$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa File: 7db215e9-f5af-39a6-97d5-14c7c17d9136.roa (raw, json) Hash identifier: fj+hJDDyQl/XXFLZSS8W26W0hmSmUYyVYkAQkHqNqtg= Subject key identifier: 6B:2C:55:32:DD:10:66:B6:8E:A3:A9:71:81:93:CE:22:A9:72:4F:2F Certificate issuer: /CN=fbe88551-e36f-4364-ac40-a262166c72ad Certificate serial: 010D0C9F432858491246B55A938C321C4028AA2C Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 63435 IP address blocks: 199.58.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b5:5a:93:8c:32:1c:40:28:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f1d1a04b-9d22-49e3-b4ba-047260f2cd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:55:48:b5:ae:6c:16:28:b4:42:ec:09:69: df:65:1f:ea:ac:96:7f:3f:81:ec:ba:30:43:97:7a: cb:a9:17:c4:3b:f8:af:18:22:68:11:2d:a2:14:8a: 4a:9a:26:40:42:2b:48:31:ba:79:4f:9a:dc:2a:94: 81:7a:79:d7:6b:04:31:c4:77:80:28:7d:40:81:d1: 64:4d:aa:99:2f:6d:71:5e:c1:f4:9f:b2:f9:1a:5e: cb:84:b3:23:da:78:21:9c:ff:4c:cd:c4:03:df:c0: 10:7f:76:db:5f:4f:97:0b:45:8f:0a:ea:8a:19:b9: c9:76:4b:22:7b:20:a6:33:88:b5:8a:0c:c3:b3:48: e2:d3:87:96:05:7c:4c:69:cc:4b:fb:1a:ca:bc:21: 45:3a:f2:77:aa:24:72:e8:b2:bb:3b:a0:24:c5:43: 4c:97:72:86:83:97:e5:75:a2:6d:43:6d:6c:38:de: b9:7d:2f:74:b3:a4:97:1a:59:2f:d2:68:ca:5f:52: d8:66:13:35:f3:98:7f:39:15:7e:0a:68:f0:c0:3e: 74:15:2b:5e:cb:b3:fd:81:62:e1:ac:98:70:0c:3c: 25:29:97:ce:7a:75:db:8f:69:8b:0d:67:f2:45:65: c0:79:fb:48:4d:61:de:1e:6e:bd:b7:49:63:b4:fc: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:55:32:DD:10:66:B6:8E:A3:A9:71:81:93:CE:22:A9:72:4F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl X509v3 Authority Key Identifier: keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer sbgp-ipAddrBlock: critical IPv4: 199.58.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:04:e8:bc:8c:db:21:60:4c:38:12:fb:f5:0b:6d:a5:f6:4e: 7d:78:db:bb:eb:9c:be:21:33:c9:c9:84:6d:99:40:62:ef:25: f3:9a:3d:4f:77:71:0d:91:84:7b:d0:c6:08:5c:f0:f4:b5:6b: 95:93:b5:63:7d:12:cc:2e:0f:4c:2c:e5:9d:92:b6:26:6d:bf: 7b:74:72:a7:f3:fd:a8:5c:31:3e:d6:00:d5:90:fd:60:3b:9b: bb:6a:20:86:6c:f0:60:38:17:40:a3:53:e5:e1:a2:ff:89:c6: 0e:a7:df:61:41:41:67:83:c3:17:3a:ac:eb:21:f5:63:df:fd: 34:64:f4:b5:de:82:63:47:7a:04:08:22:57:00:36:43:18:f6: 28:76:c3:4a:ad:e6:75:b9:dc:4f:4d:50:23:9c:63:8e:58:f1: 31:e2:a5:26:fc:31:fd:47:1e:31:a0:a4:cd:f2:6b:c7:e5:71: b9:c8:f7:17:f7:74:d7:3e:8c:7f:c1:de:c4:08:08:84:3a:21: 4e:fe:54:6e:90:1a:c3:90:1a:6c:58:de:db:68:bd:a1:52:6a: 47:24:70:9e:5e:f6:3e:fa:9a:1c:7b:de:fb:ca:78:48:a0:00: 14:6d:d2:23:e8:9b:a9:35:60:df:b9:15:e7:8d:11:01:d9:00: e9:a4:65:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrVak4wyHEAoqiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJlODg1NTEtZTM2Zi00MzY0LWFjNDAtYTI2MjE2NmM3 MmFkMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjFkMWEwNGItOWQyMi00OWUzLWI0YmEtMDQ3MjYwZjJjZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFVSLWubBYotELsCWnfZR/qrJZ/P4HsujBD l3rLqRfEO/ivGCJoES2iFIpKmiZAQitIMbp5T5rcKpSBennXawQxxHeAKH1AgdFk TaqZL21xXsH0n7L5Gl7LhLMj2nghnP9MzcQD38AQf3bbX0+XC0WPCuqKGbnJdksi eyCmM4i1igzDs0ji04eWBXxMacxL+xrKvCFFOvJ3qiRy6LK7O6AkxUNMl3KGg5fl daJtQ21sON65fS90s6SXGlkv0mjKX1LYZhM185h/ORV+CmjwwD50FStey7P9gWLh rJhwDDwlKZfOenXbj2mLDWfyRWXAeftITWHeHm69t0ljtPwBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGssVTLdEGa2jqOpcYGTziKpck8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYmU4 ODU1MS1lMzZmLTQzNjQtYWM0MC1hMjYyMTY2YzcyYWQvN2RiMjE1ZTktZjVhZi0z OWE2LTk3ZDUtMTRjN2MxN2Q5MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmJlODg1NTEtZTM2Zi00MzY0LWFj NDAtYTI2MjE2NmM3MmFkL2ZiZTg4NTUxLWUzNmYtNDM2NC1hYzQwLWEyNjIxNjZj NzJhZC5jcmwwHwYDVR0jBBgwFoAUoU2bhPTWh1xNDFZujdTIZEvIdU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYmU4ODU1MS1lMzZmLTQzNjQtYWM0MC1hMjYy MTY2YzcyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABME6LyM2yFgTDgS+/ULbaX2Tn1427vrnL4hM8nJhG2ZQGLvJfOaPU93 cQ2RhHvQxghc8PS1a5WTtWN9EswuD0ws5Z2StiZtv3t0cqfz/ahcMT7WANWQ/WA7 m7tqIIZs8GA4F0CjU+Xhov+Jxg6n32FBQWeDwxc6rOsh9WPf/TRk9LXegmNHegQI IlcANkMY9ih2w0qt5nW53E9NUCOcY45Y8THipSb8Mf1HHjGgpM3ya8flcbnI9xf3 dNc+jH/B3sQICIQ6IU7+VG6QGsOQGmxY3ttovaFSakckcJ5e9j76mhx73vvKeEig ABRt0iPom6k1YN+5FeeNEQHZAOmkZQc= -----END CERTIFICATE-----Generated at Tue Apr 29 20:19:14 2025 by rpki-client