$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9ddc132-b0fd-387d-8c20-24169b6c0e2f.roa File: b9ddc132-b0fd-387d-8c20-24169b6c0e2f.roa (raw, json) Hash identifier: 7TyR4nUgospFnhnk3g6yhZ6yesLC3pfZFK9MT1nUi8U= Subject key identifier: 34:CF:F7:AE:46:32:D3:9D:BA:27:A8:48:A7:DB:55:1F:E3:FB:E9:06 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EDE64F99AE9177C18980 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9ddc132-b0fd-387d-8c20-24169b6c0e2f.roa Signing time: Mon 07 Apr 2025 16:33:13 +0000 ROA not before: Mon 07 Apr 2025 16:33:13 +0000 ROA not after: Sun 06 Jul 2025 16:33:13 +0000 asID: 6559 IP address blocks: 152.28.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ed:e6:4f:99:ae:91:77:c1:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:13 2025 GMT Not After : Jul 6 16:33:13 2025 GMT Subject: CN=f08fee24-00f1-4e4d-b66c-7c4991462f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:15:56:cb:8a:70:ca:62:fa:f2:90:83:06: 45:4d:6f:3f:05:c0:63:35:ac:71:30:e1:34:5b:b1: 2e:95:59:75:44:e4:5e:e6:56:b6:b1:2e:61:43:53: 04:47:ff:2c:6f:95:c7:24:72:b9:89:71:c7:f7:06: f6:2b:69:87:00:08:19:5b:c3:a1:f0:72:fa:bc:75: 54:1d:77:29:7b:d1:1a:01:e2:89:01:e5:d7:9d:c4: 63:5b:16:87:c2:fb:43:e1:08:c2:37:ae:24:41:0b: ae:94:d2:55:a8:f1:8e:a3:83:80:a6:7f:5f:1a:ba: f2:24:a2:fa:44:9a:be:11:b1:3f:d1:54:77:97:5e: fb:4d:61:eb:75:5b:4d:6f:7a:ff:3f:c1:1c:51:f1: 1b:4b:9a:ad:2b:ff:49:b5:ce:d3:b6:62:07:c1:cc: 3f:1a:d9:3c:c3:28:42:90:e3:0e:80:9f:c6:30:68: 67:46:52:16:b5:7f:df:8e:ae:c3:a0:a5:97:c2:b5: e2:fa:f0:8a:04:e5:6f:4f:b5:ce:b4:0b:d7:01:6b: 74:01:3f:39:59:30:7b:6c:37:81:9d:7c:4e:25:6d: 05:5e:53:e7:da:3e:ff:1e:ee:32:5c:50:d5:0d:10: d6:7e:94:2e:21:36:a4:aa:46:37:ff:68:a0:d0:89: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:F7:AE:46:32:D3:9D:BA:27:A8:48:A7:DB:55:1F:E3:FB:E9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9ddc132-b0fd-387d-8c20-24169b6c0e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:de:db:5b:05:db:61:c5:44:51:0c:64:c7:73:ea:d2:86:94: 60:ec:83:ec:01:6f:f6:35:0d:b5:64:f6:9a:3e:58:99:3c:ad: bc:29:3b:55:95:91:a6:4d:1d:a6:a7:69:37:24:2a:c8:19:76: 56:8a:9e:a2:34:54:ad:d8:5c:0b:04:e3:01:3a:ee:06:74:3d: c8:49:5c:d5:01:42:18:18:6b:d5:da:0f:d9:3e:85:d8:bd:59: 26:81:c9:fa:11:b5:48:10:f1:3c:7b:62:81:53:b1:98:35:c1: 9f:54:f0:82:84:e4:31:a8:66:96:57:cc:e4:b8:59:10:29:f2: eb:bc:dd:ec:8f:e5:65:3b:4c:f8:a5:aa:83:58:55:ee:59:2a: c4:42:3a:d4:34:b4:41:a9:82:68:d7:e7:2d:ce:b2:0f:46:89: 73:41:9b:54:14:2e:52:91:ad:f1:b8:2c:00:64:cc:cf:60:ba: 2f:79:9d:bf:19:d3:39:52:45:7f:3c:ee:41:2c:aa:00:23:cf: d5:c1:7b:dc:c4:d9:1d:3d:43:96:ad:fc:f1:6e:4f:0d:da:0a: 6a:24:e3:a0:79:25:93:38:4d:59:e4:da:6e:52:bc:68:68:c3: e7:df:30:9a:a3:5d:2f:75:11:98:a4:2f:09:92:3a:bb:37:9a: 02:dd:19:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u3mT5mukXfBiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxM1oXDTI1MDcwNjE2MzMxM1owLzEtMCsGA1UEAxMk ZjA4ZmVlMjQtMDBmMS00ZTRkLWI2NmMtN2M0OTkxNDYyZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSUVVsuKcMpi+vKQgwZFTW8/BcBjNaxxMOE0 W7EulVl1RORe5la2sS5hQ1MER/8sb5XHJHK5iXHH9wb2K2mHAAgZW8Oh8HL6vHVU HXcpe9EaAeKJAeXXncRjWxaHwvtD4QjCN64kQQuulNJVqPGOo4OApn9fGrryJKL6 RJq+EbE/0VR3l177TWHrdVtNb3r/P8EcUfEbS5qtK/9Jtc7TtmIHwcw/Gtk8wyhC kOMOgJ/GMGhnRlIWtX/fjq7DoKWXwrXi+vCKBOVvT7XOtAvXAWt0AT85WTB7bDeB nXxOJW0FXlPn2j7/Hu4yXFDVDRDWfpQuITakqkY3/2ig0ImtcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTP965GMtOduieoSKfbVR/j++kGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjlkZGMxMzItYjBmZC0z ODdkLThjMjAtMjQxNjliNmMwZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/e21sF22HFRFEMZMdz6tKGlGDsg+wBb/Y1DbVk9po+WJk8rbwpO1WV kaZNHaanaTckKsgZdlaKnqI0VK3YXAsE4wE67gZ0PchJXNUBQhgYa9XaD9k+hdi9 WSaByfoRtUgQ8Tx7YoFTsZg1wZ9U8IKE5DGoZpZXzOS4WRAp8uu83eyP5WU7TPil qoNYVe5ZKsRCOtQ0tEGpgmjX5y3Osg9GiXNBm1QULlKRrfG4LABkzM9gui95nb8Z 0zlSRX887kEsqgAjz9XBe9zE2R09Q5at/PFuTw3aCmok46B5JZM4TVnk2m5SvGho w+ffMJqjXS91EZikLwmSOrs3mgLdGek= -----END CERTIFICATE-----Generated at Mon Apr 28 18:42:25 2025 by rpki-client