$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa File: 35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa (raw, json) Hash identifier: /9DnLjasgZc/jJGH/i7wR4uWsJuYZvaHLAnsrM2zC6U= Subject key identifier: 12:19:85:66:F7:1E:22:D3:23:FB:F6:34:79:0F:B4:B5:78:F8:8D:0E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EFBEF988A2DBB48B36A7 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa Signing time: Mon 07 Apr 2025 16:33:14 +0000 ROA not before: Mon 07 Apr 2025 16:33:14 +0000 ROA not after: Sun 06 Jul 2025 16:33:14 +0000 asID: 81 IP address blocks: 152.46.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ef:be:f9:88:a2:db:b4:8b:36:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:14 2025 GMT Not After : Jul 6 16:33:14 2025 GMT Subject: CN=4fe52579-f5c4-4b6d-b18e-2de9786256e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:5c:63:c5:47:a7:65:e2:6d:82:16:ed:5a: 08:68:d5:0c:ed:1a:d2:6a:f8:82:68:0b:e3:55:74: f0:b6:70:de:90:38:e7:29:80:df:dc:e2:12:77:9e: 95:d2:51:f3:af:9a:d8:47:3d:1f:75:ea:bf:02:5e: 51:7a:f5:4b:a5:16:68:cf:88:d4:78:1a:fd:c8:11: f7:db:92:7e:26:f0:19:7c:6a:7b:8e:b5:f3:9a:c9: 54:00:0f:17:4e:85:f6:f3:f2:e5:d5:ef:67:b4:cb: ac:1f:96:27:5e:3f:a2:ca:5a:92:cc:ca:39:c7:a1: 1b:bd:15:57:90:0e:12:1d:3c:13:ad:08:d6:22:88: d4:66:b2:06:ef:10:c3:f6:70:c2:3b:2a:ca:56:44: 49:e9:2a:13:ca:72:29:c2:8b:95:73:95:51:28:98: 86:a1:36:12:fc:2a:7a:eb:a3:da:ae:e8:f4:b5:c3: 6f:a0:98:1b:3d:b0:83:09:89:7d:82:0d:2a:10:40: 53:fd:57:c6:91:91:09:d3:7e:ea:cb:19:23:72:e1: 79:e0:e4:cc:7f:a6:ed:1d:c5:ce:c8:eb:8b:71:a1: cc:91:0c:69:ab:c6:46:c9:dd:d7:be:b2:15:ae:ef: 7d:27:d4:39:b8:f6:a2:31:1c:a7:6e:34:16:34:85: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:85:66:F7:1E:22:D3:23:FB:F6:34:79:0F:B4:B5:78:F8:8D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7c:1c:a7:61:6c:37:06:7e:d9:32:a8:a1:5a:60:bd:1a:fc: ef:de:f7:21:39:8e:d2:78:03:e1:c5:04:ca:b5:81:be:bc:67: 80:c4:24:17:67:9e:66:e0:02:23:2b:b1:9e:89:bf:1a:4a:8b: 65:e7:86:aa:49:1b:5f:87:a6:2a:fb:9e:47:2e:ed:98:09:1b: 08:fc:f7:b6:27:96:3a:e5:a0:e2:eb:24:2c:9e:ef:ea:a5:c0: ba:da:2b:ef:bd:5a:5a:70:da:71:ae:94:c8:c9:41:93:1e:6d: df:90:86:9e:33:59:ce:18:0d:50:7b:df:11:12:f0:ad:30:55: 29:cb:6c:bd:b2:d0:d5:bc:fa:4a:d9:ab:c7:5e:ab:36:ff:8a: 3b:2c:03:cd:2c:08:98:1f:d1:fd:58:69:a1:20:db:0b:85:5d: 89:b8:39:78:a0:27:4e:4c:95:90:87:21:f7:f7:25:ec:ea:46: f6:f5:13:ed:6e:70:47:9d:05:70:06:94:34:88:ec:e0:cd:88: d1:0e:09:18:2f:45:15:3b:ba:bf:22:b5:f1:8a:ee:50:3c:9c: 6c:7a:69:a0:c6:05:d2:6f:d1:0d:af:62:1c:1a:ee:d1:15:ac: 5d:1d:8b:74:32:be:c6:a0:82:55:e4:2d:ed:76:a0:54:95:7d: e4:bd:a5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u+++Yii27SLNqcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxNFoXDTI1MDcwNjE2MzMxNFowLzEtMCsGA1UEAxMk NGZlNTI1NzktZjVjNC00YjZkLWIxOGUtMmRlOTc4NjI1NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL1cY8VHp2XibYIW7VoIaNUM7RrSaviCaAvj VXTwtnDekDjnKYDf3OISd56V0lHzr5rYRz0fdeq/Al5RevVLpRZoz4jUeBr9yBH3 25J+JvAZfGp7jrXzmslUAA8XToX28/Ll1e9ntMusH5YnXj+iylqSzMo5x6EbvRVX kA4SHTwTrQjWIojUZrIG7xDD9nDCOyrKVkRJ6SoTynIpwouVc5VRKJiGoTYS/Cp6 66Paruj0tcNvoJgbPbCDCYl9gg0qEEBT/VfGkZEJ037qyxkjcuF54OTMf6btHcXO yOuLcaHMkQxpq8ZGyd3XvrIVru99J9Q5uPaiMRynbjQWNIUN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIZhWb3HiLTI/v2NHkPtLV4+I0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzVhOGUyMmQtZjdlYS0z NGFiLTlmMWEtNmM1M2UxODUyYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV8HKdhbDcGftkyqKFaYL0a/O/e9yE5jtJ4A+HFBMq1gb68Z4DEJBdn nmbgAiMrsZ6JvxpKi2XnhqpJG1+Hpir7nkcu7ZgJGwj897YnljrloOLrJCye7+ql wLraK++9Wlpw2nGulMjJQZMebd+Qhp4zWc4YDVB73xES8K0wVSnLbL2y0NW8+krZ q8deqzb/ijssA80sCJgf0f1YaaEg2wuFXYm4OXigJ05MlZCHIff3JezqRvb1E+1u cEedBXAGlDSI7ODNiNEOCRgvRRU7ur8itfGK7lA8nGx6aaDGBdJv0Q2vYhwa7tEV rF0di3QyvsagglXkLe12oFSVfeS9peA= -----END CERTIFICATE-----Generated at Mon Apr 28 02:07:24 2025 by rpki-client