$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa File: fde4e71b-e3e8-3394-a523-a42805ae411a.roa (raw, json) Hash identifier: Z0wsHnsE9dXYtK8yQYsGmqfyN91vSxULXs5N6Q7MmeQ= Subject key identifier: A0:DA:30:57:B5:81:E5:DB:08:4E:FA:0A:A5:B6:5E:BE:7A:87:95:B6 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584A1B5FF56BF93380A2E6424140 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 14500 IP address blocks: 192.151.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f5:6b:f9:33:80:a2:e6:42:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=d75d3f57-0982-427e-a977-2e1a78b31e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:d5:36:eb:ae:6d:ac:fe:2c:e8:84:8c:48: 29:47:59:2b:9c:0f:7f:de:9a:e1:98:7a:80:da:76: e9:f3:7c:97:e4:54:93:75:86:a7:ef:54:de:19:23: b8:2a:41:c1:95:ec:fe:ac:cb:07:de:5c:59:4d:06: 59:df:d4:74:38:da:ae:a0:16:0d:da:c7:48:89:4e: 27:99:4c:ca:7f:2a:ec:ea:9d:8d:c5:bb:6a:f3:a9: 14:5e:3f:52:4b:cf:19:a7:8d:bc:8c:e6:73:50:40: 96:34:da:ab:17:8a:86:eb:c1:fa:f4:c0:e6:81:aa: 0c:ec:2c:5a:f2:de:9e:2e:f2:28:22:64:27:14:6b: 0f:ad:5c:15:78:fd:73:1e:6b:de:55:16:a1:7e:de: 1f:2b:c9:1d:11:76:b7:02:f9:84:7d:aa:49:5d:c6: 9f:c7:1b:38:c3:13:30:de:d9:6b:37:3d:a1:6c:fe: fc:8e:b3:ac:5f:c1:0d:1b:e1:58:22:fd:37:9e:81: 8c:da:c3:a0:ef:79:f1:fa:58:7b:4a:1c:4a:03:a7: 5b:3d:24:68:03:d9:df:f3:7c:dc:ce:45:18:8c:11: bc:3e:4d:b5:a5:76:60:31:e9:58:d9:c0:5c:f8:57: 10:fb:0d:5f:89:3b:cf:d6:53:1e:5a:96:e2:f4:af: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:30:57:B5:81:E5:DB:08:4E:FA:0A:A5:B6:5E:BE:7A:87:95:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cc:f9:de:0e:dd:21:e8:59:3e:15:9e:72:fd:3e:65:a7:96: 18:f3:72:42:0c:41:e8:d3:8b:6d:6e:4d:28:5e:a3:18:2b:4c: bf:f2:45:ae:93:ec:22:42:91:12:d6:c3:ad:aa:b7:70:76:3a: 00:d1:9d:5b:5f:08:44:72:ec:0e:d0:36:a3:00:2a:6d:82:2b: da:c9:a6:33:19:0e:38:1c:2e:75:27:4e:44:89:81:09:23:3e: b5:3d:04:75:a8:a3:b7:76:ac:30:76:d0:78:a3:69:85:7d:2f: 02:23:a1:5d:25:ba:27:12:ba:7b:fc:f8:ab:07:95:b0:1d:21: 45:d6:e5:18:0c:77:09:e7:4a:c5:01:4d:0d:e6:58:1f:fd:99: 45:20:fd:a7:9a:2a:fc:b5:1a:c8:ec:35:f6:54:91:29:77:db: f1:09:dc:7e:ae:40:36:1c:fd:d9:4e:c2:48:11:a7:6c:f7:dc: 19:fd:c8:9f:99:b2:af:18:12:6b:b5:f9:a9:c7:dc:1e:cc:cc: e5:39:22:7f:6f:75:80:55:aa:4c:2f:80:d2:17:54:a3:07:5d: cb:b7:98:b7:50:d4:ab:ec:b9:70:f5:fe:c6:22:bf:c0:69:bd: 0f:b9:db:10:8b:68:a4:ac:c8:82:5f:77:5a:97:78:63:46:a4: 77:ed:ba:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/Vr+TOAouZCQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZDc1ZDNmNTctMDk4Mi00MjdlLWE5NzctMmUxYTc4YjMxZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDVNuuubaz+LOiEjEgpR1krnA9/3prhmHqA 2nbp83yX5FSTdYan71TeGSO4KkHBlez+rMsH3lxZTQZZ39R0ONquoBYN2sdIiU4n mUzKfyrs6p2Nxbtq86kUXj9SS88Zp428jOZzUECWNNqrF4qG68H69MDmgaoM7Cxa 8t6eLvIoImQnFGsPrVwVeP1zHmveVRahft4fK8kdEXa3AvmEfapJXcafxxs4wxMw 3tlrNz2hbP78jrOsX8ENG+FYIv03noGM2sOg73nx+lh7ShxKA6dbPSRoA9nf83zc zkUYjBG8Pk21pXZgMelY2cBc+FcQ+w1fiTvP1lMeWpbi9K9y3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDaMFe1geXbCE76CqW2Xr56h5W2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvZmRlNGU3MWItZTNlOC0z Mzk0LWE1MjMtYTQyODA1YWU0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTM+d4O3SHoWT4VnnL9PmWnlhjzckIMQejTi21uTSheoxgrTL/yRa6T 7CJCkRLWw62qt3B2OgDRnVtfCERy7A7QNqMAKm2CK9rJpjMZDjgcLnUnTkSJgQkj PrU9BHWoo7d2rDB20HijaYV9LwIjoV0luicSunv8+KsHlbAdIUXW5RgMdwnnSsUB TQ3mWB/9mUUg/aeaKvy1GsjsNfZUkSl32/EJ3H6uQDYc/dlOwkgRp2z33Bn9yJ+Z sq8YEmu1+anH3B7MzOU5In9vdYBVqkwvgNIXVKMHXcu3mLdQ1KvsuXD1/sYiv8Bp vQ+52xCLaKSsyIJfd1qXeGNGpHftupY= -----END CERTIFICATE-----Generated at Mon Jun 30 17:48:54 2025 by rpki-client