$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: Qe3AwJoyZ7pifXLme5cvPo8atSp9XnqVMNWgoJxaDl8= Subject key identifier: 49:40:39:C2:AE:02:0F:F3:CB:A1:E6:AD:51:5E:44:35:29:4C:D4:52 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A43DB04BAE940CCE658414500 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:04:ba:e9:40:cc:e6:58:41:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=dcca9bd3-8ead-406e-a8a3-ab6466f6171e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:a0:b0:15:e4:3b:98:ae:1e:3d:09:28:4b: 3e:ce:ec:5c:35:ce:74:82:d9:e3:8f:5c:a0:87:79: 17:a5:e1:bf:07:46:80:06:ba:02:0e:0f:9a:57:7e: dd:cb:0a:33:7e:b7:1a:0b:43:f7:e7:f0:ed:f6:05: da:4d:3b:e9:77:65:fe:43:9a:88:95:d5:fc:b4:09: d2:b7:c7:b7:0d:b1:50:75:ce:b5:9d:b3:98:0c:3f: 62:f2:29:20:74:5b:29:bf:f5:b2:c2:bf:2c:fc:af: 85:33:31:b8:b9:86:55:88:b5:71:9f:9d:4c:ae:78: 25:f9:34:e9:1b:40:15:f5:24:ad:b6:03:e6:38:0e: 57:d6:15:66:bf:e0:c3:4b:4e:5e:1a:f6:47:7c:2f: 4c:ed:c2:25:cc:91:86:8f:78:09:94:e3:dc:32:cb: d1:07:66:e9:d0:eb:f0:d0:24:63:83:1d:f9:b8:60: e8:0f:5f:2f:7b:41:e1:19:6c:ab:3b:63:71:53:63: 1a:1b:83:1a:27:0c:ff:fd:96:91:eb:50:03:58:27: 7e:3f:27:70:29:2e:c4:92:fa:bb:9b:33:ab:8b:05: 19:95:27:89:e8:89:42:50:cf:00:27:a5:45:c1:7d: 3c:f7:00:c7:47:bd:9c:54:d9:9c:80:9a:c9:7c:e6: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:39:C2:AE:02:0F:F3:CB:A1:E6:AD:51:5E:44:35:29:4C:D4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8e:83:ba:4b:1c:26:f4:a4:db:80:c2:06:5c:22:58:dd:7f: 8f:30:11:54:5d:db:19:f1:71:67:d7:59:7a:6b:c4:47:69:13: 05:c6:b0:ec:0f:23:41:07:ba:c1:81:8c:e4:8f:77:2c:ef:4e: 8d:34:7f:70:70:d9:ed:6e:dc:43:ae:b2:a5:a9:f1:6d:93:2d: a7:e4:0c:fe:bd:a5:26:61:cd:69:65:e1:50:dc:0f:c1:62:4b: 00:ae:5d:f7:29:70:5d:3e:c9:fd:17:97:89:60:8b:b1:ef:45: b1:0e:2d:c9:fd:22:93:75:64:9a:95:f2:0d:23:7c:cc:1f:f0: 95:ca:de:2e:ad:dd:00:e1:08:83:30:82:5e:98:b0:6e:a6:94: b7:61:67:2d:2f:f2:dd:a2:97:80:4b:49:9c:4f:25:0d:c1:ae: 53:af:d2:9f:bc:1f:64:a4:f7:10:28:8b:ee:b8:2d:f1:a2:3d: a7:cc:e0:20:f1:8a:8e:51:4d:98:5c:01:71:48:ba:96:34:30: 42:d8:73:72:61:a0:9d:42:b7:c2:db:93:2e:d7:77:d3:1b:33: f5:2c:07:f4:5e:95:ef:16:4d:d0:44:b4:7e:38:40:4a:d8:a1: c9:d7:ce:9c:d6:7e:16:0a:65:0a:ab:a4:2a:25:48:67:d3:31: 3e:d0:8d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wS66UDM5lhBRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZGNjYTliZDMtOGVhZC00MDZlLWE4YTMtYWI2NDY2ZjYxNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8SgsBXkO5iuHj0JKEs+zuxcNc50gtnjj1yg h3kXpeG/B0aABroCDg+aV37dywozfrcaC0P35/Dt9gXaTTvpd2X+Q5qIldX8tAnS t8e3DbFQdc61nbOYDD9i8ikgdFspv/Wywr8s/K+FMzG4uYZViLVxn51Mrngl+TTp G0AV9SSttgPmOA5X1hVmv+DDS05eGvZHfC9M7cIlzJGGj3gJlOPcMsvRB2bp0Ovw 0CRjgx35uGDoD18ve0HhGWyrO2NxU2MaG4MaJwz//ZaR61ADWCd+PydwKS7Ekvq7 mzOriwUZlSeJ6IlCUM8AJ6VFwX089wDHR72cVNmcgJrJfOa8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElAOcKuAg/zy6HmrVFeRDUpTNRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Og7pLHCb0pNuAwgZcIljdf48wEVRd2xnxcWfXWXprxEdpEwXGsOwP I0EHusGBjOSPdyzvTo00f3Bw2e1u3EOusqWp8W2TLafkDP69pSZhzWll4VDcD8Fi SwCuXfcpcF0+yf0Xl4lgi7HvRbEOLcn9IpN1ZJqV8g0jfMwf8JXK3i6t3QDhCIMw gl6YsG6mlLdhZy0v8t2il4BLSZxPJQ3BrlOv0p+8H2Sk9xAoi+64LfGiPafM4CDx io5RTZhcAXFIupY0MELYc3JhoJ1Ct8Lbky7Xd9MbM/UsB/Rele8WTdBEtH44QErY ocnXzpzWfhYKZQqrpColSGfTMT7QjU0= -----END CERTIFICATE-----Generated at Mon Jun 30 06:10:01 2025 by rpki-client