$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f54a0ea8-2d3d-342d-9c30-bcab3e5b8e21.roa File: f54a0ea8-2d3d-342d-9c30-bcab3e5b8e21.roa (raw, json) Hash identifier: Y4DXBWlMtBla/oqto80CHu60VMvWTdnbdMoa+oPYpBg= Subject key identifier: 7A:B2:47:ED:5D:CB:E4:4A:A2:DC:93:ED:09:37:6E:66:76:7F:EE:FF Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EF424FAD1981C7A6F240 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f54a0ea8-2d3d-342d-9c30-bcab3e5b8e21.roa Signing time: Mon 07 Apr 2025 16:33:13 +0000 ROA not before: Mon 07 Apr 2025 16:33:13 +0000 ROA not after: Sun 06 Jul 2025 16:33:13 +0000 asID: 81 IP address blocks: 152.46.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ef:42:4f:ad:19:81:c7:a6:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:13 2025 GMT Not After : Jul 6 16:33:13 2025 GMT Subject: CN=c9b1fb64-6799-4618-a849-68ebf5921039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:e7:2b:21:d0:ba:bb:74:c8:01:6f:42:8a: a5:aa:ed:52:fd:ca:cd:27:86:cc:8c:d9:56:9f:d5: 86:03:49:9c:c6:a3:fa:3c:be:e4:13:ac:67:9f:1c: be:52:8d:ad:76:6e:64:01:01:45:9c:7b:e2:87:3e: ae:b4:13:56:a9:1a:f8:bf:3f:6a:37:40:c0:da:27: 86:97:fd:0e:03:50:f4:f6:af:67:79:cd:8b:7c:52: 0d:4d:41:43:28:bc:78:1d:ee:ea:3e:66:87:fc:81: 7a:82:0e:ca:18:d2:46:3d:bc:52:77:51:94:4e:61: a9:82:6f:b7:0c:5f:2b:39:32:af:c1:d8:97:44:52: 7d:4b:8b:f6:fc:0f:ed:a8:99:e1:b3:24:87:50:67: 0f:a5:cc:dc:01:12:78:2e:89:1d:61:66:c6:fe:49: f6:22:0c:c3:3f:22:50:00:e7:b3:45:d6:75:4b:c2: e2:8b:a9:f3:54:e0:d1:61:6d:fd:95:fa:11:01:b4: aa:9f:41:dc:9f:97:8c:51:e6:8d:9a:7f:53:1e:6e: 51:1a:34:d8:23:c9:29:05:11:5c:06:e2:2d:e5:41: 6e:cf:ba:9a:ae:56:33:29:10:32:8c:96:e1:9d:36: 67:68:82:a2:36:30:79:53:a8:1f:ea:0d:26:f1:23: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:47:ED:5D:CB:E4:4A:A2:DC:93:ED:09:37:6E:66:76:7F:EE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f54a0ea8-2d3d-342d-9c30-bcab3e5b8e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:57:6c:7e:5c:b1:f4:24:82:50:24:51:c8:8f:42:f9:25: d3:e0:ff:50:1d:e2:61:19:e4:a5:aa:78:67:9d:1d:b5:76:2f: 57:15:a5:4c:82:59:54:3f:fd:a8:cf:27:c7:8f:73:c9:36:e5: 19:c1:02:01:1d:a2:23:3f:71:bb:7b:eb:aa:1c:51:6c:0d:66: f8:12:61:69:f1:34:a7:6c:be:7f:30:e6:42:22:6e:23:57:99: 3b:d8:5d:4a:ae:d5:c5:dc:da:18:af:00:25:36:a0:c4:56:dc: 3b:93:6f:66:0d:3b:56:25:c3:b1:a3:72:f1:4a:65:77:29:e3: 08:1d:82:a1:1c:00:99:bc:0e:cd:89:b3:df:e8:6a:9c:05:76: 4f:bb:13:93:01:67:56:50:73:7f:75:95:b6:1c:d6:e1:e6:5a: e6:c4:31:3c:72:08:fe:c1:ad:ed:db:3a:fe:24:cf:f1:18:8b: 8f:e3:a9:0b:90:58:fe:85:34:e0:c7:51:9f:5c:c6:88:85:6a: 9d:1c:32:3f:79:d5:d6:0a:59:92:8a:dc:f3:20:14:69:95:96: c8:47:86:6e:1f:d8:2f:a7:4e:e5:27:e1:2f:37:b5:bd:32:56: 36:ac:66:a7:aa:2c:0e:4e:8b:09:e9:c0:a6:4e:05:ed:67:99: f0:46:c7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4u9CT60Zgcem8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxM1oXDTI1MDcwNjE2MzMxM1owLzEtMCsGA1UEAxMk YzliMWZiNjQtNjc5OS00NjE4LWE4NDktNjhlYmY1OTIxMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5LnKyHQurt0yAFvQoqlqu1S/crNJ4bMjNlW n9WGA0mcxqP6PL7kE6xnnxy+Uo2tdm5kAQFFnHvihz6utBNWqRr4vz9qN0DA2ieG l/0OA1D09q9nec2LfFINTUFDKLx4He7qPmaH/IF6gg7KGNJGPbxSd1GUTmGpgm+3 DF8rOTKvwdiXRFJ9S4v2/A/tqJnhsySHUGcPpczcARJ4LokdYWbG/kn2IgzDPyJQ AOezRdZ1S8Lii6nzVODRYW39lfoRAbSqn0Hcn5eMUeaNmn9THm5RGjTYI8kpBRFc BuIt5UFuz7qarlYzKRAyjJbhnTZnaIKiNjB5U6gf6g0m8SNOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqyR+1dy+RKotyT7Qk3bmZ2f+7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjU0YTBlYTgtMmQzZC0z NDJkLTljMzAtYmNhYjNlNWI4ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKV2x+XLH0JIJQJFHIj0L5JdPg/1Ad4mEZ5KWqeGedHbV2L1cVpUyC WVQ//ajPJ8ePc8k25RnBAgEdoiM/cbt766ocUWwNZvgSYWnxNKdsvn8w5kIibiNX mTvYXUqu1cXc2hivACU2oMRW3DuTb2YNO1Ylw7GjcvFKZXcp4wgdgqEcAJm8Ds2J s9/oapwFdk+7E5MBZ1ZQc391lbYc1uHmWubEMTxyCP7Bre3bOv4kz/EYi4/jqQuQ WP6FNODHUZ9cxoiFap0cMj951dYKWZKK3PMgFGmVlshHhm4f2C+nTuUn4S83tb0y VjasZqeqLA5OiwnpwKZOBe1nmfBGx0g= -----END CERTIFICATE-----Generated at Mon Apr 28 02:04:39 2025 by rpki-client