$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa File: 5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa (raw, json) Hash identifier: hgDS67G4/ilJ/N79VsisujLcBnnnWmQ/dOUrK/fToDQ= Subject key identifier: 77:D6:3B:CC:2A:14:8A:5C:A1:D4:7D:F8:66:17:77:7A:78:C0:46:12 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2E88079E43876D336A5C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa Signing time: Mon 07 Apr 2025 16:33:10 +0000 ROA not before: Mon 07 Apr 2025 16:33:10 +0000 ROA not after: Sun 06 Jul 2025 16:33:10 +0000 asID: 81 IP address blocks: 152.22.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:e8:80:79:e4:38:76:d3:36:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:10 2025 GMT Not After : Jul 6 16:33:10 2025 GMT Subject: CN=10630205-6a91-478e-bd89-3f5470f7c1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:af:3b:9f:da:f1:d3:dd:3f:cf:c8:7d:ce: 70:83:ff:76:82:f9:49:af:f3:d6:fb:67:06:3b:8b: 38:14:e9:b1:b6:92:87:00:8d:16:8e:79:2d:2a:a4: 27:f3:c9:ce:3c:82:75:bf:a7:bc:ab:8d:6c:5d:9c: c6:e0:92:69:20:22:1e:37:83:05:bc:a6:b8:37:b6: de:f4:41:b5:31:ff:c8:fc:ae:1a:b6:b7:33:9d:ad: 30:cd:6a:b1:1e:56:60:d9:2a:d1:6f:41:50:9a:ba: a6:84:c8:5a:4d:08:52:9e:bb:f4:18:5c:cc:1b:4f: aa:f6:9d:e7:5f:41:3b:86:ec:40:53:df:6c:81:d8: 67:92:a6:e0:99:ee:95:a3:07:ae:38:b7:59:9b:0c: ac:3f:92:9c:e5:94:f4:fc:01:cb:f1:b0:a7:02:bb: 45:33:78:c9:cd:6a:c0:5d:36:89:2c:a0:89:bb:d6: 1b:f7:7c:9e:7e:f9:11:25:f3:c3:96:db:1c:b6:12: 43:6c:05:7e:d3:23:38:a3:68:56:8d:ea:3c:cb:f1: 76:cc:d0:96:ea:8b:3b:4e:9d:21:67:e7:68:b5:fc: 71:83:24:3f:ff:e0:30:64:2e:04:ef:02:aa:83:f9: 18:07:da:1d:50:d3:f7:44:ec:fd:1d:97:25:df:f6: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D6:3B:CC:2A:14:8A:5C:A1:D4:7D:F8:66:17:77:7A:78:C0:46:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:db:f9:f7:2c:22:89:f7:3a:98:c2:a0:d0:4f:98:15:9c: 33:17:48:11:77:a0:d9:cc:d2:3d:a5:ee:38:74:08:6c:5e:6e: 27:b9:b5:99:91:c3:4b:0e:54:80:f0:10:ad:0f:6e:39:d5:87: 42:82:d4:b7:40:e5:b2:b0:32:aa:0f:4f:18:3d:fe:ab:08:e9: 7c:6f:c7:cb:4a:30:ce:89:90:38:77:1e:eb:42:20:a8:e0:10: 41:49:e7:84:6a:31:a2:74:47:ec:a7:28:58:12:ac:bc:31:2c: 3d:c5:57:f5:40:c0:d5:a7:eb:f5:c1:1d:a5:71:9f:c3:55:0d: 95:a2:64:b6:4b:dc:e8:d9:80:af:8e:1b:c2:fd:62:35:67:fc: 59:1c:44:cd:cf:aa:a6:5a:66:aa:0f:ea:87:a3:04:d6:4c:94: 7c:75:10:0e:11:dd:30:3d:b2:77:68:ab:90:21:ea:e0:cc:5f: 2b:c9:47:2d:45:1a:1f:81:12:05:46:39:6e:7f:a8:24:4a:46: 12:76:d8:d6:45:6e:5c:21:ac:87:4a:5d:f2:34:48:c1:77:f7: b0:9d:6d:f3:5d:a6:b9:35:8a:64:e9:5b:69:6b:ac:37:2c:7e: 80:4c:bc:3d:ab:79:17:c4:36:e7:9a:70:8b:28:1d:71:05:58: 09:f3:35:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEly4uiAeeQ4dtM2pcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMFoXDTI1MDcwNjE2MzMxMFowLzEtMCsGA1UEAxMk MTA2MzAyMDUtNmE5MS00NzhlLWJkODktM2Y1NDcwZjdjMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6evO5/a8dPdP8/Ifc5wg/92gvlJr/PW+2cG O4s4FOmxtpKHAI0WjnktKqQn88nOPIJ1v6e8q41sXZzG4JJpICIeN4MFvKa4N7be 9EG1Mf/I/K4atrczna0wzWqxHlZg2SrRb0FQmrqmhMhaTQhSnrv0GFzMG0+q9p3n X0E7huxAU99sgdhnkqbgme6VoweuOLdZmwysP5Kc5ZT0/AHL8bCnArtFM3jJzWrA XTaJLKCJu9Yb93yefvkRJfPDltscthJDbAV+0yM4o2hWjeo8y/F2zNCW6os7Tp0h Z+dotfxxgyQ//+AwZC4E7wKqg/kYB9odUNP3ROz9HZcl3/YS7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHfWO8wqFIpcodR9+GYXd3p4wEYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWFjZmIxNDQtYzg4ZS0z OGUzLWI0ZTQtZGE2YjlkYWYyZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfBPb+fcsIon3OpjCoNBPmBWcMxdIEXeg2czSPaXuOHQIbF5uJ7m1mZHD Sw5UgPAQrQ9uOdWHQoLUt0DlsrAyqg9PGD3+qwjpfG/Hy0owzomQOHce60IgqOAQ QUnnhGoxonRH7KcoWBKsvDEsPcVX9UDA1afr9cEdpXGfw1UNlaJktkvc6NmAr44b wv1iNWf8WRxEzc+qplpmqg/qh6ME1kyUfHUQDhHdMD2yd2irkCHq4MxfK8lHLUUa H4ESBUY5bn+oJEpGEnbY1kVuXCGsh0pd8jRIwXf3sJ1t812muTWKZOlbaWusNyx+ gEy8Pat5F8Q255pwiygdcQVYCfM1cg== -----END CERTIFICATE-----Generated at Mon Apr 28 06:50:15 2025 by rpki-client