$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6ca4a7a2-83ca-38fd-9452-3d7b7154770b.roa File: 6ca4a7a2-83ca-38fd-9452-3d7b7154770b.roa (raw, json) Hash identifier: sNBv9WPdruZgh+IIBmmPsSN4YDWc38aLY9FJoVnNj5w= Subject key identifier: 62:41:82:44:7F:70:1F:C1:9D:11:93:69:D0:D3:2E:94:69:93:4B:42 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F432858498E6487F5FF9F9A4F1325C400 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6ca4a7a2-83ca-38fd-9452-3d7b7154770b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 211321 IP address blocks: 192.228.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:87:f5:ff:9f:9a:4f:13:25:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=373a1c34-b054-4abb-ace3-bfbf4df68872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:9a:21:f6:3c:d5:75:0c:9a:5b:8d:ab:3b: 95:e0:a8:da:86:37:7d:c5:f0:d7:ee:0a:6d:39:6a: 22:a9:3e:51:e2:ef:0b:6c:de:76:a7:c4:45:e5:4d: 68:5d:2a:92:00:e3:aa:7c:a5:78:b2:4a:ff:9e:bf: 53:7e:b0:ba:56:a3:4d:d7:f7:74:30:d7:a7:a3:d6: 7d:c8:89:86:0f:6d:d1:6d:b8:a5:78:90:96:ee:91: d8:f9:b6:84:42:3b:eb:21:50:e1:fe:e0:7b:db:45: a4:7c:c5:ab:0c:11:8f:b4:cd:23:26:c1:5e:1f:60: db:7a:f2:19:5f:45:21:9b:96:08:eb:3a:21:67:d8: 0b:5c:4e:19:b0:3e:f3:97:75:95:b9:3c:e8:02:18: 74:bd:0b:29:ec:eb:21:31:86:4f:8c:fc:42:99:de: 73:47:6c:99:52:4d:72:28:53:03:98:be:ef:bf:a6: ea:5f:56:f2:b0:9b:84:28:68:29:d8:29:66:ea:ef: 67:96:1a:ec:9d:fa:d3:b0:80:27:f6:f8:10:5a:b3: 3d:b5:07:b4:ae:9b:be:51:61:03:a7:16:fb:08:94: db:82:4d:c4:14:7f:75:0f:0a:e5:36:3d:d8:68:60: f7:6a:f4:ca:31:e3:69:d7:c0:74:54:cd:fa:10:2b: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:41:82:44:7F:70:1F:C1:9D:11:93:69:D0:D3:2E:94:69:93:4B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6ca4a7a2-83ca-38fd-9452-3d7b7154770b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c6:71:e6:50:47:9e:f7:a1:26:b9:20:e9:47:38:5a:d5:0d: 3a:dd:89:e4:78:8f:1b:18:ed:63:a6:cd:bb:86:11:30:cb:da: 88:3f:fe:e8:d7:f3:de:9b:f1:af:81:6d:da:7a:31:52:db:df: 36:41:5e:0a:79:c3:48:bf:c8:86:25:a6:3c:b5:51:24:51:87: 2f:04:52:9f:8c:bb:c8:a3:b8:78:44:02:72:84:0f:7d:4e:e4: d8:8c:50:1f:70:fc:eb:c9:8b:05:00:ba:c0:74:2b:e9:c4:42: 88:b1:5b:37:22:38:9e:93:80:d5:d9:11:4b:6f:29:ad:f1:9d: 64:c0:6f:70:d8:a6:28:18:1e:1f:cf:d4:af:f2:e5:24:44:27: 00:76:69:77:a1:ae:af:85:bf:b8:c3:b5:8b:d7:2e:08:3f:82: a7:1d:39:92:01:6b:ba:d7:d5:24:9a:d0:66:bc:4b:7d:20:d9: 4e:5e:24:35:83:fe:b4:8a:2a:fb:fa:a5:22:d7:98:f4:3e:48: 97:4e:6e:97:61:a6:4c:0b:be:b5:9d:a6:f9:45:70:b7:5a:3a: ed:55:93:e9:76:2c:c3:82:5b:f0:ab:58:69:4c:9f:db:4f:a5: df:6e:60:f0:95:03:61:2b:26:a7:e9:d7:3e:94:fd:86:d5:df: d8:13:2d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIf1/5+aTxMlxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzczYTFjMzQtYjA1NC00YWJiLWFjZTMtYmZiZjRkZjY4ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92aIfY81XUMmluNqzuV4Kjahjd9xfDX7gpt OWoiqT5R4u8LbN52p8RF5U1oXSqSAOOqfKV4skr/nr9TfrC6VqNN1/d0MNeno9Z9 yImGD23RbbileJCW7pHY+baEQjvrIVDh/uB720WkfMWrDBGPtM0jJsFeH2DbevIZ X0Uhm5YI6zohZ9gLXE4ZsD7zl3WVuTzoAhh0vQsp7OshMYZPjPxCmd5zR2yZUk1y KFMDmL7vv6bqX1bysJuEKGgp2Clm6u9nlhrsnfrTsIAn9vgQWrM9tQe0rpu+UWED pxb7CJTbgk3EFH91DwrlNj3YaGD3avTKMeNp18B0VM36ECtt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJBgkR/cB/BnRGTadDTLpRpk0tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNmNhNGE3YTItODNjYS0z OGZkLTk0NTItM2Q3YjcxNTQ3NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwORYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjGceZQR573oSa5IOlHOFrVDTrdieR4jxsY7WOmzbuGETDL2og//ujX 896b8a+Bbdp6MVLb3zZBXgp5w0i/yIYlpjy1USRRhy8EUp+Mu8ijuHhEAnKED31O 5NiMUB9w/OvJiwUAusB0K+nEQoixWzciOJ6TgNXZEUtvKa3xnWTAb3DYpigYHh/P 1K/y5SREJwB2aXehrq+Fv7jDtYvXLgg/gqcdOZIBa7rX1SSa0Ga8S30g2U5eJDWD /rSKKvv6pSLXmPQ+SJdObpdhpkwLvrWdpvlFcLdaOu1Vk+l2LMOCW/CrWGlMn9tP pd9uYPCVA2ErJqfp1z6U/YbV39gTLdU= -----END CERTIFICATE-----Generated at Sun May 11 19:51:04 2025 by rpki-client