$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaf516d2-f1ca-3b6d-b26e-58be781f0752.roa File: eaf516d2-f1ca-3b6d-b26e-58be781f0752.roa (raw, json) Hash identifier: 5nieC2bghlSNj52mpY5TBBoZTC5LncWgp5cvMV+cbvk= Subject key identifier: EA:7A:37:55:8B:7A:5B:0D:82:96:E5:39:66:C4:68:3B:E5:A4:B4:5A Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2E8F1CA0F90EA4541CA80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaf516d2-f1ca-3b6d-b26e-58be781f0752.roa Signing time: Mon 07 Apr 2025 16:33:10 +0000 ROA not before: Mon 07 Apr 2025 16:33:10 +0000 ROA not after: Sun 06 Jul 2025 16:33:10 +0000 asID: 81 IP address blocks: 152.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:e8:f1:ca:0f:90:ea:45:41:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:10 2025 GMT Not After : Jul 6 16:33:10 2025 GMT Subject: CN=f0ecd4d8-2cb4-40d4-a3ab-4fa69e04d3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a7:29:60:a6:f2:de:c6:47:2d:06:23:8f:d0: b1:9b:a1:43:89:0f:63:38:98:29:45:b7:a8:c0:a5: 6d:81:42:ee:14:ed:21:9e:65:b8:b1:df:9e:ab:52: 4e:dc:57:9c:9f:07:4b:98:e1:5a:aa:00:e2:c2:de: 9d:18:56:8b:18:b8:c3:ce:6d:a5:84:ef:28:ad:89: 63:db:63:6e:dc:79:84:6f:3f:2a:38:f5:b5:3c:6c: 8f:51:e9:7c:d6:b4:64:ef:8a:15:57:61:96:be:a1: 36:84:cf:ef:19:59:1b:57:ea:a7:14:c6:48:33:79: 6a:47:9f:7f:0c:94:8e:3c:42:79:49:d9:61:50:13: 3f:40:bf:b3:9e:5e:0c:77:3e:ba:ec:70:8a:4d:c0: da:9f:58:a9:5c:2b:0a:72:54:98:8c:9c:0f:8b:63: 93:5f:91:aa:18:85:7d:8c:c5:bb:04:8b:3b:10:73: 3e:19:58:0f:01:c8:e0:d7:fa:b1:91:7a:f9:d5:3e: fd:be:c5:07:76:46:ab:ce:54:8b:b0:57:e4:7d:69: 50:95:c4:16:0a:28:ee:08:d2:ca:23:8e:55:cd:00: 2e:5f:cf:31:66:0f:c3:ea:53:ad:e2:33:7a:53:7a: e2:d7:22:fb:84:87:4d:32:3c:e4:4e:5f:fe:81:36: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7A:37:55:8B:7A:5B:0D:82:96:E5:39:66:C4:68:3B:E5:A4:B4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaf516d2-f1ca-3b6d-b26e-58be781f0752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.40.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c1:db:eb:6d:aa:91:8d:7f:93:8d:9f:d2:65:6f:d1:7e:ed: b1:84:20:6a:76:26:b5:67:43:c2:e0:ae:1f:ed:6f:88:e3:51: 75:5c:bb:48:dc:77:5f:28:f7:76:f1:31:72:26:91:70:8b:99: 5d:d9:42:72:36:df:65:87:ad:d7:56:bc:fb:61:b9:16:97:36: d8:b5:76:7a:07:05:fb:d7:d2:98:fa:e6:f3:90:12:95:14:74: ab:3c:30:5e:6e:db:ca:53:a1:39:a8:b8:f4:f6:23:23:89:51: 48:6a:33:52:12:a7:ee:47:72:41:c8:4c:e1:8d:ec:ab:0d:e6: fc:bb:86:e5:2a:ba:74:0a:99:d8:ec:68:ea:e3:e9:23:4d:3f: ac:d8:05:66:a0:9b:bb:0f:10:f7:e8:b0:f9:94:b9:9d:f9:94: d2:8f:d2:1d:3e:31:49:a7:e7:41:f8:e5:d7:2d:7b:01:66:31: 22:15:19:12:1a:9b:d0:b8:6d:4b:10:f3:25:62:a1:ca:73:38: 81:96:f4:45:c2:1b:4d:bb:6f:64:ea:f7:ec:70:c8:dd:57:85: 77:e2:1f:06:8b:c8:4d:ab:fa:00:69:59:f5:a1:ce:12:38:d1: 0f:77:62:a4:0e:01:a7:3f:bb:d7:50:bb:e3:c5:87:92:e1:7d: 9a:57:14:45 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEly4ujxyg+Q6kVByoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMFoXDTI1MDcwNjE2MzMxMFowLzEtMCsGA1UEAxMk ZjBlY2Q0ZDgtMmNiNC00MGQ0LWEzYWItNGZhNjllMDRkM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qcpYKby3sZHLQYjj9Cxm6FDiQ9jOJgpRbeo wKVtgULuFO0hnmW4sd+eq1JO3FecnwdLmOFaqgDiwt6dGFaLGLjDzm2lhO8orYlj 22Nu3HmEbz8qOPW1PGyPUel81rRk74oVV2GWvqE2hM/vGVkbV+qnFMZIM3lqR59/ DJSOPEJ5SdlhUBM/QL+znl4Mdz667HCKTcDan1ipXCsKclSYjJwPi2OTX5GqGIV9 jMW7BIs7EHM+GVgPAcjg1/qxkXr51T79vsUHdkarzlSLsFfkfWlQlcQWCijuCNLK I45VzQAuX88xZg/D6lOt4jN6U3ri1yL7hIdNMjzkTl/+gTadXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOp6N1WLelsNgpblOWbEaDvlpLRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWFmNTE2ZDItZjFjYS0z YjZkLWIyNmUtNThiZTc4MWYwNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmCgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANcHb622qkY1/k42f0mVv0X7tsYQganYmtWdDwuCuH+1viONRdVy7SNx3 Xyj3dvExciaRcIuZXdlCcjbfZYet11a8+2G5Fpc22LV2egcF+9fSmPrm85ASlRR0 qzwwXm7bylOhOai49PYjI4lRSGozUhKn7kdyQchM4Y3sqw3m/LuG5Sq6dAqZ2Oxo 6uPpI00/rNgFZqCbuw8Q9+iw+ZS5nfmU0o/SHT4xSafnQfjl1y17AWYxIhUZEhqb 0LhtSxDzJWKhynM4gZb0RcIbTbtvZOr37HDI3VeFd+IfBovITav6AGlZ9aHOEjjR D3dipA4Bpz+711C748WHkuF9mlcURQ== -----END CERTIFICATE-----Generated at Tue Apr 29 18:46:20 2025 by rpki-client