$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa File: 41d21d52-4d7f-37ff-865d-7fef04f2a966.roa (raw, json) Hash identifier: kY5ykb0hzIGAYOs6i6mFFUc2u1Mdwr7KqQykaAllVQI= Subject key identifier: F1:74:AF:18:8F:94:9D:79:3C:87:09:F6:44:83:DA:CF:A2:C1:31:B4 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584A14656D217ABC9905BAB74480 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 396905 IP address blocks: 192.43.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:6d:21:7a:bc:99:05:ba:b7:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=56a5f0e4-d362-4dfd-8ece-61d732846f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5c:22:ff:14:76:65:8a:98:ab:28:58:1e:b0: 26:98:87:90:df:14:35:41:f0:d6:0c:60:e5:a0:3c: d4:d1:11:08:a8:7c:7c:06:87:7b:fd:0d:43:a7:0d: 89:00:95:b9:bd:25:1c:4e:84:ea:02:86:13:c7:14: 9f:a6:85:1a:88:6f:e4:d4:fd:6a:bf:a6:e6:6a:01: 3e:7b:ae:16:13:7d:5c:aa:50:63:1b:92:a4:0e:dd: e5:58:c4:8a:26:22:0b:19:b8:7f:e9:7d:55:1d:b5: 05:59:c8:fd:3c:f0:39:71:8f:91:d0:12:b8:a2:7d: b2:a6:00:39:08:6b:81:fe:20:f6:18:81:43:31:76: 4d:f2:10:f3:de:03:90:30:9a:f9:60:96:34:10:ee: 56:de:fc:f0:89:d6:e7:6d:ab:2b:8c:4b:78:7b:0a: 03:ad:e1:48:85:2c:4c:b6:1b:85:e5:e7:b7:b1:ee: 52:ec:76:2b:1a:1e:a3:9a:89:8f:b4:66:23:06:77: 3a:74:10:34:ff:c0:9b:a7:b4:60:df:60:ca:8e:cd: 5c:95:2b:d5:1f:34:12:1c:a2:56:90:da:83:b5:1b: 04:65:1a:76:fb:97:13:3f:4b:a6:9b:93:10:d3:0e: 00:0e:b3:97:3b:64:6d:38:2a:6a:d2:93:e2:c9:07: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:74:AF:18:8F:94:9D:79:3C:87:09:F6:44:83:DA:CF:A2:C1:31:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 192.43.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c1:43:cb:4e:1a:9d:a1:ce:37:90:81:f7:ea:52:79:5a:47: 78:ff:74:c2:87:7f:ba:fb:3b:a1:0f:0a:f7:22:3b:f2:1d:67: 76:6a:74:6f:ed:0b:84:42:4c:f1:7f:44:04:01:b3:28:d2:10: ca:b3:87:93:17:4e:0f:70:f3:08:6b:93:a5:38:05:dc:f5:b4: ce:e1:cd:f8:62:6f:90:6f:7d:04:8a:7c:fc:53:56:1e:ef:dc: d1:a5:bd:b0:c1:ca:35:cd:1b:fc:b1:69:e8:57:5d:fc:c9:9a: ec:3e:2b:b8:2d:0a:3f:a3:92:1a:29:7e:15:0a:8e:17:d2:c4: e3:c7:bb:26:c3:48:64:8a:fc:15:08:21:05:29:91:74:cf:03: 84:ad:02:33:66:e9:5d:34:c0:3d:6e:d3:23:bf:aa:51:d9:9f: 8f:f3:73:ef:59:45:c4:36:e4:aa:6d:1c:8f:ec:d5:52:16:02: 6b:90:c6:14:06:05:00:33:ac:4a:69:be:91:89:c9:5e:d8:f0: 39:c3:e7:b0:80:82:c1:9c:4b:7f:0e:26:06:66:e7:bf:83:3a: 79:d9:a5:f8:e9:9f:c4:d0:2e:0b:b1:2d:84:e4:18:0b:85:6f: ae:62:1a:a6:71:b4:dd:b5:bc:0f:07:fc:03:a0:31:90:9e:6a: 72:58:98:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZW0heryZBbq3RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTZhNWYwZTQtZDM2Mi00ZGZkLThlY2UtNjFkNzMyODQ2ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVwi/xR2ZYqYqyhYHrAmmIeQ3xQ1QfDWDGDl oDzU0REIqHx8Bod7/Q1Dpw2JAJW5vSUcToTqAoYTxxSfpoUaiG/k1P1qv6bmagE+ e64WE31cqlBjG5KkDt3lWMSKJiILGbh/6X1VHbUFWcj9PPA5cY+R0BK4on2ypgA5 CGuB/iD2GIFDMXZN8hDz3gOQMJr5YJY0EO5W3vzwidbnbasrjEt4ewoDreFIhSxM thuF5ee3se5S7HYrGh6jmomPtGYjBnc6dBA0/8Cbp7Rg32DKjs1clSvVHzQSHKJW kNqDtRsEZRp2+5cTP0umm5MQ0w4ADrOXO2RtOCpq0pPiyQdbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF0rxiPlJ15PIcJ9kSD2s+iwTG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvNDFkMjFkNTItNGQ3Zi0z N2ZmLTg2NWQtN2ZlZjA0ZjJhOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrBQ8tOGp2hzjeQgffqUnlaR3j/dMKHf7r7O6EPCvciO/IdZ3ZqdG/t C4RCTPF/RAQBsyjSEMqzh5MXTg9w8whrk6U4Bdz1tM7hzfhib5BvfQSKfPxTVh7v 3NGlvbDByjXNG/yxaehXXfzJmuw+K7gtCj+jkhopfhUKjhfSxOPHuybDSGSK/BUI IQUpkXTPA4StAjNm6V00wD1u0yO/qlHZn4/zc+9ZRcQ25KptHI/s1VIWAmuQxhQG BQAzrEppvpGJyV7Y8DnD57CAgsGcS38OJgZm57+DOnnZpfjpn8TQLguxLYTkGAuF b65iGqZxtN21vA8H/AOgMZCeanJYmNA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:52:57 2025 by rpki-client