$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa File: 476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa (raw, json) Hash identifier: fUCmb/O+Dq/SIa8DOGe/jVzLhi44sire3S0i/X3aQgw= Subject key identifier: F7:0B:C7:4B:FE:CB:0A:9A:67:B4:55:0A:30:AB:D8:D6:D7:E8:C7:B2 Certificate issuer: /CN=03076186-05a5-4f02-8553-d5325a66f27c Certificate serial: 010D0C9F43285849F71510758B01CFC40444AD00 Authority key identifier: 69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 395454 IP address blocks: 52.144.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:10:75:8b:01:cf:c4:04:44:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03076186-05a5-4f02-8553-d5325a66f27c Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=ec3c0986-fd75-47c4-80f0-c9883a4a41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a7:c9:48:89:58:a6:de:36:2e:99:69:41:d8: e0:c1:31:ec:26:f2:e4:27:d8:26:3b:9f:aa:9c:27: cc:60:5c:f9:19:58:21:90:87:d8:81:06:5d:35:42: c3:91:e8:be:36:0b:8a:9d:d4:46:0b:0f:62:20:87: 83:d7:33:e9:fd:05:b3:92:0f:50:a9:82:c5:92:34: 6f:04:dc:d6:81:bc:c5:7b:20:1d:a6:e8:c7:be:58: dd:24:8f:09:34:e9:bf:7d:17:a4:17:ee:a6:bd:bc: 70:53:d6:6f:45:22:db:1e:d5:8e:7e:14:a9:fc:ca: e8:54:7f:02:8f:55:77:61:5d:97:80:71:80:cb:4f: b4:5c:94:fd:10:1d:3f:47:9e:15:8b:ea:11:e5:47: 58:b9:4c:32:d9:f6:9b:25:cd:a2:d6:ed:e8:24:9d: 7c:74:67:e7:c0:fe:13:30:c0:21:9a:49:ce:3e:7f: 6b:ff:22:40:50:e8:7a:ed:7e:89:55:24:76:dc:92: 69:98:64:4a:b4:19:d3:83:a9:6a:bb:c4:67:7d:4e: a5:a9:6d:7d:b0:ae:6f:84:a2:64:2e:03:a6:63:3d: f2:3f:29:70:80:f2:b4:c7:89:db:2a:0f:85:5a:49: 26:3f:58:6b:71:70:e7:de:35:f3:86:51:56:d6:6d: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:C7:4B:FE:CB:0A:9A:67:B4:55:0A:30:AB:D8:D6:D7:E8:C7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.crl X509v3 Authority Key Identifier: keyid:69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer sbgp-ipAddrBlock: critical IPv4: 52.144.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ee:40:2c:ce:3c:0e:35:4c:70:97:9c:9e:1b:7b:04:97:ba: 32:22:1b:26:dc:40:62:13:76:11:e9:44:6f:20:12:0c:00:9f: 39:1a:dc:af:13:4d:d1:dc:a3:88:61:13:1e:81:3f:6c:6f:62: 5a:10:10:c0:dc:95:9c:e0:89:cf:27:b3:6d:00:2d:70:44:c7: 5d:fc:b2:92:b2:b6:6a:b6:d4:4a:54:e9:a6:0a:d0:5a:98:8f: 52:09:24:09:ed:21:68:e2:28:93:c8:e9:3c:28:16:bc:e2:65: 45:77:24:7f:0c:d2:67:d5:9e:15:88:d5:4b:26:e7:e8:70:44: b5:6c:be:8a:b9:ad:2d:75:99:89:0a:1e:e7:2c:c4:d7:11:17: c9:6f:6c:82:c9:ac:7a:fa:b6:a7:3f:b9:4a:79:6e:f6:69:fb: 7b:4f:b5:35:ac:53:fd:c6:0d:83:ba:c4:60:43:d2:75:24:9e: a5:e1:51:0a:f9:52:7a:cc:5d:45:cd:b2:02:a7:ca:86:9f:81: 4b:00:1d:1c:c6:80:82:33:90:cb:fa:47:40:44:a2:3a:3d:5f: 0f:42:5b:d7:94:66:e7:35:79:22:b3:78:47:10:d3:32:13:21: d5:73:f4:b8:79:8f:5a:ca:8d:15:09:bb:ff:35:a2:13:ed:60: e7:88:94:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRB1iwHPxARErQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMwNzYxODYtMDVhNS00ZjAyLTg1NTMtZDUzMjVhNjZm MjdjMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWMzYzA5ODYtZmQ3NS00N2M0LTgwZjAtYzk4ODNhNGE0MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/KfJSIlYpt42LplpQdjgwTHsJvLkJ9gmO5+q nCfMYFz5GVghkIfYgQZdNULDkei+NguKndRGCw9iIIeD1zPp/QWzkg9QqYLFkjRv BNzWgbzFeyAdpujHvljdJI8JNOm/fRekF+6mvbxwU9ZvRSLbHtWOfhSp/MroVH8C j1V3YV2XgHGAy0+0XJT9EB0/R54Vi+oR5UdYuUwy2fabJc2i1u3oJJ18dGfnwP4T MMAhmknOPn9r/yJAUOh67X6JVSR23JJpmGRKtBnTg6lqu8RnfU6lqW19sK5vhKJk LgOmYz3yPylwgPK0x4nbKg+FWkkmP1hrcXDn3jXzhlFW1m2zTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcLx0v+ywqaZ7RVCjCr2NbX6MeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMzA3 NjE4Ni0wNWE1LTRmMDItODU1My1kNTMyNWE2NmYyN2MvNDc2YjgxZTMtMGE5ZS0z MTIzLWIxZmQtNjIxM2RhOWVjNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDMwNzYxODYtMDVhNS00ZjAyLTg1 NTMtZDUzMjVhNjZmMjdjLzAzMDc2MTg2LTA1YTUtNGYwMi04NTUzLWQ1MzI1YTY2 ZjI3Yy5jcmwwHwYDVR0jBBgwFoAUadQ15ZAjgGvSMTEjd+t0GxZUTrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMzA3NjE4Ni0wNWE1LTRmMDItODU1My1kNTMy NWE2NmYyN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXuQCzOPA41THCXnJ4bewSXujIiGybcQGITdhHpRG8gEgwAnzka3K8T TdHco4hhEx6BP2xvYloQEMDclZzgic8ns20ALXBEx138spKytmq21EpU6aYK0FqY j1IJJAntIWjiKJPI6TwoFrziZUV3JH8M0mfVnhWI1Usm5+hwRLVsvoq5rS11mYkK HucsxNcRF8lvbILJrHr6tqc/uUp5bvZp+3tPtTWsU/3GDYO6xGBD0nUknqXhUQr5 UnrMXUXNsgKnyoafgUsAHRzGgIIzkMv6R0BEojo9Xw9CW9eUZuc1eSKzeEcQ0zIT IdVz9Lh5j1rKjRUJu/81ohPtYOeIlMY= -----END CERTIFICATE-----Generated at Wed Jul 2 06:50:21 2025 by rpki-client