$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42387bd2-960d-313e-a0bf-e1c0f6e6ef81.roa File: 42387bd2-960d-313e-a0bf-e1c0f6e6ef81.roa (raw, json) Hash identifier: smsCPN0CRIYKehiY2z7jdWjigOlAR5fXTrSMbUDzQkc= Subject key identifier: 6A:80:2A:FC:50:42:57:61:62:35:1F:35:BC:E0:1A:35:A7:D2:DF:33 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727D339245E4D16108E9830 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42387bd2-960d-313e-a0bf-e1c0f6e6ef81.roa Signing time: Fri 30 May 2025 19:11:40 +0000 ROA not before: Fri 30 May 2025 19:11:40 +0000 ROA not after: Thu 28 Aug 2025 19:11:40 +0000 asID: 81 IP address blocks: 152.46.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:d3:39:24:5e:4d:16:10:8e:98:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:40 2025 GMT Not After : Aug 28 19:11:40 2025 GMT Subject: CN=25a27bfe-b8af-40bb-9d37-ea11e40a3d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:9c:0a:01:cb:95:43:5d:85:7c:63:37:53: 84:20:3e:10:6d:7d:7b:61:b9:aa:56:17:5d:75:d7: 97:0f:0b:3b:b8:88:e8:1f:dc:f1:f6:14:d6:37:a1: 6c:07:f6:38:d9:9a:02:c3:14:61:63:84:06:61:30: 66:d4:17:85:d9:11:b4:84:ae:a3:2e:9e:b4:37:03: 1f:e4:5a:2f:f4:da:7c:fc:72:ab:12:33:5e:f5:ab: df:17:e4:2a:25:9c:ee:b7:5e:ac:25:17:e0:18:00: 08:eb:4e:cf:f0:9d:d2:fa:35:fe:6c:ae:59:89:94: 87:f1:15:30:70:d9:ef:bc:66:85:4c:52:54:50:df: d4:64:34:cb:1c:2d:af:dd:dd:d8:7b:b8:b6:bd:fd: 17:92:5d:03:e6:b6:e0:0a:1f:d9:da:58:45:80:fa: f9:d0:bf:da:34:a6:06:30:61:02:ce:a0:55:9e:41: ea:85:09:a1:98:b8:e9:63:df:3e:52:7a:89:10:23: dd:31:e6:e0:d1:45:ef:52:5f:b8:72:fa:4b:c7:37: a8:e2:f2:3c:e2:06:9d:9e:4d:75:e9:dc:02:f6:3e: 20:7d:1f:8b:18:2b:5c:75:ab:90:79:61:13:f3:e5: f5:f0:1d:90:63:ea:a5:3f:a1:0f:35:d0:cd:9b:89: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:2A:FC:50:42:57:61:62:35:1F:35:BC:E0:1A:35:A7:D2:DF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42387bd2-960d-313e-a0bf-e1c0f6e6ef81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:30:bb:35:32:ca:79:8e:e0:15:36:a6:76:66:61:0b:b6:ab: 1a:c7:13:cf:f3:1e:59:66:3e:bc:64:81:11:63:52:5f:83:c9: 7d:6d:07:3e:1d:de:2e:45:c9:42:6f:3c:17:05:cc:ef:86:c7: 3b:45:48:8e:57:7b:32:3d:7b:d1:b7:6a:69:40:04:1c:6f:c4: 7f:01:89:bc:08:6f:40:a8:33:c4:36:e1:e5:03:40:57:1d:97: b3:03:96:45:86:b0:fb:e8:c2:c1:53:9b:c4:9e:9f:0e:67:32: e4:80:ce:8b:cb:9a:a8:44:3a:9c:05:90:11:31:e1:63:18:9e: b3:4e:3e:22:ab:49:87:f2:bb:f7:9d:2d:80:f9:9c:af:c9:bd: 99:bd:e6:56:bb:0a:ed:93:cd:78:65:c2:a5:7a:1a:00:07:81: c8:99:e0:67:5b:ef:2d:59:8a:b3:26:6f:c6:4b:a6:5d:1b:42: 54:19:5e:23:74:b8:d5:b0:c7:f8:4c:38:96:8c:f5:3e:45:f2: 2d:91:99:cc:06:32:c6:bc:9a:7b:35:e6:51:3c:d8:fd:cc:a5: 12:a8:88:2c:5a:2d:4f:01:19:f0:6f:91:4a:ac:b5:61:c7:e0: a0:a8:3f:ba:e4:2a:c8:65:c0:43:7d:9f:9d:e7:9c:e3:0b:8d: 05:66:f3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9M5JF5NFhCOmDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTE0MFoXDTI1MDgyODE5MTE0MFowLzEtMCsGA1UEAxMk MjVhMjdiZmUtYjhhZi00MGJiLTlkMzctZWExMWU0MGEzZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qcCgHLlUNdhXxjN1OEID4QbX17YbmqVhdd ddeXDws7uIjoH9zx9hTWN6FsB/Y42ZoCwxRhY4QGYTBm1BeF2RG0hK6jLp60NwMf 5Fov9Np8/HKrEjNe9avfF+QqJZzut16sJRfgGAAI607P8J3S+jX+bK5ZiZSH8RUw cNnvvGaFTFJUUN/UZDTLHC2v3d3Ye7i2vf0Xkl0D5rbgCh/Z2lhFgPr50L/aNKYG MGECzqBVnkHqhQmhmLjpY98+UnqJECPdMebg0UXvUl+4cvpLxzeo4vI84gadnk11 6dwC9j4gfR+LGCtcdauQeWET8+X18B2QY+qlP6EPNdDNm4l71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqAKvxQQldhYjUfNbzgGjWn0t8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDIzODdiZDItOTYwZC0z MTNlLWEwYmYtZTFjMGY2ZTZlZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmC4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMwuzUyynmO4BU2pnZmYQu2qxrHE8/zHllmPrxkgRFjUl+DyX1tBz4d 3i5FyUJvPBcFzO+GxztFSI5XezI9e9G3amlABBxvxH8BibwIb0CoM8Q24eUDQFcd l7MDlkWGsPvowsFTm8Senw5nMuSAzovLmqhEOpwFkBEx4WMYnrNOPiKrSYfyu/ed LYD5nK/JvZm95la7Cu2TzXhlwqV6GgAHgciZ4Gdb7y1ZirMmb8ZLpl0bQlQZXiN0 uNWwx/hMOJaM9T5F8i2RmcwGMsa8mns15lE82P3MpRKoiCxaLU8BGfBvkUqstWHH 4KCoP7rkKshlwEN9n53nnOMLjQVm8y8= -----END CERTIFICATE-----Generated at Sat Jun 7 03:30:33 2025 by rpki-client