$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90a306c3-54e3-3e36-854d-86574d7ef0c4.roa File: 90a306c3-54e3-3e36-854d-86574d7ef0c4.roa (raw, json) Hash identifier: aQGIcNNH60sBRMPpP4j6maXVvi3UYZt7TgPK3CDMs2c= Subject key identifier: 0F:A2:38:8D:64:C5:1E:63:04:51:4A:38:11:DF:6E:35:F6:46:94:9B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2E8D25299FA1B0AB88940 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90a306c3-54e3-3e36-854d-86574d7ef0c4.roa Signing time: Mon 07 Apr 2025 16:33:10 +0000 ROA not before: Mon 07 Apr 2025 16:33:10 +0000 ROA not after: Sun 06 Jul 2025 16:33:10 +0000 asID: 81 IP address blocks: 152.31.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:e8:d2:52:99:fa:1b:0a:b8:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:10 2025 GMT Not After : Jul 6 16:33:10 2025 GMT Subject: CN=22abcf92-5563-4083-9b89-e5592cb19c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:8f:f1:25:a8:e5:c7:42:2c:b3:6a:a5:43: 54:f5:1e:1a:20:72:41:98:9e:ba:cc:86:9a:d5:0f: c9:0b:89:7e:9d:1d:9f:70:29:01:83:18:c6:ab:8e: ac:1d:0c:35:d9:44:4a:48:51:4b:1b:a2:04:1e:cb: 10:33:6e:90:db:0e:26:df:26:3d:c3:73:cb:ad:ad: 36:79:96:7a:30:fc:3e:66:5a:72:1c:f0:b3:9b:7d: 40:d1:32:22:ee:25:33:c9:a1:f6:74:f3:af:6c:0a: d8:f1:18:c8:09:87:b7:e5:8f:09:52:81:27:14:97: fc:66:03:98:50:8b:91:53:89:d1:43:85:12:cc:0d: e6:f4:2a:a2:b5:73:dc:02:73:8b:ed:1a:ff:12:31: 94:eb:5b:39:ab:97:b5:ab:4f:98:13:66:99:13:e3: f3:ff:19:7c:80:54:ad:ba:79:d9:5e:28:84:8f:31: 31:3a:07:3c:0c:a1:e1:ba:31:35:77:7b:8f:07:c9: 9c:e4:9a:4d:e4:12:76:ec:f3:27:41:70:bc:de:12: 7b:56:c4:40:54:07:be:83:5d:02:e7:b0:66:f4:aa: 4c:70:f2:bb:e6:a7:47:98:c3:35:0c:40:4f:44:44: ee:55:05:50:8e:3e:e5:3f:26:e2:de:20:1d:1c:07: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A2:38:8D:64:C5:1E:63:04:51:4A:38:11:DF:6E:35:F6:46:94:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90a306c3-54e3-3e36-854d-86574d7ef0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.31.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fd:62:fd:e1:4c:95:b9:04:f7:c4:99:fd:85:a0:8f:32:5f: b8:43:c8:ef:d5:23:87:f9:03:7a:23:6c:0a:4b:54:f2:1f:9c: e9:c2:37:98:b2:9e:e1:9b:89:2f:f4:72:4a:fc:2e:6a:0b:6e: 8a:4a:31:ad:4c:c4:22:99:07:5e:ca:a7:da:60:ab:e2:8c:c1: d4:db:b2:15:a6:94:d2:7f:15:e4:32:5a:d2:71:21:75:f5:53: 03:1c:9b:5c:a9:1c:5c:f8:a2:18:bd:8c:60:65:14:a1:3f:90: 09:f7:ac:f0:10:b1:e3:79:5c:bd:26:66:15:5e:6f:25:f5:37: 1f:04:fa:55:f2:ec:60:01:7b:38:06:fd:47:c6:c1:02:a3:f1: d5:19:47:d2:62:bd:8b:d9:cd:ce:55:98:d7:b3:fb:fb:2d:b1: 00:b9:f7:82:97:2f:60:b3:64:8c:35:6f:72:e4:87:6f:f5:63: 0b:53:4a:7c:1d:c5:92:3b:b8:47:bd:fc:07:3d:2a:b7:73:98: 81:df:c4:26:11:7a:26:2d:12:0e:ce:ca:15:1e:28:fe:5b:66: 7c:11:51:68:e0:f9:e7:66:aa:35:8c:a4:bf:8b:68:0f:c3:10: 9d:d9:51:55:ef:f7:d6:8d:79:61:24:3e:28:a6:4c:88:ae:e7: 2b:8d:76:32 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEly4ujSUpn6Gwq4iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMFoXDTI1MDcwNjE2MzMxMFowLzEtMCsGA1UEAxMk MjJhYmNmOTItNTU2My00MDgzLTliODktZTU1OTJjYjE5YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0CP8SWo5cdCLLNqpUNU9R4aIHJBmJ66zIaa 1Q/JC4l+nR2fcCkBgxjGq46sHQw12URKSFFLG6IEHssQM26Q2w4m3yY9w3PLra02 eZZ6MPw+ZlpyHPCzm31A0TIi7iUzyaH2dPOvbArY8RjICYe35Y8JUoEnFJf8ZgOY UIuRU4nRQ4USzA3m9CqitXPcAnOL7Rr/EjGU61s5q5e1q0+YE2aZE+Pz/xl8gFSt unnZXiiEjzExOgc8DKHhujE1d3uPB8mc5JpN5BJ27PMnQXC83hJ7VsRAVAe+g10C 57Bm9KpMcPK75qdHmMM1DEBPRETuVQVQjj7lPybi3iAdHAfJvwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA+iOI1kxR5jBFFKOBHfbjX2RpSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTBhMzA2YzMtNTRlMy0z ZTM2LTg1NGQtODY1NzRkN2VmMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWP1i/eFMlbkE98SZ/YWgjzJfuEPI79Ujh/kDeiNsCktU8h+c6cI3mLKe 4ZuJL/RySvwuagtuikoxrUzEIpkHXsqn2mCr4ozB1NuyFaaU0n8V5DJa0nEhdfVT AxybXKkcXPiiGL2MYGUUoT+QCfes8BCx43lcvSZmFV5vJfU3HwT6VfLsYAF7OAb9 R8bBAqPx1RlH0mK9i9nNzlWY17P7+y2xALn3gpcvYLNkjDVvcuSHb/VjC1NKfB3F kju4R738Bz0qt3OYgd/EJhF6Ji0SDs7KFR4o/ltmfBFRaOD552aqNYykv4toD8MQ ndlRVe/31o15YSQ+KKZMiK7nK412Mg== -----END CERTIFICATE-----Generated at Tue Apr 29 13:25:42 2025 by rpki-client