$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa File: da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa (raw, json) Hash identifier: NDNrQ0gxj6rPc4nOQDXkTsuHEx3Im+f3s4GO6kGhD5U= Subject key identifier: 90:FA:C3:14:1D:3A:BA:7A:FC:93:36:D1:50:2F:DD:15:A7:DA:5D:C3 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F65BCE79B85B59D0141D2B80 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30133 IP address blocks: 192.228.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ce:79:b8:5b:59:d0:14:1d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d25089c1-3cf8-4e00-a6d3-0011d8becefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:c1:b9:26:31:f2:61:09:65:23:03:f6:91: a5:08:b6:73:cf:ca:da:ee:61:37:87:63:5d:4e:30: fb:f7:d7:be:dc:86:0e:e8:6b:da:38:cb:41:bb:ff: 52:d3:1f:7d:70:4b:26:a9:ea:1f:10:a5:86:b6:17: d1:48:ea:04:9b:9b:6c:8e:90:50:27:7a:f5:af:04: 6d:49:20:a7:51:ee:15:6b:05:ff:09:80:90:89:d9: d1:aa:89:75:9a:ed:ce:91:64:55:a8:b2:0f:68:d6: a4:49:6c:02:77:e3:d0:31:f2:5b:bc:20:53:6f:71: f4:c5:32:a4:d6:27:a6:19:fc:65:81:8f:59:a1:0c: 88:93:bc:2a:89:42:92:8a:a0:b7:34:e5:95:d8:0f: ac:41:cf:2c:07:a1:09:b5:20:c4:24:7d:78:8e:26: 8b:ed:73:77:7d:d2:35:be:97:92:55:3e:0d:dc:50: 93:0c:ac:97:d5:2a:87:09:c9:a6:a3:74:67:f0:73: ee:64:52:33:ab:0d:d6:5a:03:7b:77:c8:1d:82:8a: e0:1a:b3:82:12:c3:7c:c3:c0:4e:96:ed:69:ef:3d: 4e:64:5f:bf:e1:a0:39:7c:10:d0:81:b6:7f:07:a8: 48:30:e4:e9:78:9e:43:d9:8c:c8:9b:64:b0:8b:c7: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:C3:14:1D:3A:BA:7A:FC:93:36:D1:50:2F:DD:15:A7:DA:5D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:39:66:67:6d:60:32:fa:1a:de:e1:f5:fd:0d:93:39:cb:ac: cb:c0:9b:0e:e2:6b:12:23:38:2c:51:f0:2f:fa:7e:74:ff:c8: d8:33:45:18:f4:9d:e5:86:b8:c9:93:7c:f8:1b:88:b1:9d:65: 90:7f:fd:9f:6f:0f:2f:c9:0d:27:98:f0:8a:dd:c6:06:25:78: e2:92:89:31:2e:64:9a:36:c1:ca:92:5d:58:2a:61:45:8f:c4: b3:d5:0f:4f:b0:02:45:87:56:c3:9e:d4:d8:85:e9:f4:c5:7f: 66:62:c1:0b:79:49:2d:6c:ee:f3:6a:93:73:09:cd:7c:d1:1f: a4:ff:f7:ba:b6:1d:1e:cf:de:a0:46:45:0c:49:1a:59:7b:0b: b1:e2:db:93:33:08:bf:e4:07:b7:14:a8:c3:7c:cf:bc:79:b5: de:56:62:69:eb:96:eb:51:b7:ae:66:41:bb:6d:5c:e6:7a:b5: 35:ac:1d:65:2f:02:79:84:3a:c6:5a:0b:2d:66:62:e3:5d:76: a8:b0:72:08:09:c8:58:1c:9c:da:3a:20:ad:0e:ef:6e:b0:03: c4:fe:46:a4:76:24:68:11:3f:50:c9:f4:d0:79:9f:b7:48:92: 70:cf:44:7f:70:dd:18:66:5c:26:af:30:04:39:dd:f6:cd:38: 18:10:9b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W855uFtZ0BQdK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDI1MDg5YzEtM2NmOC00ZTAwLWE2ZDMtMDAxMWQ4YmVjZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA3BuSYx8mEJZSMD9pGlCLZzz8ra7mE3h2Nd TjD799e+3IYO6GvaOMtBu/9S0x99cEsmqeofEKWGthfRSOoEm5tsjpBQJ3r1rwRt SSCnUe4VawX/CYCQidnRqol1mu3OkWRVqLIPaNakSWwCd+PQMfJbvCBTb3H0xTKk 1iemGfxlgY9ZoQyIk7wqiUKSiqC3NOWV2A+sQc8sB6EJtSDEJH14jiaL7XN3fdI1 vpeSVT4N3FCTDKyX1SqHCcmmo3Rn8HPuZFIzqw3WWgN7d8gdgorgGrOCEsN8w8BO lu1p7z1OZF+/4aA5fBDQgbZ/B6hIMOTpeJ5D2YzIm2Swi8dHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD6wxQdOrp6/JM20VAv3RWn2l3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZGE2Y2QxN2UtNTAyMy0z ZDEyLThiOTktYTVkNGY5OGRhZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY5ZmdtYDL6Gt7h9f0NkznLrMvAmw7iaxIjOCxR8C/6fnT/yNgzRRj0 neWGuMmTfPgbiLGdZZB//Z9vDy/JDSeY8IrdxgYleOKSiTEuZJo2wcqSXVgqYUWP xLPVD0+wAkWHVsOe1NiF6fTFf2ZiwQt5SS1s7vNqk3MJzXzRH6T/97q2HR7P3qBG RQxJGll7C7Hi25MzCL/kB7cUqMN8z7x5td5WYmnrlutRt65mQbttXOZ6tTWsHWUv AnmEOsZaCy1mYuNddqiwcggJyFgcnNo6IK0O726wA8T+RqR2JGgRP1DJ9NB5n7dI knDPRH9w3RhmXCavMAQ53fbNOBgQmxk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:28 2025 by rpki-client