$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa File: a104e0ef-bc59-3bf4-807f-36926a598f6e.roa (raw, json) Hash identifier: rNdpAYdUOO3VpBBecu3MWDEwuFB+8t+USlmiDL/X+qk= Subject key identifier: 88:68:73:A6:AD:83:94:7B:07:85:A0:1C:FE:F0:1C:38:3C:BE:FF:2E Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F43285849FE0FE64E7AE1D9C420E02280 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 398712 IP address blocks: 52.128.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e6:4e:7a:e1:d9:c4:20:e0:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=188bf6ec-42b7-4bd2-9d8e-dc70070cbb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:5a:fa:d8:be:0d:98:4a:1b:d2:de:4d:9d: 16:90:30:fc:81:2b:4a:75:41:c1:57:1e:9e:4c:e8: 28:60:fa:e3:38:29:99:92:b8:45:5a:0b:53:68:42: f0:7b:24:b1:21:d4:af:af:cf:33:30:d0:65:c7:d2: 8a:45:1d:ee:66:d9:b0:30:6a:50:46:a1:ac:8b:1c: 33:ae:21:89:6c:64:64:47:64:8c:68:e9:db:e0:52: 2a:f1:df:db:c0:0a:38:01:6a:dc:03:73:43:d3:e3: 0b:fd:14:26:2a:83:df:d9:a3:54:15:59:95:3e:d5: cc:79:4a:b3:9e:e8:9d:e0:bc:f9:37:b3:d2:79:cb: 43:1f:60:b6:4c:a9:51:91:29:12:53:54:45:d9:29: 65:50:77:47:1d:7d:6a:df:c9:8a:9b:e3:2c:d1:97: dd:3c:14:2e:10:86:96:ea:43:c0:21:36:23:ff:c6: 69:b7:51:3b:53:98:b4:ba:8f:0a:dc:7c:ce:5e:0c: a5:15:38:c0:df:7f:97:d6:bd:0b:f6:37:d1:56:42: 30:8b:68:fe:c4:5d:ed:24:41:6d:66:6e:c7:17:cb: 28:d1:e3:28:45:c4:c6:5e:86:d5:ca:f6:d0:ef:4f: 1e:42:cd:d4:06:f3:5b:21:7e:cb:ad:f0:f5:ba:0c: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:68:73:A6:AD:83:94:7B:07:85:A0:1C:FE:F0:1C:38:3C:BE:FF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:af:e6:5d:bb:e8:fa:82:5b:4c:ad:0b:f9:95:06:c1:30:41: f4:67:0b:24:88:d5:8e:72:0c:d6:66:21:44:38:ce:cb:df:91: 1d:27:68:a8:68:ee:0e:20:6c:36:1a:d5:4f:cb:77:53:78:d2: 45:6e:19:2f:22:3f:50:ec:ca:9d:57:5b:d8:f4:37:0d:9b:51: d7:ae:94:9d:d6:8f:bc:77:3f:96:29:f4:a0:35:1c:44:48:6a: 5d:3c:e0:54:07:e1:86:e0:d6:b8:3c:9b:2b:59:18:bb:3a:83: 6c:d9:ce:23:98:d3:06:94:30:31:f5:89:33:fa:a3:4f:d0:85: b5:fa:4f:46:7b:1b:eb:db:cd:37:98:8e:6b:9a:bc:b1:a3:56: 7e:f9:e8:08:92:f4:d5:20:fa:82:ed:2e:0e:de:7b:11:59:9f: 28:39:1e:b6:0b:55:83:ea:89:e8:67:8c:6b:ef:81:45:30:ba: 1b:e4:7c:c9:15:30:88:74:57:dc:29:3e:68:1f:58:8e:01:25: 91:46:6b:cc:fb:4e:ea:72:7e:88:fc:41:6b:b0:6c:f1:ac:74: e8:5e:6e:99:cc:a8:f6:04:33:06:f2:4c:c7:1c:93:21:bf:84: 02:9d:91:ee:3a:a9:74:91:c1:05:f8:93:56:cf:3d:da:68:e4: 56:31:d4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+ZOeuHZxCDgIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTg4YmY2ZWMtNDJiNy00YmQyLTlkOGUtZGM3MDA3MGNiYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQda+ti+DZhKG9LeTZ0WkDD8gStKdUHBVx6e TOgoYPrjOCmZkrhFWgtTaELweySxIdSvr88zMNBlx9KKRR3uZtmwMGpQRqGsixwz riGJbGRkR2SMaOnb4FIq8d/bwAo4AWrcA3ND0+ML/RQmKoPf2aNUFVmVPtXMeUqz nuid4Lz5N7PSectDH2C2TKlRkSkSU1RF2SllUHdHHX1q38mKm+Ms0ZfdPBQuEIaW 6kPAITYj/8Zpt1E7U5i0uo8K3HzOXgylFTjA33+X1r0L9jfRVkIwi2j+xF3tJEFt Zm7HF8so0eMoRcTGXobVyvbQ708eQs3UBvNbIX7LrfD1ugybgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhoc6atg5R7B4WgHP7wHDg8vv8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvYTEwNGUwZWYtYmM1OS0z YmY0LTgwN2YtMzY5MjZhNTk4ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWv5l276PqCW0ytC/mVBsEwQfRnCySI1Y5yDNZmIUQ4zsvfkR0naKho 7g4gbDYa1U/Ld1N40kVuGS8iP1Dsyp1XW9j0Nw2bUdeulJ3Wj7x3P5Yp9KA1HERI al084FQH4Ybg1rg8mytZGLs6g2zZziOY0waUMDH1iTP6o0/QhbX6T0Z7G+vbzTeY jmuavLGjVn756AiS9NUg+oLtLg7eexFZnyg5HrYLVYPqiehnjGvvgUUwuhvkfMkV MIh0V9wpPmgfWI4BJZFGa8z7Tupyfoj8QWuwbPGsdOhebpnMqPYEMwbyTMcckyG/ hAKdke46qXSRwQX4k1bPPdpo5FYx1Ko= -----END CERTIFICATE-----Generated at Mon Jun 30 06:52:38 2025 by rpki-client