$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/128dca5c-ac79-3cb3-8c5a-89eb18606d3e.roa File: 128dca5c-ac79-3cb3-8c5a-89eb18606d3e.roa (raw, json) Hash identifier: dXJ28aXZQ3SyDdhRZbGpAV+wzCUBu9slVPdAfKNSlp8= Subject key identifier: A2:CF:96:A6:5C:85:26:FB:C7:B9:B8:D5:28:55:D7:A1:81:0B:74:5C Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2E9AB2FEABC84A0BF2100 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/128dca5c-ac79-3cb3-8c5a-89eb18606d3e.roa Signing time: Mon 07 Apr 2025 16:33:11 +0000 ROA not before: Mon 07 Apr 2025 16:33:11 +0000 ROA not after: Sun 06 Jul 2025 16:33:11 +0000 asID: 81 IP address blocks: 192.154.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:e9:ab:2f:ea:bc:84:a0:bf:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:11 2025 GMT Not After : Jul 6 16:33:11 2025 GMT Subject: CN=294369a4-79cf-4132-9a94-b1361091bef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b4:05:33:16:03:4c:ef:48:fb:34:55:c6:40: e5:11:a7:84:33:bf:23:48:87:31:5c:96:3e:90:e9: 3f:cb:aa:d5:8c:1e:c4:25:8b:b0:13:19:e9:3c:4a: 76:0b:99:37:96:b7:71:f8:5f:e8:2d:d7:39:7a:b3: d3:b1:34:d8:eb:df:7c:8a:5e:c5:6a:0e:d1:90:1e: b9:ca:38:cc:17:bf:21:7c:ba:0a:b9:ea:e9:fd:90: 19:06:9e:52:ba:ad:97:a7:33:5c:a1:67:65:60:76: 22:bd:19:ac:0f:19:06:bf:05:6f:df:d0:6b:ec:c9: eb:b4:6b:bb:b4:5c:09:c0:9d:b3:de:ca:3d:dc:f0: 4a:b5:03:9f:48:09:97:7d:a2:b8:4a:58:d7:49:aa: ef:06:bb:09:e3:34:22:be:eb:3e:9f:d3:1e:d2:7a: bd:6e:f9:b3:36:68:70:62:39:9d:ee:a1:cc:59:69: ea:26:e6:21:3f:7d:52:39:95:7d:e8:1f:ab:d1:f5: 9a:52:b4:23:7f:8c:b7:c4:7a:c7:c6:0b:2e:f2:21: 46:20:1c:e2:75:41:44:a9:b1:5c:c5:f0:8a:34:f9: b9:cb:4b:46:d3:cb:34:fa:53:70:7a:de:e5:9f:cc: 15:91:c6:9c:ab:68:73:6a:a2:f4:a4:83:c4:ea:a8: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CF:96:A6:5C:85:26:FB:C7:B9:B8:D5:28:55:D7:A1:81:0B:74:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/128dca5c-ac79-3cb3-8c5a-89eb18606d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c3:09:3d:3f:ff:d2:b2:0b:e8:1e:1e:b4:88:b1:51:6a:ef: 12:90:2b:02:29:97:16:b5:b8:67:a0:2d:fd:93:eb:f9:90:d1: 70:9d:ae:90:b8:8a:59:a2:51:e7:a4:01:db:d4:ed:87:ec:4a: 61:a2:24:0b:47:30:73:d8:f5:5c:a5:27:b5:87:c8:13:2e:a5: 54:01:70:d1:0c:cc:6c:2c:52:ec:e4:60:f8:d1:80:69:91:e9: a5:c8:61:3d:e3:a9:d5:f4:08:b3:4f:c9:b7:28:d3:96:ee:d1: e3:b2:7a:06:29:66:be:f3:ba:e4:2b:fa:37:19:85:c0:bb:e7: ac:33:e4:cb:b7:f2:5e:7f:fe:73:b6:64:37:cc:d6:75:c1:13: 3c:0f:92:aa:d5:de:92:c4:d3:77:92:e8:41:31:37:ae:c1:56: a4:d1:d9:89:7b:08:fa:b0:73:9b:62:1f:76:e6:4b:17:24:39: 9d:26:60:b4:d3:b9:35:ed:ec:34:92:a6:a4:73:5b:3c:7e:e6: b4:b6:47:10:66:20:fd:34:43:20:57:ce:6d:b5:0b:13:42:5b: df:fc:ea:02:8a:1f:06:f3:08:d2:a2:ac:6d:60:5b:1c:03:c1: c0:ae:b1:e0:ba:a4:ca:bf:50:7d:9b:a9:58:bd:d1:a6:60:a9: fd:6a:71:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4umrL+q8hKC/IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMVoXDTI1MDcwNjE2MzMxMVowLzEtMCsGA1UEAxMk Mjk0MzY5YTQtNzljZi00MTMyLTlhOTQtYjEzNjEwOTFiZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LQFMxYDTO9I+zRVxkDlEaeEM78jSIcxXJY+ kOk/y6rVjB7EJYuwExnpPEp2C5k3lrdx+F/oLdc5erPTsTTY6998il7Fag7RkB65 yjjMF78hfLoKuerp/ZAZBp5Suq2XpzNcoWdlYHYivRmsDxkGvwVv39Br7MnrtGu7 tFwJwJ2z3so93PBKtQOfSAmXfaK4SljXSarvBrsJ4zQivus+n9Me0nq9bvmzNmhw Yjmd7qHMWWnqJuYhP31SOZV96B+r0fWaUrQjf4y3xHrHxgsu8iFGIBzidUFEqbFc xfCKNPm5y0tG08s0+lNwet7ln8wVkcacq2hzaqL0pIPE6qilWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLPlqZchSb7x7m41ShV16GBC3RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTI4ZGNhNWMtYWM3OS0z Y2IzLThjNWEtODllYjE4NjA2ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDDCT0//9KyC+geHrSIsVFq7xKQKwIplxa1uGegLf2T6/mQ0XCdrpC4 ilmiUeekAdvU7YfsSmGiJAtHMHPY9VylJ7WHyBMupVQBcNEMzGwsUuzkYPjRgGmR 6aXIYT3jqdX0CLNPybco05bu0eOyegYpZr7zuuQr+jcZhcC756wz5Mu38l5//nO2 ZDfM1nXBEzwPkqrV3pLE03eS6EExN67BVqTR2Yl7CPqwc5tiH3bmSxckOZ0mYLTT uTXt7DSSpqRzWzx+5rS2RxBmIP00QyBXzm21CxNCW9/86gKKHwbzCNKirG1gWxwD wcCuseC6pMq/UH2bqVi90aZgqf1qcWU= -----END CERTIFICATE-----Generated at Mon Apr 28 11:16:12 2025 by rpki-client