$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa File: 860520bc-0fc4-332f-8787-78503cad774b.roa (raw, json) Hash identifier: vXlpq3hFaKNxmD7pKWN2Alp2cb0Mf53uy36dfiPSYo4= Subject key identifier: BA:8D:34:80:91:65:BB:7D:D9:81:14:91:B0:08:C0:BA:CE:6A:A7:12 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849B14A0E0D1CBA21A887C4E000 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 30133 IP address blocks: 199.6.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0e:0d:1c:ba:21:a8:87:c4:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=15b3e3bb-1b70-4ff0-a219-b377bcf27b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:21:d2:e7:81:76:e2:dd:4f:36:8e:ec:5b:de: 27:53:e0:bc:de:27:71:c6:a1:ec:94:be:81:31:80: 1c:ff:ff:5b:3c:56:97:91:01:e0:03:7b:29:09:cb: 77:44:fb:5a:89:c6:21:36:62:3f:fe:cc:b3:6b:9a: 3d:7e:ec:9b:cf:a2:b2:5e:0e:3a:45:5b:d1:a6:74: 0d:6d:80:a2:f5:72:a3:04:c9:ec:7f:39:e9:82:66: 83:e4:c3:51:46:7f:4b:cb:37:50:ba:af:bd:c1:99: be:c0:c9:99:b7:2e:47:ab:e8:c0:19:34:a0:5c:b0: 0f:9d:cb:04:04:ab:3f:5c:10:7f:d1:23:79:b4:93: 6d:49:f4:65:53:b1:c4:43:d4:b5:0d:15:6b:c2:55: be:f6:46:d0:56:a0:16:9d:dd:db:17:2d:32:be:23: 28:19:a5:b6:90:c9:49:7b:b9:6c:6f:ea:f9:d7:6a: f3:0b:94:04:cc:bd:61:4a:c3:bd:7c:76:26:49:95: 84:6a:98:bb:9a:70:83:4d:6e:0a:44:c2:49:c8:d0: dd:1a:a1:28:e3:d3:ac:bc:6d:4c:fb:9d:d6:9f:2a: 8e:22:6f:8b:6d:97:17:73:1f:c5:86:0f:fe:9a:ff: 36:7e:bb:89:ae:44:d7:26:a9:42:27:65:02:72:34: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:34:80:91:65:BB:7D:D9:81:14:91:B0:08:C0:BA:CE:6A:A7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 199.6.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9b:1a:d0:6e:7b:f2:4c:97:30:6e:48:7f:d7:6b:52:47:18: 41:70:83:5e:c7:90:c7:5c:e1:9b:a3:38:b7:55:3f:db:44:ca: 0e:d5:e1:48:64:45:e5:7a:c4:27:8f:41:42:71:b4:a7:96:18: 37:9f:8a:e5:62:5a:3c:27:e0:fe:ad:cd:85:6f:14:92:43:2a: 52:00:ec:e6:04:a7:06:69:9a:7c:ab:7e:40:60:92:44:59:e3: 23:9f:33:e9:65:86:b3:f8:05:69:84:1a:ed:ad:09:84:9c:cf: f4:b3:06:0b:85:3e:9d:7b:be:40:57:20:c9:48:9b:ae:f8:3a: c8:d7:2b:6c:d2:2f:fc:2c:56:49:97:8f:2a:ab:89:c9:21:ab: 0c:46:32:80:e1:a6:bc:36:fe:db:d6:80:b9:33:44:b0:17:43: ff:7d:f2:0e:55:30:ae:30:de:98:1a:24:5e:a1:55:a6:50:3e: 1a:63:56:51:55:65:f6:de:c6:a6:42:c7:82:1b:d8:60:bd:f0: 6a:bd:43:70:ee:8d:62:cd:2e:f0:77:ba:16:7a:b4:c2:e7:00: 65:8c:fc:00:5d:cc:8c:9e:71:56:82:58:af:c7:39:4f:dc:6f: 67:7b:8e:2a:d7:ba:d0:2b:08:12:30:a0:db:eb:3a:64:f8:92: bd:ae:68:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg4NHLohqIfE4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTViM2UzYmItMWI3MC00ZmYwLWEyMTktYjM3N2JjZjI3YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SHS54F24t1PNo7sW94nU+C83idxxqHslL6B MYAc//9bPFaXkQHgA3spCct3RPtaicYhNmI//syza5o9fuybz6KyXg46RVvRpnQN bYCi9XKjBMnsfznpgmaD5MNRRn9LyzdQuq+9wZm+wMmZty5Hq+jAGTSgXLAPncsE BKs/XBB/0SN5tJNtSfRlU7HEQ9S1DRVrwlW+9kbQVqAWnd3bFy0yviMoGaW2kMlJ e7lsb+r512rzC5QEzL1hSsO9fHYmSZWEapi7mnCDTW4KRMJJyNDdGqEo49OsvG1M +53WnyqOIm+LbZcXcx/Fhg/+mv82fruJrkTXJqlCJ2UCcjRVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqNNICRZbt92YEUkbAIwLrOaqcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvODYwNTIwYmMtMGZjNC0z MzJmLTg3ODctNzg1MDNjYWQ3NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqbGtBue/JMlzBuSH/Xa1JHGEFwg17HkMdc4ZujOLdVP9tEyg7V4Uhk ReV6xCePQUJxtKeWGDefiuViWjwn4P6tzYVvFJJDKlIA7OYEpwZpmnyrfkBgkkRZ 4yOfM+llhrP4BWmEGu2tCYScz/SzBguFPp17vkBXIMlIm674OsjXK2zSL/wsVkmX jyqrickhqwxGMoDhprw2/tvWgLkzRLAXQ/998g5VMK4w3pgaJF6hVaZQPhpjVlFV ZfbexqZCx4Ib2GC98Gq9Q3DujWLNLvB3uhZ6tMLnAGWM/ABdzIyecVaCWK/HOU/c b2d7jirXutArCBIwoNvrOmT4kr2uaFI= -----END CERTIFICATE-----Generated at Tue May 13 14:59:43 2025 by rpki-client