$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa File: 2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa (raw, json) Hash identifier: IZ+mErdklO43wbHncxw8Mk44vDFm2SaWlHnJT+l71Js= Subject key identifier: 9A:2F:53:CC:62:40:9B:8C:EA:8A:F7:09:F8:A9:06:F9:DF:6C:58:3D Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E86EF02400522360BF900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 152.46.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:86:ef:02:40:05:22:36:0b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=8b5eac8b-fe21-4a20-a565-b62df40f3efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:af:c6:4b:4c:33:04:50:a6:72:9d:e1:97:68: 68:10:e9:b8:b1:bc:f7:85:92:cf:ae:a4:f7:23:f0: ce:ed:d0:af:92:78:bd:be:8d:60:7f:47:58:ca:11: 3a:01:55:eb:cf:e3:89:d8:b4:31:c8:2f:6a:03:4d: 44:b9:f5:6f:41:33:ff:0c:c8:6c:ce:40:ee:03:48: b1:6e:75:da:45:20:f6:1b:fe:70:94:c7:cf:ea:0d: 5a:ef:71:40:5e:bb:ab:88:55:a7:07:09:5c:e2:9a: c5:58:e9:62:63:97:52:2b:2c:ae:2c:39:c5:4b:1f: 69:b6:cd:96:53:52:ec:da:ae:3a:b9:7a:35:ff:47: 6d:11:0f:c9:39:01:2f:a8:8d:e9:15:26:63:d5:9f: 6e:27:ed:3d:4f:7d:0c:66:cc:ed:f0:a7:f1:5f:bc: a8:7c:3d:94:b5:46:1c:c7:4a:41:dd:cf:fa:0b:4a: 0c:54:78:f5:cc:32:26:41:76:55:d4:61:9f:1b:47: e0:72:90:a4:6d:01:72:e6:39:84:19:db:db:b5:65: d2:60:9d:09:7d:42:53:5f:c2:4a:e8:f2:88:f1:77: 6d:cb:f7:ab:b0:ca:5e:bf:43:14:a8:e8:0d:ed:42: 67:0b:ad:81:53:13:16:99:e5:be:56:8e:61:fa:dd: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:53:CC:62:40:9B:8C:EA:8A:F7:09:F8:A9:06:F9:DF:6C:58:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:14:f4:8d:94:0b:12:db:e2:4a:b6:47:a7:b8:21:75:4e:df: 87:ad:1c:06:aa:a7:63:48:07:14:4f:4c:7c:97:10:fe:27:8b: 24:61:4d:97:91:95:d5:df:0f:59:e3:76:ad:35:ec:ed:85:fd: 6d:f7:27:4a:9f:dd:91:c8:42:49:8e:87:05:e6:8b:08:3a:8f: cc:e1:2e:e0:e8:4a:d3:48:86:c6:3e:e6:f4:31:63:ff:91:29: 6d:a9:3a:c1:7a:72:84:5c:f6:c3:67:fb:33:fd:6e:81:86:0d: aa:ec:ab:14:82:75:ff:46:14:fb:d8:88:69:36:66:a4:3c:41: 36:05:1a:c2:e4:9b:b6:dc:06:68:53:08:c7:61:58:8a:2d:06: c1:b1:88:65:1e:9e:06:fb:c0:ca:32:a5:7e:1c:51:d6:19:d8: 96:ef:20:02:03:4f:6f:28:6d:c6:df:57:e9:65:77:ed:36:1b: b9:9b:d5:4f:9a:8e:8c:cb:17:ac:59:4d:b3:b0:13:c3:69:69: 4b:36:5b:d4:82:c0:fc:1a:4c:42:f6:3a:36:f0:c0:91:f9:91: 48:62:48:bc:07:64:04:e4:77:7b:63:1d:40:da:cc:46:d3:b9: 81:d9:42:14:aa:83:69:9f:ac:1f:48:41:65:4a:a5:85:63:f6: ed:fe:f3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnobvAkAFIjYL+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk OGI1ZWFjOGItZmUyMS00YTIwLWE1NjUtYjYyZGY0MGYzZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q/GS0wzBFCmcp3hl2hoEOm4sbz3hZLPrqT3 I/DO7dCvkni9vo1gf0dYyhE6AVXrz+OJ2LQxyC9qA01EufVvQTP/DMhszkDuA0ix bnXaRSD2G/5wlMfP6g1a73FAXruriFWnBwlc4prFWOliY5dSKyyuLDnFSx9pts2W U1Ls2q46uXo1/0dtEQ/JOQEvqI3pFSZj1Z9uJ+09T30MZszt8KfxX7yofD2UtUYc x0pB3c/6C0oMVHj1zDImQXZV1GGfG0fgcpCkbQFy5jmEGdvbtWXSYJ0JfUJTX8JK 6PKI8Xdty/ersMpev0MUqOgN7UJnC62BUxMWmeW+Vo5h+t0SKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJovU8xiQJuM6or3CfipBvnfbFg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMmZkOTlkMWMtNWY4NS0z ODcxLTg5ODUtYjdmZDQ2ZWZkZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4U9I2UCxLb4kq2R6e4IXVO34etHAaqp2NIBxRPTHyXEP4niyRhTZeR ldXfD1njdq017O2F/W33J0qf3ZHIQkmOhwXmiwg6j8zhLuDoStNIhsY+5vQxY/+R KW2pOsF6coRc9sNn+zP9boGGDarsqxSCdf9GFPvYiGk2ZqQ8QTYFGsLkm7bcBmhT CMdhWIotBsGxiGUengb7wMoypX4cUdYZ2JbvIAIDT28obcbfV+lld+02G7mb1U+a jozLF6xZTbOwE8NpaUs2W9SCwPwaTEL2OjbwwJH5kUhiSLwHZATkd3tjHUDazEbT uYHZQhSqg2mfrB9IQWVKpYVj9u3+8xk= -----END CERTIFICATE-----Generated at Sun Apr 6 12:02:05 2025 by rpki-client