$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa File: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (raw, json) Hash identifier: iGEj9v0nTIHNIwbkQ70aG+PoWHIpkqxKj4m+mNvh8UY= Subject key identifier: CF:AF:49:6B:10:95:E9:9A:F4:C2:E0:84:5D:8F:08:D8:94:A6:11:DC Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F43285849B414973C513049BE72D6A880 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 81 IP address blocks: 152.30.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:97:3c:51:30:49:be:72:d6:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=647f91ba-9c80-459d-b9f0-bf65045b412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:13:ab:d8:76:f3:f9:bf:13:8b:ae:f5:81: 89:9c:34:12:9f:85:19:ca:a4:c8:31:df:7a:5e:ab: 90:39:d9:e1:a8:4a:b7:a6:c0:16:30:57:31:dd:97: 82:48:b7:04:4e:a3:f5:60:d5:fe:6d:35:90:6e:41: 9b:69:59:71:1b:4d:6d:aa:5f:34:5e:b0:55:3b:81: 56:17:45:8d:f7:03:21:a7:78:30:13:30:7a:4b:de: 04:cd:5f:ad:f9:50:e0:1d:86:9b:a3:ac:a6:e0:15: 7f:b1:a1:8c:7d:df:f3:88:6c:6a:73:e8:97:7d:2e: 6f:6e:f6:72:9b:7c:6b:a8:b9:b9:34:02:a5:80:29: 11:f2:f7:42:b9:10:42:3b:5b:f1:1d:ee:5d:14:6e: 52:98:0b:09:99:13:3d:f4:af:5c:1e:8f:7b:3b:b1: a1:18:2e:1b:f8:c3:74:4d:75:ba:b4:f6:c7:b9:5c: 3c:23:6f:01:5a:cd:99:6c:e8:fe:61:e4:85:df:80: 98:d7:48:45:77:c7:a1:5d:19:67:b9:4a:1d:78:11: a1:7b:32:d9:f1:63:c0:d4:33:f8:9f:2f:3d:ae:ef: a7:44:34:a2:d8:07:0f:c6:5e:ac:0f:b6:11:75:3c: ed:b7:f9:23:42:97:9c:03:c0:49:07:9f:cb:86:e2: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:49:6B:10:95:E9:9A:F4:C2:E0:84:5D:8F:08:D8:94:A6:11:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: 152.30.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a9:55:e8:95:19:ec:37:22:41:c2:80:7f:e1:98:66:57:7a: 84:80:48:0a:fc:1b:e5:96:ba:06:c6:26:23:8b:81:33:6e:a9: a5:18:73:3d:66:91:6d:0b:09:34:ed:02:b6:a5:dc:76:c7:e8: c9:ce:9b:a5:92:85:e2:7f:2c:35:90:77:c3:30:eb:b7:30:24: bd:06:58:55:40:62:32:a3:8a:df:0d:a5:4e:a3:b2:22:07:d3: 36:b0:53:80:9f:32:3e:2c:f8:84:0a:d1:54:00:7e:05:ea:23: 8c:af:69:6e:98:27:94:ad:84:2e:f2:fa:41:ad:bd:28:d1:0e: 93:ea:63:8e:c0:3f:58:53:3c:79:98:ac:78:e7:4c:85:59:9a: cb:b3:55:b9:6d:a7:7a:46:66:a6:0f:05:02:d6:63:1f:c3:c8: 6a:61:3d:79:bf:9b:1a:9e:d1:dd:88:a9:e2:d6:1d:dc:ff:1c: 60:15:e0:02:a2:24:a3:22:f8:59:3c:ab:d6:34:a7:15:49:1e: de:ed:01:ff:7e:25:7a:6f:50:3d:d7:83:86:85:97:51:e3:d8: 80:21:87:4e:4c:38:67:87:0a:e9:59:e0:65:a4:1b:fb:88:25: 84:e7:fc:c3:41:29:38:ae:e0:e8:5c:57:42:42:5b:0e:2d:8f: 35:1d:79:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJc8UTBJvnLWqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk NjQ3ZjkxYmEtOWM4MC00NTlkLWI5ZjAtYmY2NTA0NWI0MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziMTq9h28/m/E4uu9YGJnDQSn4UZyqTIMd96 XquQOdnhqEq3psAWMFcx3ZeCSLcETqP1YNX+bTWQbkGbaVlxG01tql80XrBVO4FW F0WN9wMhp3gwEzB6S94EzV+t+VDgHYabo6ym4BV/saGMfd/ziGxqc+iXfS5vbvZy m3xrqLm5NAKlgCkR8vdCuRBCO1vxHe5dFG5SmAsJmRM99K9cHo97O7GhGC4b+MN0 TXW6tPbHuVw8I28BWs2ZbOj+YeSF34CY10hFd8ehXRlnuUodeBGhezLZ8WPA1DP4 ny89ru+nRDSi2AcPxl6sD7YRdTztt/kjQpecA8BJB5/LhuJ2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+vSWsQlema9MLghF2PCNiUphHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvMDI0MmUzYmItZDM2MS0z MTRlLTkzOTctMDIyY2EyZmJhN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmB4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6pVeiVGew3IkHCgH/hmGZXeoSASAr8G+WWugbGJiOLgTNuqaUYcz1m kW0LCTTtAral3HbH6MnOm6WSheJ/LDWQd8Mw67cwJL0GWFVAYjKjit8NpU6jsiIH 0zawU4CfMj4s+IQK0VQAfgXqI4yvaW6YJ5SthC7y+kGtvSjRDpPqY47AP1hTPHmY rHjnTIVZmsuzVbltp3pGZqYPBQLWYx/DyGphPXm/mxqe0d2IqeLWHdz/HGAV4AKi JKMi+Fk8q9Y0pxVJHt7tAf9+JXpvUD3Xg4aFl1Hj2IAhh05MOGeHCulZ4GWkG/uI JYTn/MNBKTiu4OhcV0JCWw4tjzUdedY= -----END CERTIFICATE-----Generated at Sun May 11 16:40:10 2025 by rpki-client