$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2861d9b1-703a-371f-80a3-a0486510c940.roa File: 2861d9b1-703a-371f-80a3-a0486510c940.roa (raw, json) Hash identifier: Uvc5+RsBK8eLwmX+tZaKtK/Ckk3nw6CVFEoR9sP6bhQ= Subject key identifier: 2B:82:11:37:FB:A5:36:AA:6A:FA:60:2C:C4:A8:A8:3C:F3:63:F3:36 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EE7E10A3F03CAE8F3540 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2861d9b1-703a-371f-80a3-a0486510c940.roa Signing time: Mon 07 Apr 2025 16:33:13 +0000 ROA not before: Mon 07 Apr 2025 16:33:13 +0000 ROA not after: Sun 06 Jul 2025 16:33:13 +0000 asID: 81 IP address blocks: 152.45.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ee:7e:10:a3:f0:3c:ae:8f:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:13 2025 GMT Not After : Jul 6 16:33:13 2025 GMT Subject: CN=1dafbc41-3b79-4332-8a3a-3d89fe2fad3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d7:e8:a3:93:2b:6d:f6:bb:f3:49:f2:6b:34: ed:b6:12:b1:70:e6:03:6f:f7:ad:f7:84:2a:d5:63: b9:36:8c:17:69:9b:27:8a:fb:42:c8:be:18:fd:8a: dd:e7:8f:eb:89:2e:1e:84:db:04:d9:a6:d9:e0:2a: da:56:ef:81:4a:6f:44:2c:5d:dd:ff:36:1d:4c:54: d6:0b:bf:37:29:8e:6c:be:cd:01:c1:b5:89:54:b8: a7:e0:be:ee:36:b2:2d:9d:3b:e6:c2:22:56:22:ce: e2:75:62:63:1e:f3:f2:24:d3:36:5d:26:1c:b7:0a: 48:04:1b:0d:8b:13:a6:95:30:ef:d5:a4:02:d0:4e: 47:35:e9:a3:4a:22:b7:23:1b:de:dc:7b:27:18:18: 78:79:c1:b1:9e:7f:9a:7c:be:7b:d2:93:5a:25:57: d3:1a:39:ad:f5:9c:a9:7b:b0:3e:ac:4e:4e:9f:a3: 46:ee:60:49:9a:3f:8b:f7:3f:0a:ce:c4:e9:52:12: 6c:d3:40:6b:44:2f:4a:41:15:0d:6c:f8:55:43:6e: ae:e6:50:98:a1:80:f4:83:8a:a5:a6:9f:94:ed:90: 5f:12:ec:e3:77:a4:39:2c:47:b2:6f:fb:77:ed:00: 73:b3:5f:b6:47:07:c4:79:f7:b2:7d:10:09:7a:82: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:82:11:37:FB:A5:36:AA:6A:FA:60:2C:C4:A8:A8:3C:F3:63:F3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2861d9b1-703a-371f-80a3-a0486510c940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:89:38:3c:01:74:34:f6:88:0b:09:53:92:c0:9a:cf:67:f0: c0:90:dd:04:0d:09:82:b0:a2:68:c4:12:91:fe:29:ee:c1:23: 34:74:c9:f7:07:96:64:a3:73:e5:38:04:23:4b:5c:c0:35:90: f3:8d:90:07:9c:6f:7d:17:80:98:06:10:1c:42:c1:5c:09:e3: 6c:80:f8:2d:b7:1e:ce:26:bf:f5:e9:e4:c5:12:2a:07:3d:5e: 87:bf:2d:0a:e8:20:8b:38:1f:e9:13:65:77:f2:18:f7:b2:23: c1:64:f3:70:29:38:1b:54:d2:ba:97:8b:54:48:f0:e8:d8:17: 2f:c5:a1:a0:e0:19:43:d3:ab:8e:b4:a1:d7:96:db:19:46:cc: b9:42:6e:34:28:57:87:08:57:8b:07:b3:da:9a:c1:26:d9:18: 84:76:a1:7a:af:67:56:31:d3:a1:60:11:76:e9:54:c1:94:04: c8:bf:34:f5:78:c6:e5:12:da:2d:3d:11:8f:d2:70:34:dc:d5: 9a:03:61:c8:f7:78:ad:b8:52:f7:68:7f:94:1a:71:31:3e:d6: ea:ae:d9:9d:20:7f:85:cb:8b:02:d3:d0:7d:2e:46:1a:89:6f: 9e:49:0b:e6:48:43:48:8e:c7:8d:e1:1d:98:53:8d:49:0a:5c: 49:14:d3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u5+EKPwPK6PNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxM1oXDTI1MDcwNjE2MzMxM1owLzEtMCsGA1UEAxMk MWRhZmJjNDEtM2I3OS00MzMyLThhM2EtM2Q4OWZlMmZhZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNfoo5Mrbfa780nyazTtthKxcOYDb/et94Qq 1WO5NowXaZsnivtCyL4Y/Yrd54/riS4ehNsE2abZ4CraVu+BSm9ELF3d/zYdTFTW C783KY5svs0BwbWJVLin4L7uNrItnTvmwiJWIs7idWJjHvPyJNM2XSYctwpIBBsN ixOmlTDv1aQC0E5HNemjSiK3Ixve3HsnGBh4ecGxnn+afL570pNaJVfTGjmt9Zyp e7A+rE5On6NG7mBJmj+L9z8KzsTpUhJs00BrRC9KQRUNbPhVQ26u5lCYoYD0g4ql pp+U7ZBfEuzjd6Q5LEeyb/t37QBzs1+2RwfEefeyfRAJeoLpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuCETf7pTaqavpgLMSoqDzzY/M2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjg2MWQ5YjEtNzAzYS0z NzFmLTgwYTMtYTA0ODY1MTBjOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuJODwBdDT2iAsJU5LAms9n8MCQ3QQNCYKwomjEEpH+Ke7BIzR0yfcH lmSjc+U4BCNLXMA1kPONkAecb30XgJgGEBxCwVwJ42yA+C23Hs4mv/Xp5MUSKgc9 Xoe/LQroIIs4H+kTZXfyGPeyI8Fk83ApOBtU0rqXi1RI8OjYFy/FoaDgGUPTq460 odeW2xlGzLlCbjQoV4cIV4sHs9qawSbZGIR2oXqvZ1Yx06FgEXbpVMGUBMi/NPV4 xuUS2i09EY/ScDTc1ZoDYcj3eK24Uvdof5QacTE+1uqu2Z0gf4XLiwLT0H0uRhqJ b55JC+ZIQ0iOx43hHZhTjUkKXEkU0ww= -----END CERTIFICATE-----Generated at Mon Apr 28 11:17:16 2025 by rpki-client