$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa File: dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa (raw, json) Hash identifier: r1bGUlT25V1/A15q++Ty3IGSlUiDsnFpDdKp9mcoIlI= Subject key identifier: EF:1D:DD:32:1D:A1:98:E9:E5:8F:32:3E:33:E5:90:F9:5E:15:F9:CF Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae Certificate serial: 010D0C9F43285849D1650DAD111F8192087600C0 Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 52.129.152.0/21 maxlen: 24 52.129.160.0/19 maxlen: 24 52.129.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0d:ad:11:1f:81:92:08:76:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3b39bb91-e708-46d8-a3d5-509fcc0035f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:a0:35:b3:0c:dc:6d:34:ae:2f:64:40:b0: a5:8a:8c:74:52:bf:85:dd:51:be:05:87:35:d9:a6: 5f:04:5d:78:20:f3:ec:d0:c9:47:6c:fa:c7:3c:7d: 32:0d:c6:a1:7e:c5:37:d8:a0:f2:e6:d5:47:f2:fa: 4a:55:fa:2d:84:62:23:af:ac:d5:b6:b8:c9:57:b0: b5:00:97:b8:93:2f:e1:f1:ba:4e:2a:55:ba:5b:a1: 30:0f:e0:99:77:ab:c3:9c:f1:da:23:b8:5c:61:c2: 0c:0d:2c:87:c5:5f:cc:97:fd:df:65:0f:08:79:55: 6b:73:9c:55:c3:f5:82:3d:41:3e:75:08:4c:c2:04: 64:26:58:09:a1:fc:d9:da:5a:c1:8b:1e:92:9d:ab: af:6a:a2:6f:c3:20:86:fb:7e:e0:8b:30:2d:0b:7a: 6a:f3:09:3c:bd:0d:c2:5a:9d:4a:d5:a8:f9:60:18: 2d:7f:08:17:4b:c1:f6:1d:89:7a:70:29:88:c7:09: e8:d2:77:5c:7e:d5:57:95:64:92:11:fd:91:6e:27: fc:8f:52:3a:10:b2:e0:b6:8e:6f:bc:7b:a5:96:f7: 78:4b:2e:07:7a:18:56:eb:42:43:9a:73:f2:16:c4: 5f:ed:47:c3:8b:e1:85:fe:48:17:d0:df:cf:ac:2f: 77:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:DD:32:1D:A1:98:E9:E5:8F:32:3E:33:E5:90:F9:5E:15:F9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl X509v3 Authority Key Identifier: keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer sbgp-ipAddrBlock: critical IPv4: 52.129.152.0-52.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:55:94:40:97:0c:e5:43:ae:cf:a5:b2:99:1e:dc:bb:40:cc: 4c:4f:8c:b1:f8:4c:d2:92:4e:1c:17:27:19:d1:24:a5:9d:5e: 79:21:d7:67:7d:aa:b2:b9:23:e6:63:5e:68:1e:d2:d0:20:59: 60:aa:c4:80:b6:bc:79:31:05:db:5c:cf:8b:4d:1d:0e:84:9c: 58:e8:e0:39:92:5e:14:a8:4c:06:02:7d:0a:b6:1c:c8:82:eb: 16:d3:fc:43:62:e4:8d:18:b3:ab:f8:32:8a:77:c3:db:d4:3a: be:0b:f8:8a:f7:35:12:ee:f4:11:e9:a4:e7:f2:08:9a:a0:2f: 01:7d:20:06:83:67:ca:ad:10:3a:3c:2a:e2:66:a2:7d:59:49: ea:10:cd:6d:e2:74:8c:d9:66:29:77:26:88:aa:81:ba:11:10: 88:57:56:6b:c1:b1:04:59:cb:26:11:ce:af:55:62:2f:77:c4: c5:96:42:37:2b:c0:8a:5c:9f:ae:a2:92:dd:31:be:f0:93:75: 57:e5:b5:6e:99:01:73:ce:aa:ea:71:80:a8:b7:4b:dc:31:8f: 42:5d:96:a6:37:8a:00:a7:7d:11:a7:5a:c0:d8:a8:75:eb:f8: 50:d3:08:ac:79:03:e6:cb:c5:cf:02:cb:e7:ed:be:36:0d:0e: b2:87:00:b4 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEnRZQ2tER+Bkgh2AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYyNzc1NmEtYjMyMi00OWU2LTk0MWUtZWQzMGU5YWI5 ZWFlMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk M2IzOWJiOTEtZTcwOC00NmQ4LWEzZDUtNTA5ZmNjMDAzNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4+gNbMM3G00ri9kQLCliox0Ur+F3VG+BYc1 2aZfBF14IPPs0MlHbPrHPH0yDcahfsU32KDy5tVH8vpKVfothGIjr6zVtrjJV7C1 AJe4ky/h8bpOKlW6W6EwD+CZd6vDnPHaI7hcYcIMDSyHxV/Ml/3fZQ8IeVVrc5xV w/WCPUE+dQhMwgRkJlgJofzZ2lrBix6SnauvaqJvwyCG+37gizAtC3pq8wk8vQ3C Wp1K1aj5YBgtfwgXS8H2HYl6cCmIxwno0ndcftVXlWSSEf2Rbif8j1I6ELLgto5v vHullvd4Sy4HehhW60JDmnPyFsRf7UfDi+GF/kgX0N/PrC93FQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFO8d3TIdoZjp5Y8yPjPlkPleFfnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3 NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMwZTlhYjllYWUvZGJmZjZhZDItNjg1OS0z OWFlLWE3NGEtM2E2YWZmYWE4MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYyNzc1NmEtYjMyMi00OWU2LTk0 MWUtZWQzMGU5YWI5ZWFlLzI2Mjc3NTZhLWIzMjItNDllNi05NDFlLWVkMzBlOWFi OWVhZS5jcmwwHwYDVR0jBBgwFoAUhEDJBl4qqtMfJnCblEkUz3KanGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMw ZTlhYjllYWUuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAM0gZgD AwE0gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBZVZRAlwzlQ67PpbKZHty7QMxMT4yx+EzSkk4cFycZ0SSl nV55IddnfaqyuSPmY15oHtLQIFlgqsSAtrx5MQXbXM+LTR0OhJxY6OA5kl4UqEwG An0KthzIgusW0/xDYuSNGLOr+DKKd8Pb1Dq+C/iK9zUS7vQR6aTn8giaoC8BfSAG g2fKrRA6PCriZqJ9WUnqEM1t4nSM2WYpdyaIqoG6ERCIV1ZrwbEEWcsmEc6vVWIv d8TFlkI3K8CKXJ+uopLdMb7wk3VX5bVumQFzzqrqcYCot0vcMY9CXZamN4oAp30R p1rA2Kh16/hQ0wiseQPmy8XPAsvn7b42DQ6yhwC0 -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:04 2025 by rpki-client