$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa File: 533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa (raw, json) Hash identifier: nwshEbKvrzudD12J1yUFMZHuvqVQDDd7nRDFYW2OhPM= Subject key identifier: AB:24:9B:BC:F1:23:27:D5:BD:62:BE:8C:ED:A4:79:03:A1:F1:22:CD Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A2C201297299CD79309F05C40 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 62610 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:12:97:29:9c:d7:93:09:f0:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=a1a8a8d8-5a4d-4ac0-b9d5-7dd2c011afeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:f8:c8:76:af:ea:c2:9b:dd:2d:53:1c:7f: 56:86:4d:af:82:44:7c:42:a7:fb:8b:1f:2a:85:08: ed:14:16:09:dc:66:a6:de:60:87:10:0c:ff:6b:63: c9:ba:d9:43:78:fb:e8:25:d8:d5:9e:1b:5a:9f:47: e2:b4:03:23:4c:4f:86:3c:51:ae:84:e2:ac:d4:54: 83:66:b2:1f:3f:bd:d2:19:28:94:55:95:d1:c0:b5: 8d:8a:f5:4e:07:fb:48:4d:54:6c:ab:c8:a8:73:14: 66:f3:61:62:b9:37:cd:13:d1:42:79:9c:29:ee:8f: e2:6a:46:4f:e0:09:f0:10:19:93:50:18:3b:af:80: a9:19:1e:bd:40:0c:bf:4c:7a:8d:85:4e:01:2c:b1: cf:22:f1:cd:b5:8b:7d:8f:d3:b4:da:3f:af:97:c5: 28:6f:aa:bf:e3:c0:47:61:ca:8e:9e:da:e2:cd:09: 24:4e:79:89:84:a2:93:46:1a:3b:2d:22:92:56:3a: 78:93:3c:99:62:af:a7:b7:fa:86:17:86:13:90:8d: 58:67:56:bb:fa:cd:41:5b:06:00:a8:aa:a9:f0:3e: d8:a8:3a:b3:73:5f:fc:07:8b:27:a8:f9:83:06:3b: 65:01:39:6e:01:7e:0f:d5:15:ea:fe:b0:42:37:3e: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:24:9B:BC:F1:23:27:D5:BD:62:BE:8C:ED:A4:79:03:A1:F1:22:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:9d:05:ba:9a:10:79:dc:85:bc:3f:e2:f5:b2:87:3f:15:52: 18:bc:7c:55:8b:d0:ae:54:8a:e6:02:b1:3c:36:72:9f:c5:02: 1a:85:ec:77:b6:65:bd:78:b6:ce:72:ed:15:e3:ce:d1:8a:0a: c6:63:ea:d8:16:5d:8f:9a:94:5b:18:8a:3b:01:da:b3:2a:99: 50:f3:93:de:00:1a:94:cc:2a:07:ce:94:26:56:9d:6c:68:a5: 21:b7:8c:3b:12:6a:13:8c:2f:83:87:f6:d4:00:d2:fc:d7:fe: a9:59:11:5a:74:1c:60:f4:09:4e:0a:a4:7c:f1:1f:8a:0c:82: 9c:ef:6a:97:7f:df:25:59:8f:b9:01:9a:f7:89:f6:61:f9:83: 7b:0d:d9:49:89:f5:07:6a:01:02:04:26:e2:f4:9f:57:23:0a: b4:f0:60:67:9f:8e:63:88:37:ea:69:56:d2:d3:3a:6f:92:0e: b6:cb:8c:20:60:60:da:88:e6:fd:8c:e0:77:4d:9a:33:e2:ee: c8:6d:c6:e3:77:57:f5:9e:32:a7:0d:9e:35:75:db:18:b2:e3: 9a:7d:79:b9:66:36:f4:1f:a3:72:73:b9:d4:09:dc:1b:51:e6: 2a:91:07:38:2a:25:af:3d:7e:4d:dc:5d:23:c5:2e:b6:8d:26: 18:3f:d3:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBKXKZzXkwnwXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YTFhOGE4ZDgtNWE0ZC00YWMwLWI5ZDUtN2RkMmMwMTFhZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaj4yHav6sKb3S1THH9Whk2vgkR8Qqf7ix8q hQjtFBYJ3Gam3mCHEAz/a2PJutlDePvoJdjVnhtan0fitAMjTE+GPFGuhOKs1FSD ZrIfP73SGSiUVZXRwLWNivVOB/tITVRsq8iocxRm82FiuTfNE9FCeZwp7o/iakZP 4AnwEBmTUBg7r4CpGR69QAy/THqNhU4BLLHPIvHNtYt9j9O02j+vl8Uob6q/48BH YcqOntrizQkkTnmJhKKTRho7LSKSVjp4kzyZYq+nt/qGF4YTkI1YZ1a7+s1BWwYA qKqp8D7YqDqzc1/8B4snqPmDBjtlATluAX4P1RXq/rBCNz4CkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKskm7zxIyfVvWK+jO2keQOh8SLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzZDU4NTgtMGFmNy0z ZTdhLWIxYzEtZGIyMDRlNjZlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOdBbqaEHnchbw/4vWyhz8VUhi8fFWL0K5UiuYCsTw2cp/FAhqF7He2 Zb14ts5y7RXjztGKCsZj6tgWXY+alFsYijsB2rMqmVDzk94AGpTMKgfOlCZWnWxo pSG3jDsSahOML4OH9tQA0vzX/qlZEVp0HGD0CU4KpHzxH4oMgpzvapd/3yVZj7kB mveJ9mH5g3sN2UmJ9QdqAQIEJuL0n1cjCrTwYGefjmOIN+ppVtLTOm+SDrbLjCBg YNqI5v2M4HdNmjPi7shtxuN3V/WeMqcNnjV12xiy45p9eblmNvQfo3JzudQJ3BtR 5iqRBzgqJa89fk3cXSPFLraNJhg/048= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:11 2025 by rpki-client