$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa File: 533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa (raw, json) Hash identifier: CcPmId96+FUL9KGXbOmT34GbbBi4KEXzG/Vr8V0VnGI= Subject key identifier: 02:87:4C:93:2E:D7:54:B6:00:D7:AF:E1:0B:59:F2:8F:B6:75:0C:14 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F432858494CC93EE0748764EDBB798010 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 62610 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3e:e0:74:87:64:ed:bb:79:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=9274edbb-b747-41b4-b38e-d1ef459288d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:9d:15:31:b8:1e:07:35:5b:00:ea:86:9d: 31:9e:9c:d5:91:df:29:e2:4e:92:ca:5a:14:02:68: ea:fd:8f:58:a3:2b:cb:55:65:fa:e9:58:d4:c2:f6: 7d:ac:4b:d8:c8:a2:51:b2:7b:1c:f5:3c:49:3a:ef: b9:45:43:81:b3:73:6b:54:86:80:b5:4b:f0:52:2b: ff:1f:04:c6:5a:d4:0c:86:30:89:d8:f5:48:3c:25: 53:95:07:8b:d6:1a:ef:65:bf:a2:61:84:a9:44:62: ab:db:20:4c:d5:cf:c4:04:bc:66:9d:e5:e8:c2:d5: ae:d0:fa:17:b4:eb:b0:7c:35:58:53:98:32:f4:42: 19:bc:4c:af:f6:06:f2:0c:c8:77:4b:18:a5:ad:97: de:73:ee:38:f3:40:9f:b5:77:fa:fb:d4:d5:c4:bf: af:b5:b1:f0:12:43:56:80:96:38:0d:de:00:94:39: dd:86:59:7d:b0:53:43:c5:33:24:70:01:5e:44:b5: 98:30:14:63:fa:8e:9c:e5:0d:f0:fa:e6:c6:bb:b3: 4b:9a:10:bb:9e:44:7d:09:33:31:5e:7e:45:cb:9d: d4:a0:85:7a:a3:9e:d9:44:9b:af:b5:1b:e2:bf:ad: ac:fc:32:81:c0:34:1c:bc:fe:09:de:53:0c:56:24: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:4C:93:2E:D7:54:B6:00:D7:AF:E1:0B:59:F2:8F:B6:75:0C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ab:2b:ae:01:e4:38:a1:8b:7e:13:df:4f:68:8d:f5:1e:48: fd:1a:52:5a:da:02:38:72:e5:b2:b1:e4:ca:c4:27:6c:13:fa: c5:a5:6f:f9:3c:bf:dd:94:fa:a5:07:58:b9:55:15:aa:89:a2: 0f:35:5d:b0:7a:d5:4f:83:d5:0e:de:03:5f:64:49:d2:e3:1c: b9:c3:ac:91:03:80:7f:f5:a5:bf:f6:ca:d8:d7:48:c4:0e:1e: 2f:5e:02:e8:66:f6:5d:62:67:cf:c5:4b:25:49:fa:75:3e:39: 66:4b:59:9a:7b:9a:8b:f8:83:bd:78:f1:c1:02:f6:13:a0:3e: 02:f4:19:d5:5c:ab:2a:50:bc:04:ae:21:09:bf:fa:63:33:86: b0:48:f5:9f:e9:34:39:df:3b:a1:83:ef:2e:5d:2c:05:2a:8c: bd:04:0c:24:9b:7c:b0:48:4f:05:de:dd:c0:0d:ae:a3:ea:80: be:2b:7f:ef:25:66:58:38:f9:0f:b4:e2:21:68:cb:dd:dc:64: df:bd:7e:39:c4:97:1c:c6:d7:53:39:00:a7:e0:d3:14:06:f6: db:96:d3:ba:b1:ed:12:f2:33:bf:52:99:06:e0:9d:27:1f:93: f7:97:56:d3:ac:66:c9:d9:58:61:12:0d:c2:84:0d:ee:eb:c3: 36:17:9a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT7gdIdk7bt5gBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTI3NGVkYmItYjc0Ny00MWI0LWIzOGUtZDFlZjQ1OTI4OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvWdFTG4Hgc1WwDqhp0xnpzVkd8p4k6SyloU Amjq/Y9YoyvLVWX66VjUwvZ9rEvYyKJRsnsc9TxJOu+5RUOBs3NrVIaAtUvwUiv/ HwTGWtQMhjCJ2PVIPCVTlQeL1hrvZb+iYYSpRGKr2yBM1c/EBLxmneXowtWu0PoX tOuwfDVYU5gy9EIZvEyv9gbyDMh3SxilrZfec+4480CftXf6+9TVxL+vtbHwEkNW gJY4Dd4AlDndhll9sFNDxTMkcAFeRLWYMBRj+o6c5Q3w+ubGu7NLmhC7nkR9CTMx Xn5Fy53UoIV6o57ZRJuvtRviv62s/DKBwDQcvP4J3lMMViTc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKHTJMu11S2ANev4QtZ8o+2dQwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzZDU4NTgtMGFmNy0z ZTdhLWIxYzEtZGIyMDRlNjZlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHarK64B5Dihi34T309ojfUeSP0aUlraAjhy5bKx5MrEJ2wT+sWlb/k8 v92U+qUHWLlVFaqJog81XbB61U+D1Q7eA19kSdLjHLnDrJEDgH/1pb/2ytjXSMQO Hi9eAuhm9l1iZ8/FSyVJ+nU+OWZLWZp7mov4g7148cEC9hOgPgL0GdVcqypQvASu IQm/+mMzhrBI9Z/pNDnfO6GD7y5dLAUqjL0EDCSbfLBITwXe3cANrqPqgL4rf+8l Zlg4+Q+04iFoy93cZN+9fjnElxzG11M5AKfg0xQG9tuW07qx7RLyM79SmQbgnScf k/eXVtOsZsnZWGESDcKEDe7rwzYXmp0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:27 2025 by rpki-client