$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa File: b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa (raw, json) Hash identifier: dOijs2cPOuTDPB5HJOjGdxs7UxG07yZrkbLulHI3CL4= Subject key identifier: 50:6E:9B:82:DA:79:7E:83:0E:EC:B1:D1:9B:5E:2D:7A:11:D8:5C:0A Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F43285849E7BA897C0A2F0E2122DAF100 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 7018 IP address blocks: 52.128.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:89:7c:0a:2f:0e:21:22:da:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=2fd0df8f-bfd1-49a5-a28c-15bffc5dce29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:7d:c1:fe:ed:39:7b:2c:8f:30:90:ec:52: 13:6f:8d:87:55:ff:cf:c4:32:cc:c8:5e:a7:34:52: 98:fb:d6:c2:0a:99:34:d8:10:ca:c2:a4:1a:73:96: 89:49:9a:f0:c5:de:91:21:6b:5f:90:0e:8a:4f:72: de:2e:2e:18:35:0c:11:a8:38:ef:70:f6:c5:7f:54: a1:13:80:a8:9b:43:69:6b:0e:58:0a:0c:2c:7b:b8: 34:47:6f:68:f8:af:0e:9f:ac:66:1f:d5:07:9f:25: 36:c2:5f:f2:96:6c:6c:d2:71:13:ae:e0:4e:0b:30: 34:9f:cf:35:fe:0a:af:da:e5:35:75:eb:1f:db:c7: 28:07:0a:09:b1:6d:65:3e:82:72:46:5b:12:c1:f3: 6d:38:9c:33:a6:99:8a:b3:3e:22:ba:cd:8d:b4:61: 86:42:8e:cf:e9:d3:9f:eb:a1:27:63:a0:b2:43:df: 21:fa:31:03:b4:f8:0c:d2:5b:91:18:5c:d9:b8:84: a1:a7:9f:62:69:4e:c4:68:73:fe:e4:4b:55:6d:ee: 52:8d:e6:8f:a9:8e:2d:0d:92:b2:22:d4:49:5f:73: 0b:85:75:7a:18:aa:2d:85:fa:d7:17:f4:db:3f:e0: 81:2c:13:3f:98:a1:69:73:79:a1:98:74:78:c0:2c: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:9B:82:DA:79:7E:83:0E:EC:B1:D1:9B:5E:2D:7A:11:D8:5C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b9:7e:fe:03:26:35:ac:ec:6c:d1:b7:64:07:96:fb:68:db: 86:43:d5:80:29:5d:57:1a:85:20:ec:85:a7:61:04:59:f6:f0: 54:b3:b7:3e:3d:a5:d6:33:8e:4c:49:84:b5:0a:70:9a:65:e8: 6b:84:8a:ed:11:8a:e0:a0:50:48:f0:ea:69:67:29:c3:e3:a2: f7:b2:8b:b6:96:17:42:67:97:b7:cb:3d:c8:9b:e7:eb:e4:49: ce:aa:5f:4d:21:f0:26:1e:32:85:d5:e6:10:9d:f8:e9:76:dc: d6:06:12:01:ad:c1:9f:89:c3:b8:58:ff:57:55:ab:8e:c4:d6: 37:38:7a:45:4b:8c:55:a4:5a:36:d6:fd:14:f9:27:3e:bb:ea: 13:c7:01:1d:80:56:49:6c:58:b7:cb:4f:69:e1:da:e6:a5:a0: 6b:af:c2:44:79:cc:d3:df:73:93:ce:14:47:f3:cb:0e:e1:eb: 68:eb:4f:b9:30:7f:33:66:7b:50:86:e1:e5:0f:e9:fc:6b:12: 4a:af:81:a6:1e:52:cb:87:a3:fd:54:b8:12:c5:f4:14:3b:71: 97:aa:1d:a3:da:7e:f7:ab:7d:2f:95:ec:e9:50:2c:87:05:f7: e4:f1:0f:87:43:cd:a5:43:59:09:bd:56:d2:45:06:62:ea:d3: 24:97:fc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuol8Ci8OISLa8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MmZkMGRmOGYtYmZkMS00OWE1LWEyOGMtMTViZmZjNWRjZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFt9wf7tOXssjzCQ7FITb42HVf/PxDLMyF6n NFKY+9bCCpk02BDKwqQac5aJSZrwxd6RIWtfkA6KT3LeLi4YNQwRqDjvcPbFf1Sh E4Com0Npaw5YCgwse7g0R29o+K8On6xmH9UHnyU2wl/ylmxs0nETruBOCzA0n881 /gqv2uU1desf28coBwoJsW1lPoJyRlsSwfNtOJwzppmKsz4ius2NtGGGQo7P6dOf 66EnY6CyQ98h+jEDtPgM0luRGFzZuIShp59iaU7EaHP+5EtVbe5SjeaPqY4tDZKy ItRJX3MLhXV6GKothfrXF/TbP+CBLBM/mKFpc3mhmHR4wCzvwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBum4LaeX6DDuyx0ZteLXoR2FwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvYjlmODkwZWMtMDNhNC0z NTRjLWI1YTEtYWIxZTM5ZjFhZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK25fv4DJjWs7GzRt2QHlvto24ZD1YApXVcahSDshadhBFn28FSztz49 pdYzjkxJhLUKcJpl6GuEiu0RiuCgUEjw6mlnKcPjoveyi7aWF0Jnl7fLPcib5+vk Sc6qX00h8CYeMoXV5hCd+Ol23NYGEgGtwZ+Jw7hY/1dVq47E1jc4ekVLjFWkWjbW /RT5Jz676hPHAR2AVklsWLfLT2nh2ualoGuvwkR5zNPfc5POFEfzyw7h62jrT7kw fzNme1CG4eUP6fxrEkqvgaYeUsuHo/1UuBLF9BQ7cZeqHaPafverfS+V7OlQLIcF 9+TxD4dDzaVDWQm9VtJFBmLq0ySX/C8= -----END CERTIFICATE-----Generated at Mon Jun 30 01:32:27 2025 by rpki-client