$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8131ab98-4229-3586-a2bc-fef5e59586d9.roa File: 8131ab98-4229-3586-a2bc-fef5e59586d9.roa (raw, json) Hash identifier: H0KazXjpfAeVe1kS7v5ZpVkeNcXYIXZ5AC2LijxkZ/E= Subject key identifier: 73:49:36:6B:2C:E2:64:0E:84:F1:8A:AD:65:A4:13:C2:D7:8E:ED:75 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727D389F4792BEED05E7100 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8131ab98-4229-3586-a2bc-fef5e59586d9.roa Signing time: Fri 30 May 2025 19:11:40 +0000 ROA not before: Fri 30 May 2025 19:11:40 +0000 ROA not after: Thu 28 Aug 2025 19:11:40 +0000 asID: 81 IP address blocks: 152.46.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:d3:89:f4:79:2b:ee:d0:5e:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:40 2025 GMT Not After : Aug 28 19:11:40 2025 GMT Subject: CN=ea19da7e-df48-4d4b-b1dd-ef8d221448a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:c2:2f:52:57:2e:6d:72:02:1b:4b:ce:f2: a8:b0:d5:98:3c:4c:86:de:03:bd:04:48:9c:ce:4d: a6:1f:34:7a:63:b6:ff:63:e2:ce:e2:25:e5:aa:7e: 7e:f3:f2:23:3b:83:f0:55:77:87:e0:a2:c6:20:c6: 4b:21:0a:38:f8:18:af:47:0d:2a:cb:eb:85:50:74: 5d:bb:e2:da:ab:83:98:e3:fe:f3:6f:9b:7d:d3:7d: e0:e5:35:32:e3:f9:b3:17:eb:dd:d2:87:b1:3d:dd: 8f:51:ef:f9:1e:c1:65:dc:8b:4f:ad:20:f1:49:f8: 29:83:07:c3:bc:83:42:57:36:69:25:9f:fe:23:08: 2b:71:21:2d:14:c4:bc:44:f4:a6:d4:ab:e8:cb:c2: 4f:a8:4b:17:aa:4c:82:59:a6:1c:c2:73:98:00:d3: 01:c4:39:05:c2:59:91:3d:96:66:56:81:be:c5:4e: 20:de:c4:94:ae:63:f9:49:1c:09:3e:c2:2d:27:54: 07:6b:dc:fd:cb:da:c2:b6:66:6e:55:05:29:0f:12: aa:dc:41:08:82:c3:86:80:73:62:1d:ae:20:3d:d4: 7f:c6:87:3e:8d:f7:be:9b:9f:11:24:f8:4f:bb:e3: 26:01:3f:64:dc:67:90:40:08:ad:75:e3:2a:27:c8: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:49:36:6B:2C:E2:64:0E:84:F1:8A:AD:65:A4:13:C2:D7:8E:ED:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8131ab98-4229-3586-a2bc-fef5e59586d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:7e:f1:a4:f7:eb:15:c7:19:1d:8f:35:c6:4e:d6:7a:a1: b8:b8:8b:97:c6:e1:73:64:00:e8:fd:ca:14:9c:b7:e5:78:c1: 0b:e2:d2:2b:f8:05:a3:49:ab:32:67:1e:8f:c1:a0:5d:e3:80: c4:fa:b2:b7:10:91:52:1b:d6:f4:e0:31:b8:a5:e5:bc:f6:57: 9d:e8:5b:3d:b9:b0:50:2f:ea:65:7b:23:fa:1d:c3:b3:09:c6: 11:7e:10:f7:5d:a7:8f:16:4e:e0:b1:c4:13:58:2f:70:4a:47: 39:24:f9:f6:f5:29:8a:6b:b7:c7:c7:7b:27:bb:55:03:28:87: 1e:f6:f8:0b:ea:36:85:cb:2f:be:cc:af:cd:96:e5:ab:f8:2d: e9:61:97:b1:31:55:d9:64:95:19:ee:20:68:d0:dc:28:be:90: 54:66:c5:42:47:b4:37:ad:69:74:72:b4:f2:94:da:71:42:be: 3a:5e:2c:ab:70:39:55:34:f8:b5:07:e9:a5:d2:32:f6:b0:8b: 04:a3:63:9a:41:7e:b4:f0:5d:db:9b:46:45:2d:e6:63:3a:d7: ca:31:d3:a9:82:60:07:2c:75:92:54:50:4b:91:90:86:f1:8c: 47:2a:36:cc:8d:8b:53:d2:75:64:b8:d1:e1:90:14:eb:94:38: 2b:e4:8f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9OJ9Hkr7tBecQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTE0MFoXDTI1MDgyODE5MTE0MFowLzEtMCsGA1UEAxMk ZWExOWRhN2UtZGY0OC00ZDRiLWIxZGQtZWY4ZDIyMTQ0OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir/CL1JXLm1yAhtLzvKosNWYPEyG3gO9BEic zk2mHzR6Y7b/Y+LO4iXlqn5+8/IjO4PwVXeH4KLGIMZLIQo4+BivRw0qy+uFUHRd u+Laq4OY4/7zb5t9033g5TUy4/mzF+vd0oexPd2PUe/5HsFl3ItPrSDxSfgpgwfD vINCVzZpJZ/+IwgrcSEtFMS8RPSm1Kvoy8JPqEsXqkyCWaYcwnOYANMBxDkFwlmR PZZmVoG+xU4g3sSUrmP5SRwJPsItJ1QHa9z9y9rCtmZuVQUpDxKq3EEIgsOGgHNi Ha4gPdR/xoc+jfe+m58RJPhPu+MmAT9k3GeQQAitdeMqJ8hY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNJNmss4mQOhPGKrWWkE8LXju11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODEzMWFiOTgtNDIyOS0z NTg2LWEyYmMtZmVmNWU1OTU4NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmC78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxhfvGk9+sVxxkdjzXGTtZ6obi4i5fG4XNkAOj9yhSct+V4wQvi0iv4 BaNJqzJnHo/BoF3jgMT6srcQkVIb1vTgMbil5bz2V53oWz25sFAv6mV7I/odw7MJ xhF+EPddp48WTuCxxBNYL3BKRzkk+fb1KYprt8fHeye7VQMohx72+AvqNoXLL77M r82W5av4Lelhl7ExVdlklRnuIGjQ3Ci+kFRmxUJHtDetaXRytPKU2nFCvjpeLKtw OVU0+LUH6aXSMvawiwSjY5pBfrTwXdubRkUt5mM618ox06mCYAcsdZJUUEuRkIbx jEcqNsyNi1PSdWS40eGQFOuUOCvkjwA= -----END CERTIFICATE-----Generated at Sun Jun 8 08:19:54 2025 by rpki-client