$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4bb053c0-77f2-3eca-8af9-ed919c4da124.roa File: 4bb053c0-77f2-3eca-8af9-ed919c4da124.roa (raw, json) Hash identifier: EqVcXVAJD8Hdr2Ak4o0rz3i3qlodWbuUl4229+6Ejok= Subject key identifier: A2:09:D4:F2:E1:B7:C4:4C:89:2F:8E:17:86:E3:53:A0:B4:D3:60:F7 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EAE481CF20B9B5856C40 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4bb053c0-77f2-3eca-8af9-ed919c4da124.roa Signing time: Mon 07 Apr 2025 16:33:11 +0000 ROA not before: Mon 07 Apr 2025 16:33:11 +0000 ROA not after: Sun 06 Jul 2025 16:33:11 +0000 asID: 81 IP address blocks: 128.109.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ea:e4:81:cf:20:b9:b5:85:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:11 2025 GMT Not After : Jul 6 16:33:11 2025 GMT Subject: CN=0d3902a4-40f4-4d3b-944b-5954148d4cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:97:5c:e2:d7:0a:1f:88:91:7d:23:f7:f4: 2a:eb:eb:e0:1a:4f:9b:d6:06:aa:47:f0:f2:fa:63: bf:cd:4f:3b:57:2e:46:5e:a2:bc:6e:34:ab:cd:17: ba:3a:c0:78:c2:8c:52:69:31:5e:ea:ee:da:3d:17: 00:6c:7f:bd:98:62:b0:6d:8f:63:61:c1:aa:f8:52: 19:00:45:5d:c2:8e:9d:eb:13:60:24:60:70:08:56: c4:3a:a0:75:14:c0:2e:2c:b7:d3:d1:73:77:c3:96: e3:32:43:15:a1:de:20:f7:e1:47:e3:c6:32:33:03: 97:95:80:a0:b3:d3:ad:c1:d9:c4:56:46:ea:94:49: 2f:3f:04:b7:a4:a6:53:7e:e8:db:a5:7a:42:3b:3c: 6a:df:38:60:c8:6d:19:77:4d:b2:52:11:4e:ae:c8: 25:4a:92:53:98:50:77:87:48:02:f7:9b:96:c1:60: 51:f3:15:f4:4e:22:cd:9e:72:c4:52:df:d4:27:21: 6d:e8:37:cb:c6:5c:1b:79:be:c9:ca:e3:41:51:af: bc:be:f6:f2:3a:28:92:13:2a:0a:c4:6e:77:6e:8d: aa:0f:3c:7f:6e:c4:a9:7c:09:ea:35:c6:d6:2d:e9: 43:20:ef:b3:63:6d:6e:1c:05:a6:5e:36:46:3b:2a: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:D4:F2:E1:B7:C4:4C:89:2F:8E:17:86:E3:53:A0:B4:D3:60:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4bb053c0-77f2-3eca-8af9-ed919c4da124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b7:84:c0:c0:65:5d:9e:5d:1f:58:32:93:04:f3:0f:04:a3: 78:0a:8c:9c:4f:09:f7:bf:20:33:2a:ae:b3:96:47:f3:e6:a2: 29:ef:5e:f6:83:f8:9d:ad:93:9e:61:74:d5:0f:28:b5:f4:be: b5:e7:03:da:f8:25:53:6b:67:d1:03:ab:a8:9c:69:d3:99:32: 66:66:fe:fa:0c:a7:97:ef:a2:82:49:57:c8:9c:1d:4e:5a:39: 8b:6a:f3:b7:f4:ee:a7:b3:4d:00:a6:12:bd:38:94:94:f4:07: 6b:d0:d0:aa:d3:fc:c4:8c:16:30:97:43:35:dc:ef:d9:eb:d3: a4:a5:c2:09:69:6f:72:92:72:0a:87:83:58:14:04:fe:61:dd: 42:09:06:a0:65:f1:35:6c:04:4d:76:84:cf:2c:52:f3:6b:66: fb:2a:71:0f:1d:c4:3f:fa:ca:4d:00:56:4f:36:f5:01:62:41: ac:e2:9c:3f:31:a0:0e:aa:43:a7:db:cc:2b:ea:a4:a5:f2:26: 96:70:a6:95:ed:0e:4b:09:e7:f8:0e:30:dc:35:03:a6:5f:ab: 32:a1:75:11:a0:a1:14:c3:e5:87:b8:22:80:15:f6:b1:e7:65: 6a:ac:53:53:cf:a7:01:a5:e8:ba:1d:b8:eb:12:2d:52:75:e6: 00:fd:1f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4urkgc8gubWFbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMVoXDTI1MDcwNjE2MzMxMVowLzEtMCsGA1UEAxMk MGQzOTAyYTQtNDBmNC00ZDNiLTk0NGItNTk1NDE0OGQ0Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue2XXOLXCh+IkX0j9/Qq6+vgGk+b1gaqR/Dy +mO/zU87Vy5GXqK8bjSrzRe6OsB4woxSaTFe6u7aPRcAbH+9mGKwbY9jYcGq+FIZ AEVdwo6d6xNgJGBwCFbEOqB1FMAuLLfT0XN3w5bjMkMVod4g9+FH48YyMwOXlYCg s9OtwdnEVkbqlEkvPwS3pKZTfujbpXpCOzxq3zhgyG0Zd02yUhFOrsglSpJTmFB3 h0gC95uWwWBR8xX0TiLNnnLEUt/UJyFt6DfLxlwbeb7JyuNBUa+8vvbyOiiSEyoK xG53bo2qDzx/bsSpfAnqNcbWLelDIO+zY21uHAWmXjZGOyqLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIJ1PLht8RMiS+OF4bjU6C002D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGJiMDUzYzAtNzdmMi0z ZWNhLThhZjktZWQ5MTljNGRhMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa3hMDAZV2eXR9YMpME8w8Eo3gKjJxPCfe/IDMqrrOWR/PmoinvXvaD +J2tk55hdNUPKLX0vrXnA9r4JVNrZ9EDq6icadOZMmZm/voMp5fvooJJV8icHU5a OYtq87f07qezTQCmEr04lJT0B2vQ0KrT/MSMFjCXQzXc79nr06Slwglpb3KScgqH g1gUBP5h3UIJBqBl8TVsBE12hM8sUvNrZvsqcQ8dxD/6yk0AVk829QFiQazinD8x oA6qQ6fbzCvqpKXyJpZwppXtDksJ5/gOMNw1A6ZfqzKhdRGgoRTD5Ye4IoAV9rHn ZWqsU1PPpwGl6LoduOsSLVJ15gD9H88= -----END CERTIFICATE-----Generated at Sun May 11 04:08:25 2025 by rpki-client