$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa File: aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa (raw, json) Hash identifier: IkIq5CVfn7Ugi0nLNP9pB3lI5v50yo7W/rdzk+BOjhY= Subject key identifier: 96:D4:70:43:5F:C7:9B:C6:7C:6E:C0:E3:3F:BC:06:E0:BB:CA:CB:2E Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F43285849A5A120692FDEB55B86F81680 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa Signing time: Fri 25 Apr 2025 20:46:51 +0000 ROA not before: Fri 25 Apr 2025 20:46:51 +0000 ROA not after: Thu 24 Jul 2025 20:46:51 +0000 asID: 8070 IP address blocks: 152.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:a1:20:69:2f:de:b5:5b:86:f8:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Apr 25 20:46:51 2025 GMT Not After : Jul 24 20:46:51 2025 GMT Subject: CN=193a4295-12c9-4262-8012-1b13267b4939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:e3:b3:d2:94:47:e0:b1:ab:02:0c:62:47: 26:79:d0:35:d9:09:e4:de:9e:fb:fc:0f:a1:41:0f: 31:0c:a3:9e:a9:b9:12:e9:a5:d6:3a:e0:26:8c:fc: 2f:4d:e8:c2:d4:95:dd:5e:8c:3f:e1:29:07:29:49: b4:39:ea:c8:99:27:2c:a9:26:5e:c0:44:4a:9c:fa: bc:61:55:3f:a8:ae:57:7c:eb:de:92:46:4e:50:a6: 43:df:3d:5f:fb:1a:4e:1e:14:2b:3d:8d:06:8a:04: 8c:d5:a8:c0:12:04:f0:c2:c7:6a:d9:24:9c:fd:e3: fd:24:30:44:6d:e8:fa:9c:9b:d0:d1:09:f3:b9:d4: 3a:46:03:44:92:8c:24:dd:47:d5:5d:1c:f3:b5:fb: 58:18:fe:e3:df:c5:77:4b:11:15:91:04:9e:b1:49: 92:ba:b6:10:78:4c:31:98:93:b1:06:87:62:22:da: 54:a4:cd:a6:d6:7d:7f:dd:7b:e0:d1:ac:66:ea:35: 57:02:4a:10:ef:d9:b5:aa:4d:25:b3:8b:2e:09:9a: 22:bc:68:64:d6:34:31:1a:c8:7f:22:76:b3:95:22: 56:17:6c:02:6d:03:f2:1c:f2:9a:36:ed:6b:46:ed: 48:66:08:36:60:19:9b:41:1a:64:b2:d3:69:cf:a1: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:70:43:5F:C7:9B:C6:7C:6E:C0:E3:3F:BC:06:E0:BB:CA:CB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 152.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:52:45:d7:2d:1d:44:3a:7d:fd:7a:a9:e2:fb:0b:2a:c7:f9: f2:58:83:14:7c:38:ff:02:b6:43:fb:d4:9f:6f:25:a4:b7:8f: f7:8a:95:e4:44:d0:91:3a:b0:cc:70:05:22:f0:7c:7a:3e:71: 92:28:66:d0:06:7b:80:22:6c:41:47:e8:71:6b:92:39:5b:34: 21:91:1f:35:80:b6:27:f0:46:90:86:05:3c:0c:93:29:8a:88: 1e:13:97:5b:0f:50:92:6d:78:ac:73:4f:9a:c8:82:39:93:f6: 0f:19:47:fc:0f:cf:bd:d1:bd:5a:b6:d7:38:97:c6:34:8c:83: a9:57:12:94:b4:5a:ef:59:b6:10:ac:a8:e6:19:11:57:c9:d0: 07:cc:6d:44:20:19:2a:eb:9b:42:e9:cd:65:ce:02:9d:56:b0: 5e:38:a1:b3:77:97:7c:c5:06:e0:66:46:16:02:f5:08:b3:ba: 59:c5:ab:4a:d5:15:15:3b:ed:48:65:55:2a:6c:e3:86:e8:9d: 9b:4c:d8:fb:e7:8c:1c:60:4d:9e:49:3b:9a:a3:29:c9:3c:68: 92:e2:03:ca:b3:c0:3f:67:f4:d9:fc:3a:05:3c:ea:83:db:a4: c4:e3:69:79:f3:e1:f0:24:4d:e6:6b:9b:d9:4f:7b:1b:78:e2: 2e:12:16:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmloSBpL961W4b4FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI1MDQyNTIwNDY1MVoXDTI1MDcyNDIwNDY1MVowLzEtMCsGA1UEAxMk MTkzYTQyOTUtMTJjOS00MjYyLTgwMTItMWIxMzI2N2I0OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXjs9KUR+CxqwIMYkcmedA12Qnk3p77/A+h QQ8xDKOeqbkS6aXWOuAmjPwvTejC1JXdXow/4SkHKUm0OerImScsqSZewERKnPq8 YVU/qK5XfOvekkZOUKZD3z1f+xpOHhQrPY0GigSM1ajAEgTwwsdq2SSc/eP9JDBE bej6nJvQ0QnzudQ6RgNEkowk3UfVXRzztftYGP7j38V3SxEVkQSesUmSurYQeEwx mJOxBodiItpUpM2m1n1/3Xvg0axm6jVXAkoQ79m1qk0ls4suCZoivGhk1jQxGsh/ InazlSJWF2wCbQPyHPKaNu1rRu1IZgg2YBmbQRpkstNpz6Gh2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbUcENfx5vGfG7A4z+8BuC7yssuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYWE4ZGI0YWEtOTJkMS0z YzAxLWI3ZWYtODZjZGFhZmZmNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJSRdctHUQ6ff16qeL7CyrH+fJYgxR8OP8CtkP71J9vJaS3j/eKleRE 0JE6sMxwBSLwfHo+cZIoZtAGe4AibEFH6HFrkjlbNCGRHzWAtifwRpCGBTwMkymK iB4Tl1sPUJJteKxzT5rIgjmT9g8ZR/wPz73RvVq21ziXxjSMg6lXEpS0Wu9ZthCs qOYZEVfJ0AfMbUQgGSrrm0LpzWXOAp1WsF44obN3l3zFBuBmRhYC9QizulnFq0rV FRU77UhlVSps44bonZtM2PvnjBxgTZ5JO5qjKck8aJLiA8qzwD9n9Nn8OgU86oPb pMTjaXnz4fAkTeZrm9lPext44i4SFnw= -----END CERTIFICATE-----Generated at Sun Apr 27 23:08:42 2025 by rpki-client