$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa File: a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa (raw, json) Hash identifier: FMOnwDKx1ppy8Zx9r4goXRCS1/wvbEjWeeVxXYl9bho= Subject key identifier: 96:92:F8:07:0A:37:34:BA:1B:7A:AD:C3:D1:B4:1C:CD:8F:E2:57:EA Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E840738AE2229CE180820 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 152.28.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:84:07:38:ae:22:29:ce:18:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=f2b7414f-7600-4343-8531-014dc9e027e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:98:87:04:8a:b4:c9:7e:bd:4d:ce:55:ef: ce:41:ee:24:36:5e:43:0e:cc:2c:3d:0e:74:50:95: dc:58:87:91:b7:0a:30:44:28:34:9e:56:d0:39:41: 67:78:00:2c:2c:e3:54:05:2a:09:bf:13:23:a8:5e: f4:c2:7d:c7:a5:55:b4:a5:00:25:50:d3:cd:75:c4: f7:9f:8a:59:e2:44:fd:40:31:24:cb:7b:c6:31:e9: 83:63:dc:47:01:3c:1c:e2:4c:ea:a8:22:05:66:1d: c1:ca:06:47:8e:43:97:02:fd:c3:98:73:57:14:b0: 4a:77:c2:0a:0a:48:8b:90:3d:1b:7c:7e:7f:a3:c4: 79:68:31:71:a8:a3:21:90:25:84:e9:59:d5:50:61: 10:c3:25:80:b3:74:4e:8d:cc:f7:3c:4a:ef:b3:50: ee:db:cc:3b:6e:9d:70:39:cf:3c:55:46:57:19:39: 7f:d9:e3:7e:fa:68:13:59:67:6a:c5:61:fc:c2:40: e3:02:34:ac:81:65:19:16:b1:60:50:56:62:32:dd: ed:2d:da:a1:39:8f:3b:a1:e6:3b:cd:3c:c4:a5:7e: 6d:88:51:1d:72:da:2d:0e:70:ae:a6:6a:22:fb:f6: 79:96:67:1c:a7:49:e5:e2:70:b3:30:e7:2c:c0:9b: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:F8:07:0A:37:34:BA:1B:7A:AD:C3:D1:B4:1C:CD:8F:E2:57:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5f:42:65:e6:8d:d7:3a:1d:b2:93:87:6b:9f:28:80:18:cb: 01:3e:78:b4:8c:f1:7d:35:f3:e8:df:2a:7a:ff:68:af:6d:9c: d3:6e:a6:36:02:a0:df:9a:ed:86:9f:52:bc:29:26:22:ce:6f: bf:55:4f:ff:f5:5e:92:9a:5e:27:19:82:5e:63:65:e1:ca:0a: 31:61:67:3a:14:1c:44:d4:be:f6:96:96:c0:fd:e1:81:42:09: c6:7a:49:9a:1a:55:51:05:26:68:9f:d6:b3:4e:c8:af:74:69: 93:35:3b:c1:91:77:9c:b1:95:7f:78:ae:1a:a3:4b:13:3c:c9: c7:ce:4b:1f:14:9f:8d:99:9d:07:de:2f:c0:7d:52:51:33:b8: c1:cd:bb:33:73:78:95:b7:46:a8:20:f5:a2:2b:91:db:e2:83: 8c:32:57:60:69:ac:1e:5b:2e:04:6a:4b:46:20:67:f2:f9:42: 49:4c:b1:dd:05:fd:36:8f:84:98:37:34:2d:07:46:a3:df:09: 06:e8:a2:8b:f4:a4:e1:db:da:4e:8a:72:8e:78:a5:68:3d:5a: cf:d7:fe:a1:25:57:25:65:8e:a9:46:c6:3f:27:03:b9:76:2e: 0b:dd:ea:e1:1e:62:16:cd:f0:e9:b0:88:24:0b:cb:ec:e2:90: 72:a3:1b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoQHOK4iKc4YCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjJiNzQxNGYtNzYwMC00MzQzLTg1MzEtMDE0ZGM5ZTAyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6aYhwSKtMl+vU3OVe/OQe4kNl5DDswsPQ50 UJXcWIeRtwowRCg0nlbQOUFneAAsLONUBSoJvxMjqF70wn3HpVW0pQAlUNPNdcT3 n4pZ4kT9QDEky3vGMemDY9xHATwc4kzqqCIFZh3BygZHjkOXAv3DmHNXFLBKd8IK CkiLkD0bfH5/o8R5aDFxqKMhkCWE6VnVUGEQwyWAs3ROjcz3PErvs1Du28w7bp1w Oc88VUZXGTl/2eN++mgTWWdqxWH8wkDjAjSsgWUZFrFgUFZiMt3tLdqhOY87oeY7 zTzEpX5tiFEdctotDnCupmoi+/Z5lmccp0nl4nCzMOcswJvG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaS+AcKNzS6G3qtw9G0HM2P4lfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTdlYTlmODYtOWE4MS0z NDY0LTk3YmEtYTVhZDEyMTY3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhfQmXmjdc6HbKTh2ufKIAYywE+eLSM8X018+jfKnr/aK9tnNNupjYC oN+a7YafUrwpJiLOb79VT//1XpKaXicZgl5jZeHKCjFhZzoUHETUvvaWlsD94YFC CcZ6SZoaVVEFJmif1rNOyK90aZM1O8GRd5yxlX94rhqjSxM8ycfOSx8Un42ZnQfe L8B9UlEzuMHNuzNzeJW3Rqgg9aIrkdvig4wyV2BprB5bLgRqS0YgZ/L5QklMsd0F /TaPhJg3NC0HRqPfCQbooov0pOHb2k6Kco54pWg9Ws/X/qElVyVljqlGxj8nA7l2 Lgvd6uEeYhbN8OmwiCQLy+zikHKjG18= -----END CERTIFICATE-----Generated at Sun Apr 6 11:54:50 2025 by rpki-client