$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/33d41e6c-e93c-3627-abe8-2b5ce0205d1b.roa File: 33d41e6c-e93c-3627-abe8-2b5ce0205d1b.roa (raw, json) Hash identifier: FbJAV2czANOD32dpKSkE2vQPf+fwFztZWe0sxCRLZ04= Subject key identifier: 1E:4E:0D:D0:8A:E0:1D:11:3D:0F:02:AE:15:45:D4:57:6C:00:65:F9 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849D42FA05B9D5AF448DF11AC80 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/33d41e6c-e93c-3627-abe8-2b5ce0205d1b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 30124 IP address blocks: 192.228.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a0:5b:9d:5a:f4:48:df:11:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=29f0788d-d600-4deb-8b73-1a31221624c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:bc:e3:ff:ad:31:65:db:30:fb:1b:45:a3: b7:de:ae:67:d8:48:9d:36:74:9d:b3:f9:9a:2d:9b: 7b:e0:10:39:37:f1:03:25:48:71:1c:d8:4c:f1:3d: b7:86:93:c4:2c:8f:7c:e5:a4:70:e7:6e:b5:98:80: 8b:d4:9f:76:fe:68:74:80:6d:9c:03:82:32:d7:c4: c5:d3:a8:60:6d:f5:ec:b7:f4:da:0d:5a:59:3f:40: fa:a4:fb:ce:d3:78:1a:c1:0f:89:81:39:a3:68:28: 34:50:d7:0a:a1:f6:ca:13:0d:96:c0:b8:e0:ce:2c: fb:df:f5:17:b6:94:9b:f0:cb:b6:4c:9f:05:b3:80: 9d:ee:59:84:d0:06:b9:ff:45:4e:77:51:21:83:4c: db:6b:bc:ec:6e:c3:9d:b4:0b:b1:ad:5e:ff:e5:72: 67:5a:c3:29:f1:30:6f:96:7b:84:54:2a:9a:01:89: 9f:00:5b:d9:3f:af:35:fd:d5:91:3f:7c:09:4c:60: ce:c0:f7:aa:65:82:98:f0:4c:dd:06:15:2a:14:7f: 13:56:67:c8:ff:61:4b:7c:72:c5:04:c3:db:1d:2d: bd:44:cc:da:a3:ca:f5:9e:73:5e:bc:3b:19:40:0d: d3:ba:6b:e0:41:59:0e:63:25:fc:40:83:34:25:8f: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:0D:D0:8A:E0:1D:11:3D:0F:02:AE:15:45:D4:57:6C:00:65:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/33d41e6c-e93c-3627-abe8-2b5ce0205d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c9:42:c4:f6:85:21:53:36:f8:18:11:4d:88:35:9f:af:0b: c9:ec:7c:e2:2b:f8:bf:44:e9:a2:37:25:8e:89:ea:40:f7:e1: c5:77:dc:b0:59:26:c3:9e:0f:89:2e:85:72:63:be:3d:d7:c7: aa:90:8e:ff:e0:a4:60:c4:50:fd:c5:f6:15:0c:14:d2:5c:ea: 02:09:ab:ab:20:b2:56:c0:1a:ad:81:79:14:d4:7a:e5:21:94: f4:66:b0:8d:f4:e6:0d:37:c5:e7:dd:d4:ba:23:35:b3:91:0e: 89:4b:8b:77:7f:49:86:cd:f0:ff:0d:31:8e:bd:e5:46:84:a4: 1e:a1:ed:b4:66:0b:2d:be:af:83:a4:66:a1:07:68:03:3d:cc: 42:11:56:9b:61:0c:0d:9f:f0:f8:e3:07:ae:b4:b3:c5:e8:74: 8a:8e:bb:ea:2d:44:a1:7f:6e:fe:83:70:48:03:57:5f:ed:fa: 80:eb:6a:b2:5b:3e:05:4c:80:fc:76:b1:ba:f9:7b:f5:5c:e8: 80:21:e5:50:fa:e6:c9:48:f5:f2:17:f5:f9:0a:a1:93:a0:a8: 89:73:2e:ac:26:ac:6b:30:90:8d:4f:c5:52:b2:65:e2:3d:dd: 04:e1:b8:95:05:45:61:13:34:5d:76:1c:98:b5:47:e2:14:21: d9:ba:07:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6BbnVr0SN8RrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjlmMDc4OGQtZDYwMC00ZGViLThiNzMtMWEzMTIyMTYyNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbe84/+tMWXbMPsbRaO33q5n2EidNnSds/ma LZt74BA5N/EDJUhxHNhM8T23hpPELI985aRw5261mICL1J92/mh0gG2cA4Iy18TF 06hgbfXst/TaDVpZP0D6pPvO03gawQ+JgTmjaCg0UNcKofbKEw2WwLjgziz73/UX tpSb8Mu2TJ8Fs4Cd7lmE0Aa5/0VOd1Ehg0zba7zsbsOdtAuxrV7/5XJnWsMp8TBv lnuEVCqaAYmfAFvZP681/dWRP3wJTGDOwPeqZYKY8EzdBhUqFH8TVmfI/2FLfHLF BMPbHS29RMzao8r1nnNevDsZQA3TumvgQVkOYyX8QIM0JY/NUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5ODdCK4B0RPQ8CrhVF1FdsAGX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzNkNDFlNmMtZTkzYy0z NjI3LWFiZTgtMmI1Y2UwMjA1ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjJQsT2hSFTNvgYEU2INZ+vC8nsfOIr+L9E6aI3JY6J6kD34cV33LBZ JsOeD4kuhXJjvj3Xx6qQjv/gpGDEUP3F9hUMFNJc6gIJq6sgslbAGq2BeRTUeuUh lPRmsI305g03xefd1LojNbORDolLi3d/SYbN8P8NMY695UaEpB6h7bRmCy2+r4Ok ZqEHaAM9zEIRVpthDA2f8PjjB660s8XodIqOu+otRKF/bv6DcEgDV1/t+oDrarJb PgVMgPx2sbr5e/Vc6IAh5VD65slI9fIX9fkKoZOgqIlzLqwmrGswkI1PxVKyZeI9 3QThuJUFRWETNF12HJi1R+IUIdm6B+8= -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:49 2025 by rpki-client