$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c1310ddb-f58d-39f0-9c02-7ea0a7c4db6c.roa File: c1310ddb-f58d-39f0-9c02-7ea0a7c4db6c.roa (raw, json) Hash identifier: kD4GXRifwksbdkA5EI8MgQQHHI0jyikPV5jkPkSXGnE= Subject key identifier: 46:52:FD:70:F1:88:EC:C8:29:4D:85:EB:C9:CD:2B:63:52:B6:E5:A6 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E80C71D213BFDDF0A5900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c1310ddb-f58d-39f0-9c02-7ea0a7c4db6c.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 128.109.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:80:c7:1d:21:3b:fd:df:0a:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=3522802c-4d65-47c1-a608-aeb4d5852b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:91:cb:9c:89:54:28:bc:39:9f:51:0e:03: ea:6e:f9:33:90:d1:27:12:42:58:c8:5b:3d:ea:0e: f4:bf:b8:16:c8:b8:67:63:63:63:d1:5d:f8:7f:2d: 5c:90:d9:a4:4b:9e:12:18:52:e9:0c:34:8f:5f:35: d9:97:90:e7:56:29:d6:a2:e3:5f:81:b4:ff:33:66: 0f:5d:54:e9:0b:5f:66:a5:81:52:31:ea:b3:ca:36: f4:23:6e:81:d7:66:93:7d:74:e8:a5:fb:8a:2a:b8: b6:01:66:62:6c:f1:dd:87:11:b8:45:24:5c:49:55: c7:24:9a:ca:ce:51:c2:e8:dd:8c:2e:13:45:90:93: 59:5c:69:b0:27:a6:6d:c7:f5:da:4f:e6:ce:83:2c: 71:a2:62:db:27:b3:0e:e9:9a:20:82:dc:4b:10:de: 21:4a:23:c1:36:d9:3c:8b:f7:27:41:24:2b:9e:6c: 06:03:a3:5d:fa:f7:f7:dd:c3:54:c7:08:1c:88:31: b7:91:e5:d4:b4:c5:79:06:12:f5:5f:ca:08:0e:4a: 34:dd:68:5f:82:18:89:f0:63:89:e5:27:61:fd:b4: 4a:ed:48:08:78:ce:cd:3a:5c:33:1e:9a:e7:b1:e8: c8:aa:15:79:44:36:82:c0:e6:22:df:10:d5:54:f3: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:52:FD:70:F1:88:EC:C8:29:4D:85:EB:C9:CD:2B:63:52:B6:E5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c1310ddb-f58d-39f0-9c02-7ea0a7c4db6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:78:dd:8d:da:de:cb:fa:0c:8f:f4:78:10:4b:bf:3b:61:0e: fd:4e:dd:93:90:26:58:2e:c2:90:7e:4a:78:1c:75:5f:d9:3c: d6:49:cf:56:6a:af:ad:99:dd:26:44:a4:b0:df:28:ad:dd:33: 91:21:be:1f:a2:f2:a2:bc:b3:dc:07:17:14:5d:3c:fa:95:e2: 88:85:4c:66:f8:54:4c:ec:66:8f:40:77:9e:71:f8:f7:88:82: 26:4c:49:f7:70:23:44:85:d4:44:e1:c0:74:4b:a3:0a:9b:b8: 8a:2f:92:2c:4d:f2:d5:01:cd:21:70:f3:1c:5e:54:32:e6:dc: 27:5b:a9:6c:1a:1d:78:05:b9:54:de:ae:d5:e8:76:4b:b4:73: ea:15:64:9d:b9:a2:ce:fe:37:97:ae:b4:c6:fc:36:e9:45:ab: a9:16:1e:58:d2:e2:7c:a0:15:8e:28:6a:7c:0a:8f:f3:af:a9: ff:69:34:64:6e:1f:5d:8f:88:38:2e:bd:e5:5d:45:be:6b:31: 01:aa:1a:ba:1b:06:5f:bf:38:04:ae:b4:14:3d:be:ea:38:f7: fd:67:53:67:c1:26:c4:9f:62:e8:2f:a4:ec:49:6c:6b:ce:39: d5:2c:41:0c:1d:61:59:1e:a8:d6:9f:7f:17:ae:2f:1e:9c:95: c0:01:e4:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoDHHSE7/d8KWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk MzUyMjgwMmMtNGQ2NS00N2MxLWE2MDgtYWViNGQ1ODUyYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkeRy5yJVCi8OZ9RDgPqbvkzkNEnEkJYyFs9 6g70v7gWyLhnY2Nj0V34fy1ckNmkS54SGFLpDDSPXzXZl5DnVinWouNfgbT/M2YP XVTpC19mpYFSMeqzyjb0I26B12aTfXTopfuKKri2AWZibPHdhxG4RSRcSVXHJJrK zlHC6N2MLhNFkJNZXGmwJ6Ztx/XaT+bOgyxxomLbJ7MO6ZoggtxLEN4hSiPBNtk8 i/cnQSQrnmwGA6Nd+vf33cNUxwgciDG3keXUtMV5BhL1X8oIDko03WhfghiJ8GOJ 5Sdh/bRK7UgIeM7NOlwzHprnsejIqhV5RDaCwOYi3xDVVPPDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZS/XDxiOzIKU2F68nNK2NStuWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzEzMTBkZGItZjU4ZC0z OWYwLTljMDItN2VhMGE3YzRkYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh43Y3a3sv6DI/0eBBLvzthDv1O3ZOQJlguwpB+SngcdV/ZPNZJz1Zq r62Z3SZEpLDfKK3dM5Ehvh+i8qK8s9wHFxRdPPqV4oiFTGb4VEzsZo9Ad55x+PeI giZMSfdwI0SF1EThwHRLowqbuIovkixN8tUBzSFw8xxeVDLm3CdbqWwaHXgFuVTe rtXodku0c+oVZJ25os7+N5eutMb8NulFq6kWHljS4nygFY4oanwKj/Ovqf9pNGRu H12PiDguveVdRb5rMQGqGrobBl+/OASutBQ9vuo49/1nU2fBJsSfYugvpOxJbGvO OdUsQQwdYVkeqNaffxeuLx6clcAB5F8= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:54 2025 by rpki-client