$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa File: 35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json) Hash identifier: pfA2ihWFeeQcQHVMa88HsFSYg9qFnsYzwHQ1jOxl6Vc= Subject key identifier: 2B:54:8B:36:70:F5:17:DA:14:A1:1E:2E:8E:79:91:3D:40:51:24:37 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F43285849AA4F724F67F96AF1C02D6880 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:72:4f:67:f9:6a:f1:c0:2d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=cab9751a-a56b-4071-9f5a-7cc615a51fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:96:9d:57:01:14:d8:c6:89:60:12:62:c1:7a: 51:1f:8e:bb:48:6c:fd:bc:11:e6:9d:22:16:8a:c5: 70:07:de:25:0b:bb:b1:82:ea:05:61:10:81:49:b8: 63:3e:1c:45:46:18:12:d5:5a:8d:ab:e6:3d:e8:d5: 8a:a3:c1:44:0d:f2:0f:36:66:98:29:3e:0e:b9:67: 6b:c1:67:f9:98:c2:83:b1:1f:cc:35:6a:2c:10:e3: e9:7b:8f:28:3f:ef:20:29:3b:5a:4f:db:d4:9d:ab: ff:33:ac:43:85:f3:53:62:ca:87:0a:ba:08:36:d0: c1:62:c8:64:72:ee:31:cd:f1:c1:4f:d2:40:3a:57: 70:9b:dc:3a:e3:4d:23:e4:7a:01:a0:47:b1:2f:aa: ed:8e:d2:00:1b:4a:50:f2:7b:af:24:e3:23:c7:98: 50:76:1f:94:ea:d0:ba:b2:93:18:85:09:a3:f5:ea: f8:6d:fb:92:36:a7:d9:ff:d8:10:75:7a:6a:b5:68: a9:d9:9d:1d:b8:01:83:d7:77:93:40:4f:51:74:3c: 77:6a:dc:a6:fd:87:aa:19:ee:0b:c1:a8:0e:fb:20: 2b:80:bb:2d:69:e2:9e:a5:47:a9:83:3d:06:06:45: 50:55:af:b7:e8:e5:2c:a9:3a:07:9d:7f:af:26:b1: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:54:8B:36:70:F5:17:DA:14:A1:1E:2E:8E:79:91:3D:40:51:24:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f1:9b:7b:5a:de:b9:e9:ac:fb:a0:ad:2e:8c:cc:06:96:f7: d8:cb:a6:ed:3d:c8:ce:3f:0a:d0:24:c9:61:c7:95:dd:9c:59: 20:da:d8:3c:cf:a8:b1:dd:a4:ea:7b:eb:f0:cf:da:28:98:99: 68:96:6d:63:08:1a:29:62:0b:82:33:fc:c2:e8:f7:14:c8:ba: bc:61:34:bf:e9:64:bb:eb:bd:50:80:d3:5c:f4:c4:82:65:6e: 94:b3:cb:0f:6a:27:92:34:2e:ce:73:e9:19:d9:4c:ca:1d:81: 20:04:bc:ad:77:16:f1:81:2a:b8:07:44:43:0d:b7:6f:15:3c: 13:c4:44:49:c2:d7:b6:cc:f0:6a:2a:bf:02:f9:b7:74:8a:ac: 11:b2:01:ac:11:11:72:c2:db:7a:b4:59:54:db:00:0e:68:1c: 20:aa:e9:47:32:ec:3e:70:5d:37:95:94:90:e4:2d:8a:05:f8: db:8c:8d:a3:c8:c9:bf:30:0f:4b:04:71:1b:e5:df:c7:3f:f5: 00:39:ad:82:42:c3:28:6a:78:a5:6a:6c:60:11:ec:75:f3:88: 33:dd:a0:05:d7:65:b0:7a:17:aa:17:2f:07:af:39:f5:57:d7: da:da:bf:aa:b5:40:6d:93:19:60:d3:03:f2:c2:2b:b9:16:88: 81:ff:f7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3JPZ/lq8cAtaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk Y2FiOTc1MWEtYTU2Yi00MDcxLTlmNWEtN2NjNjE1YTUxZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55adVwEU2MaJYBJiwXpRH467SGz9vBHmnSIW isVwB94lC7uxguoFYRCBSbhjPhxFRhgS1VqNq+Y96NWKo8FEDfIPNmaYKT4OuWdr wWf5mMKDsR/MNWosEOPpe48oP+8gKTtaT9vUnav/M6xDhfNTYsqHCroINtDBYshk cu4xzfHBT9JAOldwm9w6400j5HoBoEexL6rtjtIAG0pQ8nuvJOMjx5hQdh+U6tC6 spMYhQmj9er4bfuSNqfZ/9gQdXpqtWip2Z0duAGD13eTQE9RdDx3atym/YeqGe4L wagO+yArgLstaeKepUepgz0GBkVQVa+36OUsqToHnX+vJrFxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtUizZw9RfaFKEeLo55kT1AUSQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzVlYjljZmItZWU0OS0z MDE4LThkODgtNzI5Y2E3YmM5MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfxm3ta3rnprPugrS6MzAaW99jLpu09yM4/CtAkyWHHld2cWSDa2DzP qLHdpOp76/DP2iiYmWiWbWMIGiliC4Iz/MLo9xTIurxhNL/pZLvrvVCA01z0xIJl bpSzyw9qJ5I0Ls5z6RnZTModgSAEvK13FvGBKrgHREMNt28VPBPEREnC17bM8Goq vwL5t3SKrBGyAawREXLC23q0WVTbAA5oHCCq6Ucy7D5wXTeVlJDkLYoF+NuMjaPI yb8wD0sEcRvl38c/9QA5rYJCwyhqeKVqbGAR7HXziDPdoAXXZbB6F6oXLwevOfVX 19rav6q1QG2TGWDTA/LCK7kWiIH/90M= -----END CERTIFICATE-----Generated at Sun May 11 10:19:17 2025 by rpki-client