$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa File: f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa (raw, json) Hash identifier: PY/xkxLUltaAm58jHCnzho4FoiNu46wSvPAQamiBDN0= Subject key identifier: 4C:AD:93:77:39:8E:4A:B1:75:7A:86:3A:C1:78:D7:72:24:B4:E4:A1 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849393E7782BBDFB9237463C940 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 1280 IP address blocks: 192.158.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:77:82:bb:df:b9:23:74:63:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=2674d85a-8f7e-4f15-80f5-18d1953fab98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:07:c8:3c:ca:26:10:37:f0:5f:7e:56:be: 85:9f:c2:95:46:7e:ae:e9:9b:df:b7:81:e0:51:14: dc:6c:07:08:a4:cb:98:36:4d:ab:4e:3b:71:e2:92: eb:25:df:08:30:28:c5:cf:c4:6e:a1:dd:79:57:a2: e9:b4:fb:75:73:97:75:09:ed:d8:14:02:e9:11:cc: ec:4e:a0:37:58:24:31:63:fd:f0:2b:46:79:76:f2: 30:f2:06:b1:df:d9:31:27:12:3e:64:45:9e:25:3c: 13:d2:19:aa:37:12:03:c8:5c:85:62:24:48:83:b1: 54:52:e6:06:ef:76:8b:cb:8b:aa:ce:26:61:6a:a8: 87:0c:bd:25:bb:f1:94:cb:cb:23:33:01:ad:9a:1d: 00:e5:5d:99:1b:0b:d6:77:b6:c4:71:3f:a2:8d:4d: 86:4a:a9:cc:78:09:40:27:30:14:84:e5:50:e8:45: e0:63:fc:e7:03:28:ba:5f:14:07:be:bf:f8:57:1a: 68:a2:0f:e9:08:1e:6e:8b:5b:6a:70:e8:fe:b2:e0: ff:3e:2e:48:1a:f0:f8:cf:92:d2:6e:b9:9a:da:dd: 88:d6:4b:2a:f2:b0:b0:c3:a9:ea:e6:21:09:a9:5c: 34:cf:90:f5:0c:46:ca:c8:89:e0:25:d7:fb:0d:7b: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AD:93:77:39:8E:4A:B1:75:7A:86:3A:C1:78:D7:72:24:B4:E4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f445d3e8-d349-3125-bd4c-6fd4c0d324c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.158.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bb:2e:75:d7:10:e8:07:74:c3:8f:65:01:f4:3d:6d:8a:5e: 99:53:44:b2:d5:ce:78:03:6c:47:c4:c4:83:92:45:7f:41:47: 0c:61:73:cb:fc:09:6c:82:f9:ed:61:a5:ef:26:e2:a4:fc:27: 9a:52:ca:5e:89:ae:ee:dc:64:1c:00:5d:69:e4:57:21:23:49: 81:b6:97:c1:b7:74:59:11:f3:a9:ba:4c:dc:f0:c4:ff:cf:99: b0:36:a0:15:4c:70:d4:9e:a0:9a:d1:c3:9f:c0:6e:e9:44:db: 96:5f:31:34:90:a9:44:81:e8:2c:6f:3d:69:c5:23:a0:a8:90: a1:88:22:83:ad:cc:f8:79:e7:42:97:6b:ba:4c:54:d4:11:61: bd:38:4f:b5:0e:d5:7c:1c:8c:69:d7:9d:58:ce:7e:98:df:97: 9e:77:ae:59:ce:82:1b:16:d7:58:28:88:15:dd:48:d4:dd:75: 7d:4d:ff:0c:e8:a5:5c:25:9a:d8:d9:62:c7:21:84:0a:65:af: 6a:f3:3c:1b:d4:a7:42:85:b0:d7:5f:56:a4:41:e3:1e:41:71: 41:89:e1:73:6a:88:86:88:09:e7:9c:21:f4:b2:0f:93:5b:4c: 68:ad:73:eb:29:60:da:0e:b4:8d:c7:7b:59:f6:95:b5:38:99: bb:d4:54:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PneCu9+5I3RjyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MjY3NGQ4NWEtOGY3ZS00ZjE1LTgwZjUtMThkMTk1M2ZhYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDsHyDzKJhA38F9+Vr6Fn8KVRn6u6Zvft4Hg URTcbAcIpMuYNk2rTjtx4pLrJd8IMCjFz8Ruod15V6LptPt1c5d1Ce3YFALpEczs TqA3WCQxY/3wK0Z5dvIw8gax39kxJxI+ZEWeJTwT0hmqNxIDyFyFYiRIg7FUUuYG 73aLy4uqziZhaqiHDL0lu/GUy8sjMwGtmh0A5V2ZGwvWd7bEcT+ijU2GSqnMeAlA JzAUhOVQ6EXgY/znAyi6XxQHvr/4Vxpoog/pCB5ui1tqcOj+suD/Pi5IGvD4z5LS brma2t2I1ksq8rCww6nq5iEJqVw0z5D1DEbKyIngJdf7DXuMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEytk3c5jkqxdXqGOsF413IktOShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZjQ0NWQzZTgtZDM0OS0z MTI1LWJkNGMtNmZkNGMwZDMyNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC7LnXXEOgHdMOPZQH0PW2KXplTRLLVzngDbEfExIOSRX9BRwxhc8v8 CWyC+e1hpe8m4qT8J5pSyl6Jru7cZBwAXWnkVyEjSYG2l8G3dFkR86m6TNzwxP/P mbA2oBVMcNSeoJrRw5/AbulE25ZfMTSQqUSB6CxvPWnFI6CokKGIIoOtzPh550KX a7pMVNQRYb04T7UO1XwcjGnXnVjOfpjfl553rlnOghsW11goiBXdSNTddX1N/wzo pVwlmtjZYschhAplr2rzPBvUp0KFsNdfVqRB4x5BcUGJ4XNqiIaICeecIfSyD5Nb TGitc+spYNoOtI3He1n2lbU4mbvUVOE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:14 2025 by rpki-client