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ea:64:7e:4b:b3:58:f6:b1:fa:6b:46:38:7f:4b:b1:b6:81: 32:d3:96:58:c2:8d:85:93:f3:78:17:a2:5f:60:aa:be:ab:27: c7:e0:c1:7f:16:ef:01:8b:66:4b:9e:ce:90:81:62:b9:38:e6: 39:62:7b:50:d5:0c:99:b6:1c:52:fd:f5:3b:b4:cb:90:64:e0: dd:a8:71:9b:a2:c2:87:e8:a8:5b:f5:cb:31:c6:32:31:95:74: cb:61:ef:ad:7a:d1:91:47:dd:39:f3:0f:31:87:d5:63:d0:0b: 27:54:d6:8d:82:2f:76:45:15:5b:5b:06:f7:bc:86:75:c8:2d: 1c:23:1c:7c:d9:8c:58:a8:83:f4:71:eb:5d:19:72:46:12:f6: 4f:36:1f:49:b9:ac:3b:33:64:c1:bb:56:29:0e:27:21:2a:f2: fd:d7:cf:15:e1:00:80:5e:94:a8:a6:8c:10:49:38:5d:96:59: 2b:4a:ad:2f:70:d1:24:bd:46:53:7a:31:ba:1f:00:2e:3e:d0: c8:76:a7:10:db:4d:bd:6f:2d:fd:7c:4a:d6:8a:31:7c:9c:27: 7f:85:c6:dc:6a:2e:26:eb:66:ef:5f:c2:10:01:7e:70:fc:c8: dc:d1:49:5e:ad:d8:c8:b5:95:76:88:8b:74:0e:ab:6b:9d:25: 1d:08:ef:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1Fi5o9uJk3d7YVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk YWVjZTU5MDYtZTIwMS00YmM2LWEyZWItMTM3YTMwYzQyNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzItXMsWHZWyXbOfzKhFQlN4yGKHF4vJMABPJ R+W8Y1hgvL1Q0ovnFtEJxS1ivhbD7zLKrB7EGAFTzVk17Yrj9cntTXKKEyrdShou OkpwM/hUcXoHK7qrolclzip8nNSqLZ5HD8s8nWaD2HBD43aAE+yTKAei8YHr4Q+l POfCszEhOz/6SjPbTHEMrhF4vbAoXi+yLn6jaOR1go7MD2+AiZqeyexN/oUH+b5H uk1tfQpQUP/eHHULhKB3b5QsdSiBUrfQKpSQuK0CxXQTAaFPgioJod4K3ldfXc+i vcxpsG/kaHQjoGWOwRBnPAZ2azUDsRSZM/lzf8vl+USUcKm7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm/eGLDNN42I3FRNCrs8LvhSLoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvYWQyMTRmYTktNTAyOC0z OTEzLWE0NzQtMGZjN2NkODIzZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrqZH5Ls1j2sfprRjh/S7G2gTLTlljCjYWT83gXol9gqr6rJ8fgwX8W 7wGLZkuezpCBYrk45jlie1DVDJm2HFL99Tu0y5Bk4N2ocZuiwofoqFv1yzHGMjGV dMth76160ZFH3TnzDzGH1WPQCydU1o2CL3ZFFVtbBve8hnXILRwjHHzZjFiog/Rx 610ZckYS9k82H0m5rDszZMG7VikOJyEq8v3XzxXhAIBelKimjBBJOF2WWStKrS9w 0SS9RlN6MbofAC4+0Mh2pxDbTb1vLf18StaKMXycJ3+FxtxqLibrZu9fwhABfnD8 yNzRSV6t2Mi1lXaIi3QOq2udJR0I784= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:36 2025 by rpki-client