$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6233636d-fadb-3b68-af36-5d9df84a8b26.roa File: 6233636d-fadb-3b68-af36-5d9df84a8b26.roa (raw, json) Hash identifier: 3KQzK0NHw4VDCgWe/QmlYi/TUMnUPmgaKIj/9amEBms= Subject key identifier: F6:47:89:3F:55:26:E5:D3:C9:2F:49:E5:A5:D3:4D:C8:53:01:89:26 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2EA6749B6DA3E67B37680 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6233636d-fadb-3b68-af36-5d9df84a8b26.roa Signing time: Mon 07 Apr 2025 16:33:11 +0000 ROA not before: Mon 07 Apr 2025 16:33:11 +0000 ROA not after: Sun 06 Jul 2025 16:33:11 +0000 asID: 81 IP address blocks: 128.109.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:ea:67:49:b6:da:3e:67:b3:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:11 2025 GMT Not After : Jul 6 16:33:11 2025 GMT Subject: CN=d5953424-33f3-421b-8bf7-45874a661449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:27:c3:ef:ad:26:ab:8d:08:cd:12:76:f6: a2:6b:46:bd:38:d4:e3:a4:88:1d:b3:d3:57:f4:0f: 43:9f:7e:62:98:86:6b:05:cd:16:ba:c4:85:a2:7e: c6:02:db:7b:1c:92:f0:2c:4e:66:0f:fc:e7:da:5a: e3:3e:4d:07:80:b1:a7:d7:02:c7:72:06:56:d1:00: ee:3a:18:11:6a:ea:5b:ae:f5:2c:53:35:84:54:b6: 7d:eb:6f:5a:32:4f:99:d5:de:db:a6:08:9e:bf:d9: 63:0d:0d:82:30:26:e7:39:8c:3d:eb:ec:3e:b5:ca: 10:32:b5:4e:f8:1d:e5:f7:5f:d1:96:51:aa:11:e8: 21:45:87:34:58:b4:b7:c2:74:3c:9e:bd:66:1a:6b: 94:96:ae:8f:1b:4a:06:2f:3e:42:14:47:a8:4b:e5: f7:77:54:9b:ea:72:12:4e:27:63:bc:67:18:81:8f: d7:31:5f:98:98:9d:79:18:7b:f6:dc:dc:99:82:53: 34:03:21:da:96:78:84:44:55:67:47:20:6f:6d:2e: 8f:41:d1:7c:6e:aa:2f:c9:06:3b:e7:8a:2f:5d:1a: 98:33:21:7e:01:e2:ee:aa:b3:81:23:2d:f7:b1:79: 58:fc:ff:e1:2c:17:df:ac:ec:6c:d0:cc:c6:2d:ab: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:89:3F:55:26:E5:D3:C9:2F:49:E5:A5:D3:4D:C8:53:01:89:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6233636d-fadb-3b68-af36-5d9df84a8b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b4:19:26:9c:e5:2c:04:2a:08:ff:a3:1b:57:d9:f7:24:5f: 5b:ad:f2:d9:35:e4:ea:62:f7:30:b9:bf:aa:d0:44:e8:13:a3: 39:7e:29:d9:4e:19:c5:23:6e:9a:b3:b3:3e:1a:75:5a:bf:14: 2a:2c:be:fe:09:a4:e3:5c:9e:97:a0:19:9d:af:46:2a:c5:1a: f7:6c:cf:d3:eb:1c:d0:90:6f:b5:93:f9:cb:e9:f4:99:51:2b: 2d:e1:2d:68:11:e6:ca:0f:99:35:8d:9a:1a:29:ac:b2:59:03: 98:ac:b2:f4:61:d3:46:0c:a8:1c:9d:e1:9a:d5:19:48:61:cd: 03:14:f2:bc:32:12:6d:be:82:3d:5e:6f:9d:bf:90:fa:84:c0: 05:08:45:0f:5a:ec:cb:24:b6:5e:fd:b2:19:89:92:08:14:5f: 8a:9e:45:30:2e:65:d0:90:d0:f1:64:17:e9:80:fa:5e:fa:27: 1c:d0:a0:72:29:e3:f6:9f:c5:94:d5:9b:b6:60:69:a4:14:c6: 8c:31:97:53:59:88:ac:f0:a6:9d:88:f7:8b:ef:1f:6f:b1:c9: 99:ea:6e:74:26:d3:96:ca:da:48:0f:9f:a0:5d:3c:8d:e0:83: 29:07:4c:e4:b4:8f:88:50:5c:35:b9:4c:2c:d5:f5:8d:a0:0d: ea:1f:b3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4upnSbbaPmezdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxMVoXDTI1MDcwNjE2MzMxMVowLzEtMCsGA1UEAxMk ZDU5NTM0MjQtMzNmMy00MjFiLThiZjctNDU4NzRhNjYxNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaInw++tJquNCM0Sdvaia0a9ONTjpIgds9NX 9A9Dn35imIZrBc0WusSFon7GAtt7HJLwLE5mD/zn2lrjPk0HgLGn1wLHcgZW0QDu OhgRaupbrvUsUzWEVLZ9629aMk+Z1d7bpgiev9ljDQ2CMCbnOYw96+w+tcoQMrVO +B3l91/RllGqEeghRYc0WLS3wnQ8nr1mGmuUlq6PG0oGLz5CFEeoS+X3d1Sb6nIS TidjvGcYgY/XMV+YmJ15GHv23NyZglM0AyHalniERFVnRyBvbS6PQdF8bqovyQY7 54ovXRqYMyF+AeLuqrOBIy33sXlY/P/hLBffrOxs0MzGLat5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZHiT9VJuXTyS9J5aXTTchTAYkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjIzMzYzNmQtZmFkYi0z YjY4LWFmMzYtNWQ5ZGY4NGE4YjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa0GSac5SwEKgj/oxtX2fckX1ut8tk15Opi9zC5v6rQROgTozl+KdlO GcUjbpqzsz4adVq/FCosvv4JpONcnpegGZ2vRirFGvdsz9PrHNCQb7WT+cvp9JlR Ky3hLWgR5soPmTWNmhoprLJZA5issvRh00YMqByd4ZrVGUhhzQMU8rwyEm2+gj1e b52/kPqEwAUIRQ9a7Msktl79shmJkggUX4qeRTAuZdCQ0PFkF+mA+l76JxzQoHIp 4/afxZTVm7ZgaaQUxowxl1NZiKzwpp2I94vvH2+xyZnqbnQm05bK2kgPn6BdPI3g gykHTOS0j4hQXDW5TCzV9Y2gDeofsyw= -----END CERTIFICATE-----Generated at Sat May 10 19:15:57 2025 by rpki-client