$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa File: f99df0ee-55c6-30f2-9f70-4715143eb655.roa (raw, json) Hash identifier: f90YfQbowXR/mdiSVqfW5LenNuIjao6AH6loN0vZ9F8= Subject key identifier: 6D:09:B1:3C:9B:12:91:9D:15:4D:58:4C:30:AC:06:49:36:F4:7F:F2 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F43285849350E9272296701DA18A201F0 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 396905 IP address blocks: 192.82.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:92:72:29:67:01:da:18:a2:01:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=433f595a-7297-4264-b9f4-7bfeb43ed4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:39:13:70:ac:ff:80:d5:5a:67:ea:b1:7b: 34:33:3c:c0:b0:af:b0:ea:67:78:ef:e6:22:95:d4: 9d:b5:0b:ca:cc:33:b9:54:ee:a2:f0:c6:b4:cf:0b: 09:d6:02:a1:a5:20:ae:84:8d:14:15:45:e6:37:c0: bf:cf:1b:f6:12:71:23:83:27:7d:0b:bc:d2:33:8c: 0d:76:f9:32:9d:f6:8c:59:8e:04:7d:93:e3:02:ab: ab:54:95:e2:e8:32:cf:ef:bb:0a:31:96:07:79:89: f1:8e:29:93:d7:50:2b:e1:f4:41:58:0b:ac:6d:cd: 20:b2:d6:e3:7e:c2:27:50:68:77:05:d7:ad:a2:85: 48:4e:71:e5:37:ca:ed:05:5f:67:28:c7:20:e8:29: 41:6e:53:48:ed:83:98:72:81:d8:ea:26:1e:9f:3a: 89:b3:e6:c3:8b:97:fa:95:85:6a:4d:e8:20:52:34: 6a:5c:21:89:0f:04:86:19:9d:39:ee:fa:7b:6f:c4: c7:62:89:c2:fd:5e:f6:8a:51:61:54:55:2c:ff:69: 66:66:01:08:d9:7a:18:66:a4:24:32:bb:22:56:de: 78:14:dc:ef:0f:cf:96:3c:d0:cc:49:9c:90:da:9b: b4:22:79:67:56:53:59:28:e6:a6:65:87:d5:b0:b8: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:B1:3C:9B:12:91:9D:15:4D:58:4C:30:AC:06:49:36:F4:7F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 192.82.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:46:80:31:5d:82:a0:7f:38:7b:a8:64:bb:12:a2:99:c1:84: c2:14:e2:e7:e3:17:b5:2e:32:2e:ef:69:a5:dd:3f:63:3a:00: 18:35:c1:5c:3a:0a:22:e8:71:d0:56:a9:4a:af:ff:fb:45:d7: c0:b2:b0:ed:98:f1:1f:d4:a2:19:fc:9d:a2:3c:63:a5:8e:13: e1:cd:4a:83:a2:1f:11:c7:84:66:f5:89:05:a3:c3:3a:d0:10: b8:e7:b2:b6:52:75:69:34:49:c3:f9:3c:75:87:aa:e2:a5:4b: ca:f4:6b:8c:cf:99:55:a4:14:54:b8:53:6f:6b:69:96:01:30: 3e:70:11:04:47:d7:d9:62:cc:05:fb:0a:f5:91:4b:f1:6b:ac: fa:8f:73:b2:8a:6d:2f:dd:df:85:65:5e:a6:37:3a:4e:f2:70: 53:1c:a7:27:99:27:c0:dd:be:52:83:d0:3c:52:3c:cd:b8:31: 73:06:a1:c7:e5:d6:cf:1f:ca:58:50:c6:d8:0d:de:34:64:16: 4a:18:d0:a9:e5:17:e0:4e:f5:26:9c:1d:24:cf:5f:85:da:65: 5e:fe:35:f8:69:f2:e8:e8:14:d6:ee:8e:23:49:d1:4e:25:fa: e7:d4:6a:94:18:ae:05:28:67:d8:c0:71:5e:38:10:3d:8b:07: e3:71:06:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpJyKWcB2hiiAfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NDMzZjU5NWEtNzI5Ny00MjY0LWI5ZjQtN2JmZWI0M2VkNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWA5E3Cs/4DVWmfqsXs0MzzAsK+w6md47+Yi ldSdtQvKzDO5VO6i8Ma0zwsJ1gKhpSCuhI0UFUXmN8C/zxv2EnEjgyd9C7zSM4wN dvkynfaMWY4EfZPjAqurVJXi6DLP77sKMZYHeYnxjimT11Ar4fRBWAusbc0gstbj fsInUGh3BdetooVITnHlN8rtBV9nKMcg6ClBblNI7YOYcoHY6iYenzqJs+bDi5f6 lYVqTeggUjRqXCGJDwSGGZ057vp7b8THYonC/V72ilFhVFUs/2lmZgEI2XoYZqQk MrsiVt54FNzvD8+WPNDMSZyQ2pu0InlnVlNZKOamZYfVsLgm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0JsTybEpGdFU1YTDCsBkk29H/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZjk5ZGYwZWUtNTVjNi0z MGYyLTlmNzAtNDcxNTE0M2ViNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1GgDFdgqB/OHuoZLsSopnBhMIU4ufjF7UuMi7vaaXdP2M6ABg1wVw6 CiLocdBWqUqv//tF18CysO2Y8R/Uohn8naI8Y6WOE+HNSoOiHxHHhGb1iQWjwzrQ ELjnsrZSdWk0ScP5PHWHquKlS8r0a4zPmVWkFFS4U29raZYBMD5wEQRH19lizAX7 CvWRS/FrrPqPc7KKbS/d34VlXqY3Ok7ycFMcpyeZJ8DdvlKD0DxSPM24MXMGocfl 1s8fylhQxtgN3jRkFkoY0KnlF+BO9SacHSTPX4XaZV7+Nfhp8ujoFNbujiNJ0U4l +ufUapQYrgUoZ9jAcV44ED2LB+NxBtU= -----END CERTIFICATE-----Generated at Sun Apr 27 18:52:16 2025 by rpki-client