$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa File: 4d73d93c-8416-3f62-aa95-6e5853685568.roa (raw, json) Hash identifier: 3ssSsIQYaH5fGBu/j9WyldRxEOyOKqu0XpsW1p2cj4k= Subject key identifier: F4:37:E3:49:69:C0:01:86:89:33:C1:8F:24:49:00:75:9D:FB:B1:0B Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849D42FA0F244509FEACDEDAAD7 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33558 IP address blocks: 192.228.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a0:f2:44:50:9f:ea:cd:ed:aa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c2960525-96fb-4f8a-bf7a-e5fbede673d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:57:f1:7c:87:8d:37:77:19:05:b8:4a:e5: b7:ac:d4:ff:80:61:2d:b5:f1:4b:a3:f2:a0:22:ad: 2a:32:47:90:4b:04:b8:0d:19:06:4f:80:bf:86:aa: 38:8b:9c:48:58:11:0d:ad:4e:3f:9c:bd:14:82:c3: 1c:d3:81:33:8e:be:bc:78:d5:7f:14:df:0b:91:ea: 37:e0:b5:91:48:62:10:31:23:87:2a:8d:aa:9a:70: 4f:8f:94:62:17:74:db:94:fe:ab:a4:d0:7b:f0:7f: 29:74:45:b7:4c:2c:81:8e:9b:11:90:0c:97:d4:97: 53:32:59:44:08:47:94:e6:3b:7f:45:91:25:05:48: 1a:e9:00:c7:37:97:58:57:f5:77:79:05:4a:7c:c3: 76:71:cb:b6:7f:31:d0:f6:71:c0:81:ea:98:93:0c: ef:d6:ea:7a:ad:32:a2:0c:86:30:f5:f2:06:d2:29: 4b:c9:29:9b:6e:9c:e1:53:b5:27:bf:40:ae:25:86: 5b:f8:3f:f0:d1:b8:dd:dd:f6:70:c8:94:a6:ec:fb: da:31:0c:90:3d:39:51:3a:34:04:53:0e:e9:cc:bb: 82:b4:78:ad:e0:7d:45:c0:09:b4:1d:dd:af:a0:bc: 4d:97:58:ec:12:69:ea:dd:10:58:56:43:bd:34:31: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:E3:49:69:C0:01:86:89:33:C1:8F:24:49:00:75:9D:FB:B1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4d73d93c-8416-3f62-aa95-6e5853685568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:83:d1:50:df:bf:22:2a:cc:75:bc:9b:8b:4f:aa:20:52:c9: d8:03:28:f4:3e:b5:37:aa:9d:2c:e9:d3:e5:bf:bd:8f:94:85: 5f:41:e2:3e:52:a8:a1:cf:e1:1f:4c:46:91:10:1a:65:0e:fb: 9a:25:0e:21:a3:44:b7:14:49:dd:d4:0a:bc:80:3f:4f:ea:2b: cf:e7:64:82:6d:59:da:5b:6b:4b:bd:bb:63:56:37:28:fa:6e: 95:30:05:84:34:d2:fb:4a:8b:04:4b:88:80:f5:fe:03:3a:ac: d3:b1:45:83:08:f4:9d:9c:d0:2d:37:cf:e7:52:d5:78:a4:0a: a8:4d:9d:20:20:61:d2:43:3a:00:31:ef:8a:ca:7a:86:44:bb: 21:bc:fd:92:e5:55:84:3b:98:38:23:e7:d1:64:e8:22:fb:bd: 9f:f9:a7:08:48:1f:a5:df:1f:94:a7:56:e9:69:30:8e:82:f4: 58:c6:11:66:eb:88:4d:2d:8e:9b:e1:27:41:ff:90:11:c5:1b: 35:4c:98:64:af:79:3e:ae:d8:a7:7a:ae:8a:66:50:e3:1b:00: fa:7e:b0:fb:48:fe:c2:0c:59:87:7a:1c:ff:11:23:40:ff:a3: 8f:96:d6:5b:fc:8d:32:d8:e7:60:84:9d:b4:08:43:2a:49:f3: d5:8b:82:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6DyRFCf6s3tqtcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzI5NjA1MjUtOTZmYi00ZjhhLWJmN2EtZTVmYmVkZTY3M2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q9X8XyHjTd3GQW4SuW3rNT/gGEttfFLo/Kg Iq0qMkeQSwS4DRkGT4C/hqo4i5xIWBENrU4/nL0UgsMc04Ezjr68eNV/FN8Lkeo3 4LWRSGIQMSOHKo2qmnBPj5RiF3TblP6rpNB78H8pdEW3TCyBjpsRkAyX1JdTMllE CEeU5jt/RZElBUga6QDHN5dYV/V3eQVKfMN2ccu2fzHQ9nHAgeqYkwzv1up6rTKi DIYw9fIG0ilLySmbbpzhU7Unv0CuJYZb+D/w0bjd3fZwyJSm7PvaMQyQPTlROjQE Uw7pzLuCtHit4H1FwAm0Hd2voLxNl1jsEmnq3RBYVkO9NDGU8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ340lpwAGGiTPBjyRJAHWd+7ELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNGQ3M2Q5M2MtODQxNi0z ZjYyLWFhOTUtNmU1ODUzNjg1NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2D0VDfvyIqzHW8m4tPqiBSydgDKPQ+tTeqnSzp0+W/vY+UhV9B4j5S qKHP4R9MRpEQGmUO+5olDiGjRLcUSd3UCryAP0/qK8/nZIJtWdpba0u9u2NWNyj6 bpUwBYQ00vtKiwRLiID1/gM6rNOxRYMI9J2c0C03z+dS1XikCqhNnSAgYdJDOgAx 74rKeoZEuyG8/ZLlVYQ7mDgj59Fk6CL7vZ/5pwhIH6XfH5SnVulpMI6C9FjGEWbr iE0tjpvhJ0H/kBHFGzVMmGSveT6u2Kd6ropmUOMbAPp+sPtI/sIMWYd6HP8RI0D/ o4+W1lv8jTLY52CEnbQIQypJ89WLgkg= -----END CERTIFICATE-----Generated at Tue Jun 17 04:42:16 2025 by rpki-client