$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfebf8dd-3c9e-3712-b3a7-1e96c626ef29.roa File: bfebf8dd-3c9e-3712-b3a7-1e96c626ef29.roa (raw, json) Hash identifier: mTDMpJTlKf/5Guibxjh4DzxlDmBRybiJhYa4Yj4U+ME= Subject key identifier: EF:EB:95:A9:92:76:00:E1:E5:93:B8:B6:16:21:2A:61:3D:5B:45:21 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727D0A003C4D0C2934A0480 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfebf8dd-3c9e-3712-b3a7-1e96c626ef29.roa Signing time: Fri 30 May 2025 19:11:39 +0000 ROA not before: Fri 30 May 2025 19:11:39 +0000 ROA not after: Thu 28 Aug 2025 19:11:39 +0000 asID: 81 IP address blocks: 152.26.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:d0:a0:03:c4:d0:c2:93:4a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:39 2025 GMT Not After : Aug 28 19:11:39 2025 GMT Subject: CN=36b93b16-cb6c-408f-beb3-446499f4f206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:2b:9b:28:e1:9a:73:ea:21:ac:c8:6a:5b: b5:1a:0b:88:52:4c:3f:d0:e6:06:65:77:ee:d1:d5: 95:92:d3:88:60:52:98:a4:a2:c0:c1:bf:8a:99:d2: 51:ae:77:57:bf:8e:66:26:21:bd:af:c2:55:90:d3: 78:7f:ef:b5:ad:f9:1a:fc:26:ea:2c:1e:4f:0f:44: 10:48:01:02:2c:d6:5e:7b:b0:63:76:7b:83:77:e5: 9c:9a:9e:5c:84:00:cb:65:f8:26:83:69:54:38:b9: f5:bf:d8:dc:6e:9f:19:02:e6:b4:2a:bf:b5:ad:e0: 7b:13:ee:9c:68:85:18:62:30:cf:f3:e6:d3:2f:1b: 7a:a7:e6:5c:bd:15:9c:b8:94:b7:42:8f:9d:43:6d: ab:77:a5:fb:9c:27:19:c3:33:41:fa:11:94:63:16: 33:50:78:e4:98:cb:3d:2c:e7:72:9c:7b:ee:06:c6: eb:70:d4:30:7a:c9:91:86:2b:97:ca:d1:33:df:f2: eb:97:de:05:72:c1:ec:c0:86:f6:95:cb:ab:e2:28: f0:86:2d:25:2f:d3:d4:45:ee:a6:01:9a:76:dd:b3: a4:26:80:34:f2:fc:34:6e:a7:7f:c0:cf:09:eb:9b: 2e:ab:5e:24:e3:a6:10:3d:f7:fe:56:8e:be:03:91: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:95:A9:92:76:00:E1:E5:93:B8:B6:16:21:2A:61:3D:5B:45:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfebf8dd-3c9e-3712-b3a7-1e96c626ef29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.26.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e3:94:d0:cf:8e:55:d6:64:36:1f:93:80:1d:89:c5:0e:b1: 4a:53:53:ff:9a:23:cd:99:27:e0:74:b2:4b:d2:82:61:ae:c4: e4:f0:43:95:24:b7:80:f0:b0:9a:3d:b9:8c:ce:0d:f6:c8:3d: d1:93:59:61:bf:f0:c6:b2:9d:35:cd:6a:4d:cb:dc:42:85:00: 31:56:ba:93:cf:8f:e8:34:17:ba:d4:69:57:32:51:fa:6e:5a: fa:90:b5:4e:c4:44:99:69:3f:a7:ab:fe:b9:e5:3a:21:fd:dc: 36:b9:5b:34:bf:b9:5f:8e:bc:13:29:72:f4:ab:fb:fc:8e:56: be:68:af:16:84:05:6a:72:c9:20:85:37:3a:03:16:94:84:02: 1d:43:db:9c:83:9c:ce:35:96:a5:a5:52:98:51:59:d3:6d:0e: 6d:ad:18:0a:15:cd:97:b7:ee:2f:b8:05:35:8a:54:ba:33:14: d1:ed:58:bc:b4:f8:f7:10:e4:63:87:a8:af:81:8c:19:23:4d: e4:a1:98:1a:71:88:65:4f:c8:5e:b0:5d:7f:79:ca:b1:2c:d2: 32:3c:bb:be:c3:7e:ea:de:84:1a:74:e5:0b:8a:02:d4:a3:2f: f6:58:59:ff:33:ae:69:5e:e3:3c:88:92:a8:fd:d6:22:ad:8a: 4b:42:ae:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9CgA8TQwpNKBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTEzOVoXDTI1MDgyODE5MTEzOVowLzEtMCsGA1UEAxMk MzZiOTNiMTYtY2I2Yy00MDhmLWJlYjMtNDQ2NDk5ZjRmMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVUrmyjhmnPqIazIalu1GguIUkw/0OYGZXfu 0dWVktOIYFKYpKLAwb+KmdJRrndXv45mJiG9r8JVkNN4f++1rfka/CbqLB5PD0QQ SAECLNZee7BjdnuDd+Wcmp5chADLZfgmg2lUOLn1v9jcbp8ZAua0Kr+1reB7E+6c aIUYYjDP8+bTLxt6p+ZcvRWcuJS3Qo+dQ22rd6X7nCcZwzNB+hGUYxYzUHjkmMs9 LOdynHvuBsbrcNQwesmRhiuXytEz3/Lrl94FcsHswIb2lcur4ijwhi0lL9PURe6m AZp23bOkJoA08vw0bqd/wM8J65suq14k46YQPff+Vo6+A5GQqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/rlamSdgDh5ZO4thYhKmE9W0UhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYmZlYmY4ZGQtM2M5ZS0z NzEyLWIzYTctMWU5NmM2MjZlZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBosMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDjlNDPjlXWZDYfk4AdicUOsUpTU/+aI82ZJ+B0skvSgmGuxOTwQ5Uk t4DwsJo9uYzODfbIPdGTWWG/8MaynTXNak3L3EKFADFWupPPj+g0F7rUaVcyUfpu WvqQtU7ERJlpP6er/rnlOiH93Da5WzS/uV+OvBMpcvSr+/yOVr5orxaEBWpyySCF NzoDFpSEAh1D25yDnM41lqWlUphRWdNtDm2tGAoVzZe37i+4BTWKVLozFNHtWLy0 +PcQ5GOHqK+BjBkjTeShmBpxiGVPyF6wXX95yrEs0jI8u77DfurehBp05QuKAtSj L/ZYWf8zrmle4zyIkqj91iKtiktCrr0= -----END CERTIFICATE-----Generated at Sun Jun 8 12:46:17 2025 by rpki-client