$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3211f3ad-43bd-3f85-82b1-5849c1aa3390.roa File: 3211f3ad-43bd-3f85-82b1-5849c1aa3390.roa (raw, json) Hash identifier: oB/KZKNq2IT/G/EEqDjIYotm5Befda/unW8jPt3s7gg= Subject key identifier: FC:1E:BE:6F:75:2F:91:52:D1:D3:45:1C:99:D7:D1:FD:FD:E0:38:64 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727CE88EE81E44E7195AC80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3211f3ad-43bd-3f85-82b1-5849c1aa3390.roa Signing time: Fri 30 May 2025 19:11:38 +0000 ROA not before: Fri 30 May 2025 19:11:38 +0000 ROA not after: Thu 28 Aug 2025 19:11:38 +0000 asID: 81 IP address blocks: 152.22.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:ce:88:ee:81:e4:4e:71:95:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:38 2025 GMT Not After : Aug 28 19:11:38 2025 GMT Subject: CN=11daa674-8dd1-490d-b6c1-c171b9ff770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:d4:9d:39:ec:b6:39:8c:25:70:1e:c3:11: 76:52:ea:60:a3:f3:ea:af:5b:a8:9e:6d:fb:b7:95: 81:7f:58:ef:0e:60:78:6e:bf:08:ce:0b:1a:aa:ae: c2:05:a7:5a:93:32:d3:f3:3a:7f:a6:55:d8:34:a8: 25:0d:28:28:ec:7a:b0:18:61:e9:14:29:b5:b5:c9: 20:b7:23:da:e2:f4:7f:98:c0:a9:4f:d7:43:f9:f7: a1:01:59:b9:12:f7:39:6c:e6:ec:8e:79:06:42:9e: e9:36:19:72:b7:52:ff:a4:2a:6b:ce:39:47:e7:a9: ea:75:56:d8:bc:97:c4:d4:9f:a4:df:f7:79:8a:5d: aa:d9:20:14:17:97:c4:80:72:e3:73:23:9c:12:a4: 67:7c:3f:42:32:49:ed:08:02:ab:0c:5c:cd:45:ff: 54:a9:a7:4f:ff:72:8f:42:5d:86:cf:99:83:7c:e7: 3e:36:3f:50:38:5b:e3:e4:be:19:d5:29:e3:9d:5b: 66:0a:25:f7:de:21:14:0d:87:04:6e:37:5f:0f:2a: a3:73:86:2c:10:b5:5e:f4:18:e4:92:04:2a:95:b3: f6:92:d7:36:89:ba:e3:7a:e1:dc:94:74:50:34:54: a6:7f:b0:dc:70:93:98:a5:4f:c1:98:4d:20:6b:7a: c7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:BE:6F:75:2F:91:52:D1:D3:45:1C:99:D7:D1:FD:FD:E0:38:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3211f3ad-43bd-3f85-82b1-5849c1aa3390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9a:75:48:58:d4:d6:19:4c:85:b6:44:34:19:2c:d5:78:14: f3:7b:6e:ca:c6:7d:00:c5:cd:b3:d8:8d:5d:d1:1a:ce:00:3b: a5:88:80:b1:08:6b:0d:d6:00:81:63:df:69:7c:79:f7:31:d0: 19:78:11:4c:b3:bc:81:2b:7b:22:8f:2c:dc:21:5a:9b:53:09: d7:2c:d5:9b:c3:d9:f5:31:6c:85:86:2d:df:af:d2:31:ce:84: aa:67:be:32:02:58:29:f9:a6:2a:9b:2b:0b:64:58:ca:79:49: 68:f7:14:1c:f1:f6:98:62:c0:d4:a6:b9:0c:e0:27:ed:4f:08: 2d:f8:0c:7d:0f:43:63:43:20:35:58:69:de:7e:71:29:0e:0b: a6:f9:cc:6d:59:f5:b8:56:ce:ec:54:3d:f7:ca:6c:4f:98:47: 3a:66:89:f6:87:0c:24:cc:e3:b4:e3:c3:2f:a6:3f:25:aa:0f: 73:10:1f:dd:8b:f1:c4:87:38:d9:c9:37:ca:4a:04:e2:2d:d0: 8f:e4:37:74:43:db:4b:b4:3e:95:c9:7f:a4:fd:42:59:6d:f7: 09:4b:95:ab:31:91:77:b5:53:de:7a:8c:5f:fb:00:5f:86:d0: 7b:ec:e1:e4:b0:61:fd:c5:28:20:01:f7:31:48:5f:ea:ed:15: 47:1c:92:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ86I7oHkTnGVrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTEzOFoXDTI1MDgyODE5MTEzOFowLzEtMCsGA1UEAxMk MTFkYWE2NzQtOGRkMS00OTBkLWI2YzEtYzE3MWI5ZmY3NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHXUnTnstjmMJXAewxF2Uupgo/Pqr1uonm37 t5WBf1jvDmB4br8Izgsaqq7CBadakzLT8zp/plXYNKglDSgo7HqwGGHpFCm1tckg tyPa4vR/mMCpT9dD+fehAVm5Evc5bObsjnkGQp7pNhlyt1L/pCprzjlH56nqdVbY vJfE1J+k3/d5il2q2SAUF5fEgHLjcyOcEqRnfD9CMkntCAKrDFzNRf9UqadP/3KP Ql2Gz5mDfOc+Nj9QOFvj5L4Z1SnjnVtmCiX33iEUDYcEbjdfDyqjc4YsELVe9Bjk kgQqlbP2ktc2ibrjeuHclHRQNFSmf7DccJOYpU/BmE0ga3rHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwevm91L5FS0dNFHJnX0f394DhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzIxMWYzYWQtNDNiZC0z Zjg1LTgyYjEtNTg0OWMxYWEzMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2adUhY1NYZTIW2RDQZLNV4FPN7bsrGfQDFzbPYjV3RGs4AO6WIgLEI aw3WAIFj32l8efcx0Bl4EUyzvIEreyKPLNwhWptTCdcs1ZvD2fUxbIWGLd+v0jHO hKpnvjICWCn5piqbKwtkWMp5SWj3FBzx9phiwNSmuQzgJ+1PCC34DH0PQ2NDIDVY ad5+cSkOC6b5zG1Z9bhWzuxUPffKbE+YRzpmifaHDCTM47Tjwy+mPyWqD3MQH92L 8cSHONnJN8pKBOIt0I/kN3RD20u0PpXJf6T9Qllt9wlLlasxkXe1U956jF/7AF+G 0Hvs4eSwYf3FKCAB9zFIX+rtFUcckjQ= -----END CERTIFICATE-----Generated at Sat Jun 7 10:48:44 2025 by rpki-client