$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa File: 7836e46d-3de0-31cf-850d-bd1752491782.roa (raw, json) Hash identifier: 8CWOKzTHfjkdi0L2xnoF6BG7p0G93vlUMR1VS6/xJrk= Subject key identifier: CF:D9:BD:DA:FB:07:AE:1A:EE:45:5E:E6:CD:69:36:B6:E7:4D:F9:8E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E8419A7FA0ABBDD1900E0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 6559 IP address blocks: 152.28.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:84:19:a7:fa:0a:bb:dd:19:00:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=67ad479b-02d9-4b68-8b4d-a9bfe0cafb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:52:de:dc:7f:57:e5:17:06:e6:12:2e:f4: f9:d7:97:75:c8:93:30:e7:47:da:73:3a:9a:70:f7: c2:1b:e4:d5:c9:a1:52:1e:10:3b:d0:a8:2e:37:74: 14:1c:a5:63:c6:58:b9:c4:db:52:3f:c9:8b:12:6a: 39:6b:8d:e5:ca:b2:f7:67:d5:02:7a:61:9c:e7:98: 0e:3c:d2:52:a2:4a:b6:d2:3e:7c:27:00:a2:8e:c8: 24:34:4e:a6:37:e8:ff:56:6d:4a:f6:01:1f:45:d1: ca:67:a0:f7:02:01:b1:6e:0b:2a:86:df:30:f6:65: c3:1e:6a:f8:20:37:33:bc:c8:b1:06:e2:75:9d:7b: 7f:ba:11:7b:52:0c:73:74:7f:df:af:7f:34:0d:bd: 76:4b:d5:30:d2:92:dd:a3:06:f5:c9:e3:77:4f:a0: 25:2e:c2:c7:c7:dc:d8:8d:65:56:51:81:c9:4c:3f: 9f:23:eb:dc:88:3e:57:f2:7d:50:af:c0:7b:ee:fa: 56:f9:e2:66:bb:e8:4b:94:04:a5:52:46:bc:62:ed: 14:93:04:f1:20:dc:24:0e:7a:40:6a:04:cc:4f:b1: 14:1f:cb:89:de:21:27:34:da:c2:b1:4a:da:ce:2e: d0:71:e8:b4:96:96:56:58:7a:1b:9d:26:2f:c7:18: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:BD:DA:FB:07:AE:1A:EE:45:5E:E6:CD:69:36:B6:E7:4D:F9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:64:ee:1a:1d:03:94:89:12:9f:f5:26:ba:66:41:b3:0b:9e: d5:cf:99:c1:63:a4:4f:20:7a:ec:ec:1f:9e:2b:f8:26:4b:c1: e0:93:ca:03:88:7e:9d:4d:c4:8f:52:b0:81:de:cb:49:42:9d: f4:30:6d:fc:b0:cb:8b:e1:5d:d8:98:ec:1e:e7:58:cb:3f:8d: c6:73:9a:38:d7:fe:3d:e3:8f:b2:79:91:c6:a7:d0:00:eb:f1: 7d:79:65:3f:95:e4:df:2f:15:69:4f:b5:80:76:82:a5:a8:c6: 28:9c:cd:d8:3d:4e:cb:95:7b:af:48:59:a7:f4:6f:c2:9b:fd: 87:b3:6a:16:bd:34:b6:5a:bf:af:2e:b6:70:4d:9f:ae:2a:40: 5a:e9:40:41:54:32:12:3e:ee:6b:00:68:47:d1:81:58:79:6d: 2e:74:ec:1e:c3:14:dd:e7:8a:28:df:83:6b:ff:42:2d:dd:02: 27:e4:11:9e:8a:e5:80:ba:56:db:e8:e4:f5:0b:3a:55:f5:eb: 67:0e:4d:c7:e5:97:47:10:5b:fe:d0:32:8c:db:1c:89:cc:0d: 6f:0a:76:30:87:8c:4e:73:d1:fb:9a:c9:83:d8:cd:8e:f8:06: fb:4b:e0:1d:f5:d9:9b:4a:8d:b5:dd:bb:a3:27:2d:58:5b:2c: a9:55:81:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoQZp/oKu90ZAOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk NjdhZDQ3OWItMDJkOS00YjY4LThiNGQtYTliZmUwY2FmYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTJS3tx/V+UXBuYSLvT515d1yJMw50faczqa cPfCG+TVyaFSHhA70KguN3QUHKVjxli5xNtSP8mLEmo5a43lyrL3Z9UCemGc55gO PNJSokq20j58JwCijsgkNE6mN+j/Vm1K9gEfRdHKZ6D3AgGxbgsqht8w9mXDHmr4 IDczvMixBuJ1nXt/uhF7UgxzdH/fr380Db12S9Uw0pLdowb1yeN3T6AlLsLHx9zY jWVWUYHJTD+fI+vciD5X8n1Qr8B77vpW+eJmu+hLlASlUka8Yu0UkwTxINwkDnpA agTMT7EUH8uJ3iEnNNrCsUrazi7Qcei0lpZWWHobnSYvxxhtGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Zvdr7B64a7kVe5s1pNrbnTfmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNzgzNmU0NmQtM2RlMC0z MWNmLTg1MGQtYmQxNzUyNDkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZk7hodA5SJEp/1JrpmQbMLntXPmcFjpE8geuzsH54r+CZLweCTygOI fp1NxI9SsIHey0lCnfQwbfywy4vhXdiY7B7nWMs/jcZzmjjX/j3jj7J5kcan0ADr 8X15ZT+V5N8vFWlPtYB2gqWoxiiczdg9TsuVe69IWaf0b8Kb/Yezaha9NLZav68u tnBNn64qQFrpQEFUMhI+7msAaEfRgVh5bS507B7DFN3niijfg2v/Qi3dAifkEZ6K 5YC6Vtvo5PULOlX162cOTcfll0cQW/7QMozbHInMDW8KdjCHjE5z0fuayYPYzY74 BvtL4B312ZtKjbXdu6MnLVhbLKlVgVg= -----END CERTIFICATE-----Generated at Sun Apr 6 12:15:09 2025 by rpki-client