$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa File: fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa (raw, json) Hash identifier: s4FQGH0LIU9mtrTcb9CBgv+KtJqld6NFkE0YDsPMP2o= Subject key identifier: 84:74:9C:4D:E2:E5:37:94:06:E9:AE:C0:05:03:79:0A:14:F2:18:87 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F43285849088172C620B7BC165AC5A400 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 53991 IP address blocks: 199.193.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:72:c6:20:b7:bc:16:5a:c5:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0a1f34b6-89d5-47f0-a7f0-69177948e4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:21:5a:7c:01:6d:28:c4:24:5c:29:49:6f: 38:63:db:62:42:72:5e:68:61:52:13:ed:9b:40:e2: 89:45:7a:b2:dc:49:dc:4c:13:98:27:4e:6e:40:ea: eb:ae:40:1d:0f:f4:9f:f0:bd:10:01:66:7c:4c:7e: a2:57:43:6b:66:e8:c8:18:0f:8b:5e:00:9b:e0:52: 26:f7:c3:d9:22:58:ef:fa:aa:72:c1:68:53:38:4c: 9c:04:65:f5:28:0a:f0:b5:7b:86:41:29:62:29:46: 58:bb:b6:0e:c9:f7:f5:11:d7:14:24:26:d2:4f:f9: 71:1a:23:31:0a:86:30:86:42:b5:0c:cd:3d:3a:80: 11:08:05:34:70:d7:49:9c:30:c9:91:8d:c3:7d:67: 0d:d7:3b:a1:38:24:d7:c4:e7:10:da:c4:e0:3a:66: 49:e1:64:a8:bc:e3:11:af:13:7f:51:ef:c9:5f:b5: 70:6e:21:44:fd:12:eb:e9:50:ba:be:f4:6b:fa:29: e4:4b:3a:b2:e3:bf:80:82:5c:4d:33:c7:c0:a2:bb: 87:17:02:2f:9a:97:22:2c:75:2a:73:3f:74:d6:80: d9:8e:b8:0a:f6:54:7f:28:cd:cc:f1:b4:40:ae:9b: a7:1d:dd:6f:ae:95:c6:f0:74:2e:85:be:95:02:46: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:9C:4D:E2:E5:37:94:06:E9:AE:C0:05:03:79:0A:14:F2:18:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 199.193.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:da:0e:7c:f2:35:53:14:10:53:67:6d:d1:60:f7:5e:bf:55: f4:b7:15:3a:68:cd:32:71:6d:6c:19:77:4d:98:4f:12:83:92: 5a:17:31:a1:d1:10:d2:85:17:1e:a8:e9:1b:3d:40:a5:d6:f5: 06:9f:01:05:da:d5:1c:61:36:76:07:ef:84:c6:9f:68:5f:89: d9:61:f0:eb:ce:52:5b:3c:3e:40:fb:7a:ea:ca:55:48:f2:67: f5:10:1c:cf:b5:45:5b:30:15:ae:4b:4c:ee:e2:ba:c1:44:8e: 89:a4:56:62:16:5e:90:7b:de:9c:49:72:21:66:a2:bd:e7:73: d9:13:51:97:ce:d3:e7:ca:3f:29:1f:ae:3a:a7:d1:19:ed:c6: 30:45:9f:d3:8d:98:61:d7:9e:0c:1e:0f:94:8b:f5:46:0a:2f: 29:43:ae:21:27:f7:19:b9:82:12:38:bd:c0:e6:e9:e8:4d:3c: 8e:ba:f9:58:16:e7:f2:ad:a5:60:2a:d3:67:d2:c2:6b:98:94: 32:a6:09:19:a5:f1:a2:46:8b:30:5a:6c:0e:4c:73:df:29:78: 5e:fb:db:3d:d8:cd:bd:31:fd:5c:70:b2:e3:e7:e5:fa:5a:0e: 04:71:b4:19:29:b5:e2:66:62:67:5c:63:b5:d6:aa:23:9c:30: 64:54:21:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXLGILe8FlrFpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGExZjM0YjYtODlkNS00N2YwLWE3ZjAtNjkxNzc5NDhlNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSEhWnwBbSjEJFwpSW84Y9tiQnJeaGFSE+2b QOKJRXqy3EncTBOYJ05uQOrrrkAdD/Sf8L0QAWZ8TH6iV0NrZujIGA+LXgCb4FIm 98PZIljv+qpywWhTOEycBGX1KArwtXuGQSliKUZYu7YOyff1EdcUJCbST/lxGiMx CoYwhkK1DM09OoARCAU0cNdJnDDJkY3DfWcN1zuhOCTXxOcQ2sTgOmZJ4WSovOMR rxN/Ue/JX7VwbiFE/RLr6VC6vvRr+inkSzqy47+AglxNM8fAoruHFwIvmpciLHUq cz901oDZjrgK9lR/KM3M8bRArpunHd1vrpXG8HQuhb6VAkZxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR0nE3i5TeUBumuwAUDeQoU8hiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvZmJmZTMzNzktZTJhNC0z Y2U1LTlhMjYtZjQ0MzA4Yzg5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPaDnzyNVMUEFNnbdFg916/VfS3FTpozTJxbWwZd02YTxKDkloXMaHR ENKFFx6o6Rs9QKXW9QafAQXa1RxhNnYH74TGn2hfidlh8OvOUls8PkD7eurKVUjy Z/UQHM+1RVswFa5LTO7iusFEjomkVmIWXpB73pxJciFmor3nc9kTUZfO0+fKPykf rjqn0RntxjBFn9ONmGHXngweD5SL9UYKLylDriEn9xm5ghI4vcDm6ehNPI66+VgW 5/KtpWAq02fSwmuYlDKmCRml8aJGizBabA5Mc98peF772z3Yzb0x/VxwsuPn5fpa DgRxtBkpteJmYmdcY7XWqiOcMGRUIQw= -----END CERTIFICATE-----Generated at Mon Apr 28 07:51:30 2025 by rpki-client