$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24989269-f5e0-3981-a71b-6217dcf4c87d.roa File: 24989269-f5e0-3981-a71b-6217dcf4c87d.roa (raw, json) Hash identifier: nbfxAQ3ZserfxTlvUIdJC7dGS2/85EO7xOa57Ur0xrM= Subject key identifier: 38:EE:C6:C9:75:E3:82:E7:0A:91:32:A6:C2:EA:2D:74:BF:88:DE:28 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2E92F01F2B9820E6726F0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24989269-f5e0-3981-a71b-6217dcf4c87d.roa Signing time: Mon 07 Apr 2025 16:33:10 +0000 ROA not before: Mon 07 Apr 2025 16:33:10 +0000 ROA not after: Sun 06 Jul 2025 16:33:10 +0000 asID: 81 IP address blocks: 152.48.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:e9:2f:01:f2:b9:82:0e:67:26:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:10 2025 GMT Not After : Jul 6 16:33:10 2025 GMT Subject: CN=9c6ab149-ec33-4fb5-9fb1-69bcd8e08f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:b6:83:7f:b7:9f:21:76:cc:d7:0e:a1:e9: 29:d9:ee:07:d8:36:9f:3f:ab:70:12:02:7b:65:2c: 16:c4:fd:28:41:08:95:8e:72:33:e2:73:60:1b:0e: 1b:10:fe:29:e4:45:e3:2f:69:64:88:33:80:85:db: c8:b9:09:54:0c:7c:4a:3a:f7:43:e8:ce:de:0f:be: 44:96:78:7a:d4:cd:d7:75:43:68:50:09:a2:0e:da: d9:4f:6c:de:c1:49:11:4f:cb:8d:b8:c6:fe:cd:58: 58:5a:fc:d4:ad:1e:be:00:b5:a0:53:f5:11:b2:e1: 2f:fd:bd:9e:59:bd:2a:10:8a:bc:5d:28:ed:f8:f6: cf:05:2c:d6:4e:94:ae:11:c9:84:35:db:3e:0b:d4: 3f:0a:f1:88:9b:79:73:6a:bc:ad:19:91:42:30:ce: 52:02:29:fa:9a:af:1c:35:75:26:61:1a:7d:4c:8c: e7:d6:dc:71:ff:d5:af:43:5a:94:06:04:16:df:27: c0:8a:b7:13:c9:13:df:d7:38:0e:c4:3d:28:27:42: 3d:35:e2:aa:2c:ed:e0:6f:79:2f:0b:6a:89:97:5c: 12:4b:de:92:71:da:6c:f9:27:d4:88:79:4e:2a:01: 05:a8:f8:0d:a3:1f:02:c5:61:7a:8a:12:26:53:18: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EE:C6:C9:75:E3:82:E7:0A:91:32:A6:C2:EA:2D:74:BF:88:DE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24989269-f5e0-3981-a71b-6217dcf4c87d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0e:3d:df:db:a9:69:ae:45:a0:5c:80:c4:30:01:6e:00:ac: e9:68:21:35:4c:9a:72:f6:d9:0a:fb:6d:bc:00:df:06:c6:4f: a2:b8:7a:93:b9:06:5c:ea:3b:c3:39:e5:69:a3:41:27:f5:54: 24:20:95:04:5d:c3:f9:a4:90:ae:6f:6d:58:10:35:b1:11:9b: 27:6d:75:02:f3:32:68:ef:0c:29:69:71:bb:84:9b:a6:14:0c: 4d:ff:26:46:1d:4e:9d:db:ef:b8:14:8a:5f:68:3f:3f:e6:19: db:5c:82:35:e1:88:13:9c:5c:fd:77:63:21:84:ef:aa:c7:dd: 95:7b:4d:b1:61:84:23:21:a3:f2:89:64:da:a8:8a:51:9a:8c: ee:5d:b9:55:0c:1c:bd:fe:ca:54:f3:26:a6:94:c7:d2:9d:0e: 91:01:6a:f1:bc:bd:e6:4b:0d:c9:51:9d:90:d1:65:f7:cc:43: 09:7d:2c:d9:e8:23:80:60:c9:79:4d:83:dd:a4:73:64:57:d2: 36:ac:17:23:ab:7f:ab:ae:48:c4:0f:f3:57:eb:f2:01:f1:9d: 14:44:29:75:c9:81:32:e9:1d:3e:a7:e1:dc:5b:f6:aa:08:45: 8f:30:4d:f1:c9:0e:69:7b:7b:f2:86:e9:70:f6:f0:28:01:46: 88:4b:42:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEly4ukvAfK5gg5nJvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMFoXDTI1MDcwNjE2MzMxMFowLzEtMCsGA1UEAxMk OWM2YWIxNDktZWMzMy00ZmI1LTlmYjEtNjliY2Q4ZTA4ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAq2g3+3nyF2zNcOoekp2e4H2DafP6twEgJ7 ZSwWxP0oQQiVjnIz4nNgGw4bEP4p5EXjL2lkiDOAhdvIuQlUDHxKOvdD6M7eD75E lnh61M3XdUNoUAmiDtrZT2zewUkRT8uNuMb+zVhYWvzUrR6+ALWgU/URsuEv/b2e Wb0qEIq8XSjt+PbPBSzWTpSuEcmENds+C9Q/CvGIm3lzarytGZFCMM5SAin6mq8c NXUmYRp9TIzn1txx/9WvQ1qUBgQW3yfAircTyRPf1zgOxD0oJ0I9NeKqLO3gb3kv C2qJl1wSS96Scdps+SfUiHlOKgEFqPgNox8CxWF6ihImUxhxxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDjuxsl144LnCpEypsLqLXS/iN4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjQ5ODkyNjktZjVlMC0z OTgxLWE3MWItNjIxN2RjZjRjODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABw4939upaa5FoFyAxDABbgCs6WghNUyacvbZCvttvADfBsZPorh6k7kG XOo7wznlaaNBJ/VUJCCVBF3D+aSQrm9tWBA1sRGbJ211AvMyaO8MKWlxu4SbphQM Tf8mRh1OndvvuBSKX2g/P+YZ21yCNeGIE5xc/XdjIYTvqsfdlXtNsWGEIyGj8olk 2qiKUZqM7l25VQwcvf7KVPMmppTH0p0OkQFq8by95ksNyVGdkNFl98xDCX0s2egj gGDJeU2D3aRzZFfSNqwXI6t/q65IxA/zV+vyAfGdFEQpdcmBMukdPqfh3Fv2qghF jzBN8ckOaXt78obpcPbwKAFGiEtCBA== -----END CERTIFICATE-----Generated at Mon Apr 28 03:22:44 2025 by rpki-client