$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: /ZXia8mNS9JTAvQkTgRGWnxOCkp0mXSGPT1caEsEmQE= Subject key identifier: 32:39:C0:90:8B:26:9B:8A:45:B5:77:15:8A:21:42:56:8F:5B:69:61 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584A506AF2048D795BCC1B6FBF80 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f2:04:8d:79:5b:cc:1b:6f:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=0649f61c-f3d0-4a2e-b4cf-d6d63a94bb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:02:7a:80:d9:cf:8a:74:62:78:7c:bc:ed: 7d:51:ef:ed:e0:3d:64:55:4b:a9:73:cf:6b:54:62: e9:eb:97:14:75:c7:d3:48:13:34:e5:2e:36:24:c9: 95:68:19:b0:86:2c:8c:a7:aa:e3:07:c5:3d:9d:2f: 86:60:33:9d:c8:a9:90:bb:66:af:e0:da:e1:0e:0e: cd:7d:e8:f5:b0:3f:7f:da:6f:9b:96:e1:7f:26:2d: d3:44:f1:74:aa:e6:36:ef:4a:a1:b1:ca:91:1d:89: 86:f7:31:c7:69:e4:be:b5:1e:77:4a:19:0b:be:36: 32:75:90:85:80:b7:e7:ba:61:67:f6:f3:1a:4b:13: 33:c6:a3:7f:80:18:0c:c2:d2:e8:ff:60:a5:fa:26: 3f:02:e1:22:46:24:0c:5e:81:63:0c:15:e9:88:56: 62:01:f7:59:ea:14:aa:7f:55:dd:9e:a6:c9:be:48: 86:5a:c9:fa:2f:fe:50:46:b6:5e:72:d9:e9:ec:ac: d6:b2:f9:1d:76:71:d2:f7:3b:69:d0:ea:96:8e:81: 3f:1b:e1:fd:c5:f7:3a:60:2e:ce:c2:b6:00:bb:bf: 17:d2:59:be:97:6c:17:ee:eb:7d:4d:ec:f1:23:1f: 0a:50:0b:f3:d4:0b:b5:fe:56:e3:60:c7:64:ae:51: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:C0:90:8B:26:9B:8A:45:B5:77:15:8A:21:42:56:8F:5B:69:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:45:23:4d:12:a6:69:bb:ef:49:06:18:d1:a9:a4:0a:c1:c5: 09:71:3d:c9:5e:a2:86:44:22:c6:e5:61:c0:48:23:4b:8f:da: 3d:32:99:e2:bb:da:e7:05:7c:77:44:3c:21:31:ad:0c:42:41: a4:af:f2:29:dd:94:7a:dc:71:81:a4:2a:04:58:39:b3:85:f4: 6b:38:13:af:16:77:c7:b6:04:24:22:64:b2:b9:51:99:77:cb: df:8c:14:8e:bd:49:e9:8e:5d:4d:a2:46:58:92:c6:77:e0:f9: af:8f:82:61:15:90:2c:1f:ce:62:88:32:5c:cc:12:40:57:c0: 33:a2:0e:25:c4:6f:ab:8f:31:a1:bb:11:06:53:a1:c6:b3:45: ec:92:fd:c0:79:d6:53:88:0f:5a:92:74:77:16:1a:ba:3a:b8: af:a9:06:f9:6e:59:b5:df:cc:ce:65:6f:45:72:bc:0d:80:14: 57:74:08:72:ca:9e:d7:3e:e4:6e:d2:03:8d:b0:f6:d3:39:54: cf:af:6e:70:af:14:08:0e:3c:46:67:45:2c:a4:ff:e4:4a:be: 36:5a:81:01:0f:52:88:94:de:74:eb:63:2b:eb:dc:b8:cb:81: d3:2a:89:19:23:9f:56:ce:e7:dc:0b:33:1e:6f:f1:d4:cb:2c: ec:9c:7a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavIEjXlbzBtvv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk MDY0OWY2MWMtZjNkMC00YTJlLWI0Y2YtZDZkNjNhOTRiYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngQCeoDZz4p0Ynh8vO19Ue/t4D1kVUupc89r VGLp65cUdcfTSBM05S42JMmVaBmwhiyMp6rjB8U9nS+GYDOdyKmQu2av4NrhDg7N fej1sD9/2m+bluF/Ji3TRPF0quY270qhscqRHYmG9zHHaeS+tR53ShkLvjYydZCF gLfnumFn9vMaSxMzxqN/gBgMwtLo/2Cl+iY/AuEiRiQMXoFjDBXpiFZiAfdZ6hSq f1XdnqbJvkiGWsn6L/5QRrZectnp7KzWsvkddnHS9ztp0OqWjoE/G+H9xfc6YC7O wrYAu78X0lm+l2wX7ut9TezxIx8KUAvz1Au1/lbjYMdkrlEnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI5wJCLJpuKRbV3FYohQlaPW2lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdFI00Spmm770kGGNGppArBxQlxPcleooZEIsblYcBII0uP2j0ymeK7 2ucFfHdEPCExrQxCQaSv8indlHrccYGkKgRYObOF9Gs4E68Wd8e2BCQiZLK5UZl3 y9+MFI69SemOXU2iRliSxnfg+a+PgmEVkCwfzmKIMlzMEkBXwDOiDiXEb6uPMaG7 EQZTocazReyS/cB51lOID1qSdHcWGro6uK+pBvluWbXfzM5lb0VyvA2AFFd0CHLK ntc+5G7SA42w9tM5VM+vbnCvFAgOPEZnRSyk/+RKvjZagQEPUoiU3nTrYyvr3LjL gdMqiRkjn1bO59wLMx5v8dTLLOycenc= -----END CERTIFICATE-----Generated at Mon Jun 30 10:53:31 2025 by rpki-client