$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9a86e35-484e-341a-a865-9998156efae5.roa File: e9a86e35-484e-341a-a865-9998156efae5.roa (raw, json) Hash identifier: 9mZvNz5Gz2Ir3868wxtEIFE+lwiJCgGPBdAfeWhPE3c= Subject key identifier: 43:1B:A7:F5:A2:74:E9:8B:19:AE:7C:55:9D:08:2B:32:40:70:A1:22 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285849419E8468CFDDF59F50F40140 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9a86e35-484e-341a-a865-9998156efae5.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 81 IP address blocks: 152.45.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:84:68:cf:dd:f5:9f:50:f4:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=49d77b12-2140-492b-924e-f36e649625e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:36:a3:ca:b3:c2:23:6b:93:2a:d6:25:16: 2a:59:26:ab:91:e7:71:33:0a:b8:7e:c6:d5:87:d0: 99:0a:68:71:88:41:e8:f6:68:90:2a:b6:53:e6:2e: 87:48:fc:5a:d4:f7:ad:24:86:2b:d4:49:58:b7:f0: fe:92:f2:5f:7b:6f:74:b3:a1:3e:19:c6:b8:a3:4d: 9e:b2:dd:5a:77:8a:c4:54:18:d2:71:bf:19:0b:19: a3:64:82:9c:a9:57:ac:4b:f7:4a:7f:d4:4e:c3:c0: 61:c6:4b:c9:f8:6b:56:fb:67:b9:93:01:1a:1c:85: 8e:4a:50:2f:92:e4:d7:23:07:a7:74:23:ba:2a:3d: 22:97:04:f5:0e:36:17:78:ca:54:fc:54:c6:03:06: 0e:61:47:1f:d8:d4:4f:df:2d:f6:a9:8a:d1:c3:83: ba:38:03:36:16:a3:3f:45:ba:10:82:73:55:5d:dd: 65:d5:b5:b1:6b:ee:04:98:ef:19:ee:cb:ec:c0:49: 1f:b3:aa:09:21:7c:c6:1e:9e:54:a7:26:55:4a:53: 00:ce:38:a1:5b:c1:0f:7f:bb:98:55:12:59:de:46: f5:2e:58:a5:4b:c7:b7:b9:6e:5f:80:10:2f:c8:53: 4c:23:08:ee:d4:0a:60:c0:fe:a6:66:3d:3e:86:ae: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:A7:F5:A2:74:E9:8B:19:AE:7C:55:9D:08:2B:32:40:70:A1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9a86e35-484e-341a-a865-9998156efae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:93:eb:9a:43:cf:65:12:7e:3c:20:b1:d3:9f:3b:a1:9f:c1: 2c:dd:4c:9b:e7:8e:7b:67:20:ab:87:9c:14:85:10:3c:76:3a: 07:aa:c8:e2:46:36:73:c3:39:4f:44:27:9b:0b:2a:49:b3:7f: 47:d6:f0:b3:b6:3b:d5:57:bf:01:0e:23:68:dc:22:db:53:6d: 13:6b:e6:ea:f2:46:2a:3c:a5:c3:bc:2e:f9:f6:4c:00:fa:e3: a7:20:8c:e2:0d:11:b3:0b:6e:1b:53:b6:ea:28:fe:3d:23:58: c8:c0:78:b6:7c:ab:83:2e:d5:98:70:a5:bf:bd:0d:7b:e7:d4: 45:6b:84:c0:7a:63:72:86:e1:c6:8d:f5:95:1f:95:fa:ec:0d: c1:54:38:21:15:9a:5a:d9:80:b3:52:7d:8c:09:f5:a4:31:5f: 5c:ab:3d:12:35:ce:d6:bd:57:ed:ff:eb:a2:2e:23:66:0a:c2: 28:5f:a8:18:d9:c8:04:b8:19:eb:10:78:59:23:d1:6c:6b:2d: 88:61:b9:03:0a:55:28:28:f4:1f:d3:e0:8a:02:e4:ca:ca:d2: 54:e5:5f:8b:2a:e5:16:ef:41:c8:cd:34:75:d3:db:e5:39:22: bb:3c:44:e6:37:11:81:67:46:01:cc:01:0d:7a:72:97:b1:5d: 5a:99:9e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoRoz931n1D0AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk NDlkNzdiMTItMjE0MC00OTJiLTkyNGUtZjM2ZTY0OTYyNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu382o8qzwiNrkyrWJRYqWSarkedxMwq4fsbV h9CZCmhxiEHo9miQKrZT5i6HSPxa1PetJIYr1ElYt/D+kvJfe290s6E+Gca4o02e st1ad4rEVBjScb8ZCxmjZIKcqVesS/dKf9ROw8BhxkvJ+GtW+2e5kwEaHIWOSlAv kuTXIwendCO6Kj0ilwT1DjYXeMpU/FTGAwYOYUcf2NRP3y32qYrRw4O6OAM2FqM/ RboQgnNVXd1l1bWxa+4EmO8Z7svswEkfs6oJIXzGHp5UpyZVSlMAzjihW8EPf7uY VRJZ3kb1LlilS8e3uW5fgBAvyFNMIwju1ApgwP6mZj0+hq53uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMbp/WidOmLGa58VZ0IKzJAcKEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTlhODZlMzUtNDg0ZS0z NDFhLWE4NjUtOTk5ODE1NmVmYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuT65pDz2USfjwgsdOfO6GfwSzdTJvnjntnIKuHnBSFEDx2OgeqyOJG NnPDOU9EJ5sLKkmzf0fW8LO2O9VXvwEOI2jcIttTbRNr5uryRio8pcO8Lvn2TAD6 46cgjOINEbMLbhtTtuoo/j0jWMjAeLZ8q4Mu1Zhwpb+9DXvn1EVrhMB6Y3KG4caN 9ZUflfrsDcFUOCEVmlrZgLNSfYwJ9aQxX1yrPRI1zta9V+3/66IuI2YKwihfqBjZ yAS4GesQeFkj0WxrLYhhuQMKVSgo9B/T4IoC5MrK0lTlX4sq5RbvQcjNNHXT2+U5 Irs8ROY3EYFnRgHMAQ16cpexXVqZngA= -----END CERTIFICATE-----Generated at Sun Apr 6 12:15:50 2025 by rpki-client