$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa File: 5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa (raw, json) Hash identifier: mjQ0mG1jaqoerudEJ+0p8Kl1UA9pc6NCt0G6c63DiU4= Subject key identifier: 55:1E:62:92:18:B9:C1:D4:7E:F3:71:74:F2:9A:E5:84:C1:A7:A5:62 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E7FE84FEF9133C394FD00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 128.109.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:7f:e8:4f:ef:91:33:c3:94:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=8ce0785e-46db-4bc3-aec8-8ce5d75749ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:61:67:0e:f6:64:92:97:96:24:d2:0b:c1: 89:c5:68:61:f6:b5:47:9a:cf:b5:40:22:b4:5b:19: c0:57:92:e7:73:32:a2:6e:ac:a3:28:8f:bb:13:48: 37:4b:8c:1d:d2:73:a7:06:fa:30:35:02:1e:5d:42: 52:9f:92:2f:50:3e:e9:cc:7b:3c:01:b0:ff:12:85: ac:c6:4c:52:7f:9e:47:60:60:e3:a1:6d:76:4b:ea: bf:71:60:86:e7:d4:5c:3d:34:c5:20:1d:8a:75:a0: 98:36:55:20:02:62:53:9e:d2:07:cc:38:94:c0:d5: e1:de:43:8b:f1:76:43:8c:6e:1a:bf:86:2e:40:11: f0:94:e4:cc:31:f7:66:ae:0f:ba:37:49:d2:14:fa: 1e:41:ce:7a:7f:aa:79:78:cd:82:3d:8f:05:65:d0: f6:e3:c1:94:49:54:9c:4e:0e:18:3e:4a:dc:68:45: 61:2e:7d:86:25:6e:be:f5:a3:0c:21:9e:8d:d5:b6: 5e:de:b7:76:70:52:82:15:21:d4:e0:b8:97:98:8b: 2f:b2:c8:e2:ca:a0:4c:06:12:af:e3:48:b4:64:ce: 78:a2:dc:a5:c0:25:89:bf:b6:5c:4d:74:ca:86:76: b6:b1:4b:00:64:77:0e:f4:9c:e7:b3:a1:04:c0:9e: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:62:92:18:B9:C1:D4:7E:F3:71:74:F2:9A:E5:84:C1:A7:A5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:99:de:89:d3:2b:53:f3:dc:ec:96:b9:7d:d4:21:eb:f7:a9: 7c:78:b3:6f:43:60:18:c0:42:d9:8c:4b:a0:e9:97:64:3c:75: 41:ac:d4:13:50:8c:c1:7c:bc:fd:e5:ef:a3:5c:0f:03:c3:4d: 9d:a8:aa:b8:e1:ee:e2:ac:db:ee:ed:98:c7:db:10:ef:93:69: 22:7f:6f:45:af:f4:fe:58:e7:07:56:dc:9a:7d:10:3a:37:d6: 6b:a4:0e:36:37:fc:7d:ef:72:8f:31:37:fc:88:42:e1:a1:85: 4a:0d:f1:83:d7:f8:48:db:b9:08:97:14:2b:05:82:45:6f:b4: 3d:ab:13:d9:29:65:57:5f:5d:55:db:61:4b:05:98:ad:96:c3: 3a:6e:95:cb:cc:49:9f:18:b7:fb:d7:dc:a2:c2:5c:bb:75:f3: 34:00:aa:76:1c:9c:22:10:2f:d5:e6:28:5a:c5:24:01:32:87: 29:7b:64:23:7a:97:09:4f:61:86:21:e3:9d:8c:b4:b0:b3:16: 9d:3d:6c:31:2a:df:11:8b:4e:af:35:18:10:29:83:ee:74:55: cd:ea:2a:19:18:66:0b:01:67:56:60:ba:b0:a4:29:d1:af:fd: 9c:40:dd:ee:e7:3c:a9:b0:1a:c1:b7:75:4d:23:63:70:fb:e0: 2b:86:a3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnn/oT++RM8OU/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk OGNlMDc4NWUtNDZkYi00YmMzLWFlYzgtOGNlNWQ3NTc0OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9VhZw72ZJKXliTSC8GJxWhh9rVHms+1QCK0 WxnAV5LnczKibqyjKI+7E0g3S4wd0nOnBvowNQIeXUJSn5IvUD7pzHs8AbD/EoWs xkxSf55HYGDjoW12S+q/cWCG59RcPTTFIB2KdaCYNlUgAmJTntIHzDiUwNXh3kOL 8XZDjG4av4YuQBHwlOTMMfdmrg+6N0nSFPoeQc56f6p5eM2CPY8FZdD248GUSVSc Tg4YPkrcaEVhLn2GJW6+9aMMIZ6N1bZe3rd2cFKCFSHU4LiXmIsvssjiyqBMBhKv 40i0ZM54otylwCWJv7ZcTXTKhna2sUsAZHcO9Jzns6EEwJ4lfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUeYpIYucHUfvNxdPKa5YTBp6ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWNjODlhNmEtNzQ3Ni0z NjI4LWJlNDYtZWM2MDE1YzhjN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmZ3onTK1Pz3OyWuX3UIev3qXx4s29DYBjAQtmMS6Dpl2Q8dUGs1BNQ jMF8vP3l76NcDwPDTZ2oqrjh7uKs2+7tmMfbEO+TaSJ/b0Wv9P5Y5wdW3Jp9EDo3 1mukDjY3/H3vco8xN/yIQuGhhUoN8YPX+EjbuQiXFCsFgkVvtD2rE9kpZVdfXVXb YUsFmK2WwzpulcvMSZ8Yt/vX3KLCXLt18zQAqnYcnCIQL9XmKFrFJAEyhyl7ZCN6 lwlPYYYh452MtLCzFp09bDEq3xGLTq81GBApg+50Vc3qKhkYZgsBZ1ZgurCkKdGv /ZxA3e7nPKmwGsG3dU0jY3D74CuGo2g= -----END CERTIFICATE-----Generated at Sun Apr 6 13:46:41 2025 by rpki-client