$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ad80a05-b8ae-3290-82e3-b94489df2404.roa File: 0ad80a05-b8ae-3290-82e3-b94489df2404.roa (raw, json) Hash identifier: kbEoOdKqS8TfrdcGrMHSjJRSC/X++7jX3JYN3kERLj8= Subject key identifier: 5A:B7:8E:CB:CD:1B:F8:62:F9:10:7C:65:D6:4E:07:BB:FB:EB:E5:31 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EF120FB839345A323400 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ad80a05-b8ae-3290-82e3-b94489df2404.roa Signing time: Mon 07 Apr 2025 16:33:13 +0000 ROA not before: Mon 07 Apr 2025 16:33:13 +0000 ROA not after: Sun 06 Jul 2025 16:33:13 +0000 asID: 81 IP address blocks: 152.46.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ef:12:0f:b8:39:34:5a:32:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:13 2025 GMT Not After : Jul 6 16:33:13 2025 GMT Subject: CN=1f41c308-7a21-42f3-b3eb-002d1fa38965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:8b:58:e9:58:24:07:54:42:16:08:40:36: a2:78:96:f0:33:59:e7:a8:2c:38:f7:48:c4:4d:7a: cb:34:2c:5a:37:4d:b9:5c:bf:e4:34:10:fe:12:d4: 0f:70:84:15:8c:ff:5e:cc:be:a2:27:8e:a4:88:6e: ad:5c:07:f0:64:02:5c:ac:6c:2b:c0:49:7b:54:56: e1:ff:bf:a2:87:af:03:b4:d3:6d:e2:1d:5c:df:bd: 62:ba:c0:10:a1:59:5c:a3:ba:9c:56:18:40:7b:06: 1c:01:24:8e:3b:e2:e4:6f:e7:9a:cc:78:0d:27:c5: 40:d1:a2:36:7e:42:a3:3e:d2:fd:91:9b:84:de:0d: 6d:21:ab:88:b5:3f:96:1d:ed:c3:8f:02:d2:36:92: 4f:13:3b:4f:ba:ed:fd:12:1f:12:ed:21:44:74:04: 7d:3d:03:64:b6:1c:b3:af:14:24:39:63:dc:59:cd: 4a:e6:e3:a2:b7:93:41:47:8f:35:1f:73:8d:39:19: dd:9e:08:80:3a:ab:17:14:fd:57:a1:99:b6:8d:77: 8f:98:6a:31:d4:20:43:f3:c1:be:f4:03:82:d5:b9: 13:8f:38:d6:3c:e0:87:cc:f8:40:4c:13:0c:e6:59: 91:50:42:ed:f2:76:d7:f9:61:aa:38:d6:1c:2e:cc: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B7:8E:CB:CD:1B:F8:62:F9:10:7C:65:D6:4E:07:BB:FB:EB:E5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ad80a05-b8ae-3290-82e3-b94489df2404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:9c:5b:91:b6:64:d2:8e:ef:92:59:1e:a7:a4:e2:b2:d4: 9f:34:31:1d:f1:74:3e:11:7c:2d:d2:8d:fb:ec:5a:48:d6:fa: 77:2f:b7:2d:2e:53:0a:09:ff:f3:ec:3e:77:29:5b:5e:55:92: 43:55:df:0f:7e:6a:c9:2a:e8:56:65:d5:ba:87:3e:f4:73:4d: 15:76:d0:4f:30:a6:70:eb:3d:ba:9a:d1:2c:ac:6d:53:e7:1d: ff:7a:d2:ac:d4:21:c3:20:76:cf:1d:3d:5a:9c:fc:03:6f:f5: 27:29:b2:8b:44:fe:be:b9:86:0a:1a:21:c6:1c:3a:c5:e6:f1: 4c:84:1f:f4:f1:8f:65:dd:39:fb:ff:6c:3d:40:4d:23:f1:92: 32:b6:5b:17:9e:5f:aa:d3:46:8a:98:7b:44:1c:54:74:f0:4f: 0e:4d:26:d9:8c:41:cd:c6:c2:01:fa:fd:a9:ad:a9:d9:1c:c4: ab:11:70:5a:a9:3b:73:7a:a1:9c:db:f5:5d:cf:cd:f7:76:22: 66:c5:e5:bd:21:47:d0:5e:a8:0f:a8:7f:64:2a:4f:53:d3:ed: c0:43:90:41:77:6c:d2:43:a7:50:b6:13:1c:7d:97:97:6d:b3: 83:5f:50:f1:ef:24:ab:36:43:b6:76:3d:30:13:27:f3:0f:fb: 90:a5:0e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u8SD7g5NFoyNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxM1oXDTI1MDcwNjE2MzMxM1owLzEtMCsGA1UEAxMk MWY0MWMzMDgtN2EyMS00MmYzLWIzZWItMDAyZDFmYTM4OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgeLWOlYJAdUQhYIQDaieJbwM1nnqCw490jE TXrLNCxaN025XL/kNBD+EtQPcIQVjP9ezL6iJ46kiG6tXAfwZAJcrGwrwEl7VFbh /7+ih68DtNNt4h1c371iusAQoVlco7qcVhhAewYcASSOO+Lkb+eazHgNJ8VA0aI2 fkKjPtL9kZuE3g1tIauItT+WHe3DjwLSNpJPEztPuu39Eh8S7SFEdAR9PQNkthyz rxQkOWPcWc1K5uOit5NBR481H3ONORndngiAOqsXFP1XoZm2jXePmGox1CBD88G+ 9AOC1bkTjzjWPOCHzPhATBMM5lmRUELt8nbX+WGqONYcLsyAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq3jsvNG/hi+RB8ZdZOB7v76+UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMGFkODBhMDUtYjhhZS0z MjkwLTgyZTMtYjk0NDg5ZGYyNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGennFuRtmTSju+SWR6npOKy1J80MR3xdD4RfC3SjfvsWkjW+ncvty0u UwoJ//PsPncpW15VkkNV3w9+askq6FZl1bqHPvRzTRV20E8wpnDrPbqa0SysbVPn Hf960qzUIcMgds8dPVqc/ANv9ScpsotE/r65hgoaIcYcOsXm8UyEH/Txj2XdOfv/ bD1ATSPxkjK2WxeeX6rTRoqYe0QcVHTwTw5NJtmMQc3GwgH6/amtqdkcxKsRcFqp O3N6oZzb9V3Pzfd2ImbF5b0hR9BeqA+of2QqT1PT7cBDkEF3bNJDp1C2Exx9l5dt s4NfUPHvJKs2Q7Z2PTATJ/MP+5ClDhg= -----END CERTIFICATE-----Generated at Mon Apr 28 18:44:09 2025 by rpki-client