$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c5ac7ed-d062-3164-8bbb-011640a4ba78.roa File: 3c5ac7ed-d062-3164-8bbb-011640a4ba78.roa (raw, json) Hash identifier: DMlaDhlcENa15iMRqrK6f/12AXpYn5gvBDBpkvUYtSo= Subject key identifier: 73:93:5D:89:FA:A1:8F:79:53:03:47:25:CC:15:25:30:E5:FC:81:A9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E815496D780F80F1BC160 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c5ac7ed-d062-3164-8bbb-011640a4ba78.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 152.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:81:54:96:d7:80:f8:0f:1b:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=65128db7-e59f-47f7-a295-fdcb87717b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:79:04:47:a4:4c:44:2f:1d:41:dc:46:73: e2:56:d6:64:8a:a9:4d:65:1a:10:c8:c2:ce:8f:ba: f3:a1:ff:f4:03:91:93:4f:ea:18:ef:8a:07:79:12: f9:ad:c1:fd:10:65:0a:89:b4:fc:f5:37:5e:a1:9a: e6:37:81:7e:84:14:69:72:6d:ab:8d:4d:93:a8:9d: 0e:40:3d:de:44:b1:91:b2:b5:b6:9c:dc:8e:a3:63: 2f:60:17:f3:6c:eb:49:8a:3d:ab:06:89:08:cb:9d: 9d:cc:52:5e:71:cd:4d:7c:a7:82:c7:7d:e5:47:46: a2:8f:76:8c:3c:e2:6f:a8:e7:cb:74:c0:c8:15:cb: eb:f6:f9:c2:4d:73:6f:7f:07:12:81:22:8e:02:97: a0:01:b0:d9:a0:b8:ec:e9:20:5a:9a:8c:ff:fe:5b: f3:f4:0f:f7:1c:c0:d3:ab:54:f7:b5:e4:7a:e4:dc: 3d:a2:f4:75:03:30:34:82:89:30:4c:5a:0a:9b:96: 28:f5:e7:a6:fb:88:9d:c6:c5:48:2c:e8:57:c4:62: 4c:55:c2:50:1d:1f:b5:5d:90:85:a8:93:1a:2c:f0: 73:ef:92:2a:1c:47:44:65:d3:25:f3:05:b3:c4:69: 5f:03:f3:97:17:a5:8f:09:5c:cd:6a:40:3f:76:04: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:93:5D:89:FA:A1:8F:79:53:03:47:25:CC:15:25:30:E5:FC:81:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c5ac7ed-d062-3164-8bbb-011640a4ba78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:bb:8c:66:8d:a5:af:4c:2f:26:36:93:1c:f1:c1:30:c2:87: a6:04:2d:f4:41:3f:7e:a3:4f:83:dc:37:0f:bf:39:fa:53:e6: a8:5c:2b:62:c6:5f:80:6a:18:35:32:09:b3:ca:a3:a1:c2:8b: a5:a4:ed:8e:e8:62:a0:34:44:35:a5:c1:96:24:c1:92:e5:87: ce:0e:c2:f7:bd:aa:08:0d:e8:fc:ee:b4:63:ef:31:06:c4:8e: bd:58:27:5c:4e:dd:d4:b8:31:02:d3:62:ba:7a:ff:41:da:65: c6:af:01:bf:96:39:f2:00:e4:71:74:c9:7f:67:fb:d6:05:22: b3:64:df:b4:bc:a5:eb:01:66:a5:ce:ac:cf:d1:a5:f0:88:0f: 32:4c:e4:fc:a3:77:b8:5b:da:48:5c:f8:99:d7:fc:0c:6e:43: 21:f3:b7:c8:63:99:b5:c8:3a:98:a9:21:08:c0:3b:27:2f:7b: 7f:d7:24:93:05:16:d4:ee:bb:c0:3d:3e:10:0f:6f:50:74:6b: 34:10:6d:2c:bb:9f:bf:f0:36:7a:a3:34:d6:bc:3c:da:60:ca: 64:76:f0:1b:3d:1f:e4:3e:0f:49:c7:55:92:7e:d5:b5:da:ca: 07:77:43:3c:51:d1:7f:90:68:6f:59:0c:c4:10:13:e1:07:56: 60:5b:f0:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoFUlteA+A8bwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk NjUxMjhkYjctZTU5Zi00N2Y3LWEyOTUtZmRjYjg3NzE3YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1np5BEekTEQvHUHcRnPiVtZkiqlNZRoQyMLO j7rzof/0A5GTT+oY74oHeRL5rcH9EGUKibT89TdeoZrmN4F+hBRpcm2rjU2TqJ0O QD3eRLGRsrW2nNyOo2MvYBfzbOtJij2rBokIy52dzFJecc1NfKeCx33lR0aij3aM POJvqOfLdMDIFcvr9vnCTXNvfwcSgSKOApegAbDZoLjs6SBamoz//lvz9A/3HMDT q1T3teR65Nw9ovR1AzA0gokwTFoKm5Yo9eem+4idxsVILOhXxGJMVcJQHR+1XZCF qJMaLPBz75IqHEdEZdMl8wWzxGlfA/OXF6WPCVzNakA/dgQLtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOTXYn6oY95UwNHJcwVJTDl/IGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2M1YWM3ZWQtZDA2Mi0z MTY0LThiYmItMDExNjQwYTRiYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq7jGaNpa9MLyY2kxzxwTDCh6YELfRBP36jT4PcNw+/OfpT5qhcK2LG X4BqGDUyCbPKo6HCi6Wk7Y7oYqA0RDWlwZYkwZLlh84Owve9qggN6PzutGPvMQbE jr1YJ1xO3dS4MQLTYrp6/0HaZcavAb+WOfIA5HF0yX9n+9YFIrNk37S8pesBZqXO rM/RpfCIDzJM5Pyjd7hb2khc+JnX/AxuQyHzt8hjmbXIOpipIQjAOycve3/XJJMF FtTuu8A9PhAPb1B0azQQbSy7n7/wNnqjNNa8PNpgymR28Bs9H+Q+D0nHVZJ+1bXa ygd3QzxR0X+QaG9ZDMQQE+EHVmBb8C0= -----END CERTIFICATE-----Generated at Sun Apr 6 12:01:00 2025 by rpki-client