$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/235e3286-90e3-3db4-b517-51dbc39ba6fe.roa File: 235e3286-90e3-3db4-b517-51dbc39ba6fe.roa (raw, json) Hash identifier: T9ANzJcv0nF+oIOzYR788KH3Mn5HBI2q/aac+w55Xdw= Subject key identifier: CA:8F:ED:49:6F:18:E5:E1:D2:68:0E:00:BE:4A:C2:BA:0F:DE:C4:82 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EDD608ABAC237A11AB00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/235e3286-90e3-3db4-b517-51dbc39ba6fe.roa Signing time: Mon 07 Apr 2025 16:33:13 +0000 ROA not before: Mon 07 Apr 2025 16:33:13 +0000 ROA not after: Sun 06 Jul 2025 16:33:13 +0000 asID: 81 IP address blocks: 152.28.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ed:d6:08:ab:ac:23:7a:11:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:13 2025 GMT Not After : Jul 6 16:33:13 2025 GMT Subject: CN=e0086369-167e-4434-acb4-0a0c0b9e2b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:23:65:99:d9:71:a3:76:70:22:1b:03:b0: 42:c2:ed:58:2c:32:90:ce:50:ba:0f:15:22:a1:c4: b1:49:50:11:b4:f1:9f:62:69:10:f0:d5:be:2c:77: 9d:79:c7:90:e6:40:63:74:c8:ab:04:8f:b2:7f:ab: 0b:bc:ef:5e:9c:8b:74:29:97:a3:6c:1a:33:cb:5e: f4:db:9f:2d:14:b9:6e:4c:69:48:b0:60:e7:5b:30: a8:10:82:08:f5:c2:17:04:93:0b:f4:ac:9c:ba:a8: 71:9f:b7:77:f8:54:6b:c4:23:84:b3:7a:77:37:e7: a1:6a:cf:04:cf:22:9e:12:80:dc:8f:52:70:14:55: 66:94:25:b1:f1:67:df:d9:2a:26:47:86:8f:8d:b6: 3e:67:e4:c8:7c:fa:a3:39:25:0c:fd:31:78:fb:4f: e2:99:f6:b3:fd:66:78:ad:26:80:40:50:ca:d3:54: cd:f7:b0:4e:ea:97:59:63:17:c4:5b:0b:b3:3d:32: 86:1c:17:d0:cc:33:f1:64:6e:1e:77:52:c7:da:41: 1a:d1:35:43:d8:56:32:07:43:65:cf:1a:f5:a2:89: b0:24:98:d8:f6:fb:54:b6:ae:15:d5:0a:3d:73:61: 37:3e:55:58:ef:06:69:9f:7e:be:0d:c1:12:76:1b: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:ED:49:6F:18:E5:E1:D2:68:0E:00:BE:4A:C2:BA:0F:DE:C4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/235e3286-90e3-3db4-b517-51dbc39ba6fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:53:be:b5:f6:b3:92:58:96:26:15:e1:0c:3f:a1:cb:64:10: d2:f4:e5:fd:a7:2d:6f:fb:40:14:ff:41:2b:29:cf:ae:a5:9e: 09:41:60:08:85:79:d9:c7:eb:15:78:8c:72:fc:41:3e:0c:fb: 69:24:32:6e:7b:3b:9f:3a:b6:32:57:a1:b9:a2:fd:f4:d4:e3: af:3f:5e:da:71:ad:9d:2a:63:01:a6:ce:72:f0:a7:d2:c4:14: 56:b0:12:6a:21:87:c0:4a:ad:90:42:d5:97:bf:13:35:a4:1c: 26:f6:99:5e:4c:c3:38:7d:18:26:8d:a4:96:af:ea:4f:94:2f: 30:0c:81:6d:9d:b5:08:cf:3b:30:97:c7:79:7a:3b:bb:de:ec: 12:18:61:eb:13:8b:91:93:de:55:14:3e:b6:f8:bc:53:58:f7: a5:8b:5c:7f:d9:f1:90:20:c0:2d:8d:cc:60:54:3b:3c:1d:6e: 24:03:ba:a7:90:83:b6:92:09:47:41:b3:55:6c:d7:e5:8d:f8: dc:37:9f:2e:ed:3c:f6:a1:26:bc:f2:ac:79:a5:c7:c1:fe:3b: 3f:1d:75:d8:59:b5:62:e5:2c:f6:10:f2:8c:02:b6:0c:57:a0: 41:54:71:3f:71:f7:38:30:3d:da:8c:29:2e:e9:16:15:90:b4: 7b:b4:72:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u3WCKusI3oRqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxM1oXDTI1MDcwNjE2MzMxM1owLzEtMCsGA1UEAxMk ZTAwODYzNjktMTY3ZS00NDM0LWFjYjQtMGEwYzBiOWUyYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OojZZnZcaN2cCIbA7BCwu1YLDKQzlC6DxUi ocSxSVARtPGfYmkQ8NW+LHedeceQ5kBjdMirBI+yf6sLvO9enIt0KZejbBozy170 258tFLluTGlIsGDnWzCoEIII9cIXBJML9Kycuqhxn7d3+FRrxCOEs3p3N+ehas8E zyKeEoDcj1JwFFVmlCWx8Wff2SomR4aPjbY+Z+TIfPqjOSUM/TF4+0/imfaz/WZ4 rSaAQFDK01TN97BO6pdZYxfEWwuzPTKGHBfQzDPxZG4ed1LH2kEa0TVD2FYyB0Nl zxr1oomwJJjY9vtUtq4V1Qo9c2E3PlVY7wZpn36+DcESdht/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqP7UlvGOXh0mgOAL5KwroP3sSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjM1ZTMyODYtOTBlMy0z ZGI0LWI1MTctNTFkYmMzOWJhNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJTvrX2s5JYliYV4Qw/octkENL05f2nLW/7QBT/QSspz66lnglBYAiF ednH6xV4jHL8QT4M+2kkMm57O586tjJXobmi/fTU468/XtpxrZ0qYwGmznLwp9LE FFawEmohh8BKrZBC1Ze/EzWkHCb2mV5Mwzh9GCaNpJav6k+ULzAMgW2dtQjPOzCX x3l6O7ve7BIYYesTi5GT3lUUPrb4vFNY96WLXH/Z8ZAgwC2NzGBUOzwdbiQDuqeQ g7aSCUdBs1Vs1+WN+Nw3ny7tPPahJrzyrHmlx8H+Oz8dddhZtWLlLPYQ8owCtgxX oEFUcT9x9zgwPdqMKS7pFhWQtHu0cjE= -----END CERTIFICATE-----Generated at Tue Apr 29 02:33:35 2025 by rpki-client