$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa File: b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa (raw, json) Hash identifier: 9Rv2j83QT17IQKfheMEQbqK6PMbAhNCIvCiSPZc9sHY= Subject key identifier: FC:85:8D:D4:56:B5:92:6C:7C:6A:A9:30:9C:27:21:D9:3A:03:F3:5F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EA578D47ACC631B1EFC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa Signing time: Mon 07 Apr 2025 16:33:11 +0000 ROA not before: Mon 07 Apr 2025 16:33:11 +0000 ROA not after: Sun 06 Jul 2025 16:33:11 +0000 asID: 81 IP address blocks: 128.109.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ea:57:8d:47:ac:c6:31:b1:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:11 2025 GMT Not After : Jul 6 16:33:11 2025 GMT Subject: CN=15d04d90-e1ae-48bf-82d7-104493726ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:35:be:ca:f9:10:00:5b:34:4c:68:3e:e9: 9b:18:bb:21:fe:3e:4e:a6:3d:a4:6b:5d:cf:89:74: c6:97:66:5a:e8:4e:5c:4c:05:58:93:aa:6c:26:48: 3c:98:ed:78:1e:28:eb:9f:36:d9:fc:fa:f4:ea:8c: b2:4e:b7:7b:80:71:27:50:e6:3a:37:24:86:0f:48: b5:86:76:09:9e:ff:ea:a8:95:ea:14:5e:a0:2b:5f: 64:92:10:cc:42:b3:4b:d5:d1:f4:40:ab:e3:e1:77: 0f:f2:4e:17:a7:e5:c7:a4:15:03:0d:38:1f:a2:3c: 74:7c:13:6d:f4:b4:b0:8b:0c:10:01:40:a8:ca:63: 1a:dc:ce:9b:97:ac:53:b5:3c:c0:40:9a:ed:63:72: 19:79:b2:a4:62:2e:6b:6f:d7:1d:4f:d3:60:23:3a: ac:10:9d:28:51:9b:95:91:d1:79:50:ca:1c:36:26: 1a:56:72:d8:d9:2a:2b:dc:fa:b7:de:05:84:37:c9: 20:01:67:99:8b:39:25:95:84:c1:e3:2d:c4:4a:e9: 3f:bb:7e:63:b7:0e:26:82:cf:cb:24:3f:d3:b0:19: a5:f1:01:1d:21:ac:fd:a0:50:ae:20:5d:59:4e:3f: 66:49:40:cd:79:a1:db:7b:7e:ef:26:a0:0c:92:ae: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:85:8D:D4:56:B5:92:6C:7C:6A:A9:30:9C:27:21:D9:3A:03:F3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:93:6d:93:92:d2:82:c9:f6:48:10:63:5a:33:d9:bd:ae:99: 69:12:4e:d8:8c:1c:86:df:77:b5:f2:7b:69:e3:d8:b7:c6:d8: ee:f0:8f:d5:f9:3a:44:45:89:b7:f2:ab:70:4c:a3:38:93:87: 43:0a:f7:d5:d6:e2:85:23:ab:6d:cd:f1:65:4f:69:6c:59:dd: bc:6d:bf:86:ac:a9:04:67:77:04:9c:59:a9:14:e3:43:c5:ca: 16:b7:07:5c:80:d2:5d:07:0a:0a:49:70:d1:61:40:bd:ce:4f: 36:2a:6b:60:19:c4:40:ab:6a:e0:13:78:fa:dc:35:d2:95:48: e4:50:c5:8b:4c:ff:80:af:04:5c:8d:fc:e9:41:e4:da:be:47: ea:f2:a9:89:2d:74:df:92:7e:fd:a8:92:17:38:f5:c9:61:df: 7b:3b:cd:4f:0c:3c:0a:f4:e5:41:28:1c:b9:51:b0:f5:36:cf: db:30:da:8d:15:32:bd:12:cc:29:f4:ce:a7:7d:94:fa:e2:1d: 93:01:0b:7b:2c:10:ac:9b:43:4e:b1:bf:a5:56:a2:7b:9a:5d: b5:d1:f0:82:f9:bc:22:cd:8a:fb:1a:6a:e5:f5:e4:cb:b1:98: cc:3d:f9:bb:73:75:9d:78:06:61:3b:84:5f:86:b7:58:2e:71: 87:69:9c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4upXjUesxjGx78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMVoXDTI1MDcwNjE2MzMxMVowLzEtMCsGA1UEAxMk MTVkMDRkOTAtZTFhZS00OGJmLTgyZDctMTA0NDkzNzI2ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjE1vsr5EABbNExoPumbGLsh/j5Opj2ka13P iXTGl2Za6E5cTAVYk6psJkg8mO14HijrnzbZ/Pr06oyyTrd7gHEnUOY6NySGD0i1 hnYJnv/qqJXqFF6gK19kkhDMQrNL1dH0QKvj4XcP8k4Xp+XHpBUDDTgfojx0fBNt 9LSwiwwQAUCoymMa3M6bl6xTtTzAQJrtY3IZebKkYi5rb9cdT9NgIzqsEJ0oUZuV kdF5UMocNiYaVnLY2Sor3Pq33gWEN8kgAWeZizkllYTB4y3ESuk/u35jtw4mgs/L JD/TsBml8QEdIaz9oFCuIF1ZTj9mSUDNeaHbe37vJqAMkq4EJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyFjdRWtZJsfGqpMJwnIdk6A/NfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjQ1M2U3MDQtMTRhNC0z ZTJkLThlZjQtNmYzZjcwOTI5YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmTbZOS0oLJ9kgQY1oz2b2umWkSTtiMHIbfd7Xye2nj2LfG2O7wj9X5 OkRFibfyq3BMoziTh0MK99XW4oUjq23N8WVPaWxZ3bxtv4asqQRndwScWakU40PF yha3B1yA0l0HCgpJcNFhQL3OTzYqa2AZxECrauATePrcNdKVSORQxYtM/4CvBFyN /OlB5Nq+R+ryqYktdN+Sfv2okhc49clh33s7zU8MPAr05UEoHLlRsPU2z9sw2o0V Mr0SzCn0zqd9lPriHZMBC3ssEKybQ06xv6VWonuaXbXR8IL5vCLNivsaauX15Mux mMw9+btzdZ14BmE7hF+Gt1gucYdpnPs= -----END CERTIFICATE-----Generated at Mon Apr 28 06:52:15 2025 by rpki-client