$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa File: f6631a5a-2668-398c-87e1-c8c974958b25.roa (raw, json) Hash identifier: 2bhBaAX4K6Jfc9Wg5ceONADmUEaNCvEpxRQBd3USnzg= Subject key identifier: 00:F9:77:5F:B0:5D:1D:E7:0D:09:F4:27:9C:DE:01:A2:C2:2F:3B:9A Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F432858498E64880E630F20D1316C1AC0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 204325 IP address blocks: 192.228.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:88:0e:63:0f:20:d1:31:6c:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=b8a8fa08-01ca-49dc-bcb8-c58818260b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:12:d6:c8:0b:03:d7:45:cd:01:89:d5:55: 14:d8:ff:aa:ec:3f:f7:40:6d:42:1c:83:90:dd:4f: 39:62:10:e7:b7:99:bc:a5:13:4a:fd:7b:2d:88:9e: e8:4a:53:00:60:34:fa:85:79:2c:30:0a:f6:86:6d: a8:00:83:1e:7d:d4:e1:64:0d:11:c9:98:1f:93:ed: cf:47:19:ac:ff:50:84:b1:72:0c:96:3e:ad:be:94: d0:74:a3:be:0e:84:6d:50:89:ab:9b:12:e9:4a:49: 04:82:50:0d:87:a4:dc:c7:18:da:3e:12:49:3a:cd: 19:db:b4:16:91:c5:37:2c:8a:08:e4:02:e0:0b:2d: 2e:82:d8:0c:1b:6e:b7:19:7b:b6:e4:6c:d4:78:32: c1:64:fa:3a:4a:4a:4e:a0:12:9a:0c:26:6c:84:87: 84:5e:c3:dd:d2:c1:52:40:23:60:ef:8f:ac:ff:eb: df:6f:67:72:64:37:59:22:59:48:be:f1:de:d0:c3: 4c:ad:7d:72:0b:d0:b4:04:dc:9a:4a:d2:5d:1d:99: b1:45:85:7d:ee:f7:1b:d7:6a:43:91:17:6f:0c:19: a1:0a:2e:5e:1b:10:d7:c1:80:c3:38:5d:33:e2:74: 30:85:f8:ce:0d:57:c9:8d:10:e0:90:02:32:5c:da: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:77:5F:B0:5D:1D:E7:0D:09:F4:27:9C:DE:01:A2:C2:2F:3B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bc:4f:9d:8a:a5:c3:6c:ca:6e:1b:4f:d3:7a:50:2a:45:e3: 3f:95:57:b0:ff:ee:ca:5b:d7:8c:d6:50:c0:47:dd:64:7b:16: 03:43:d0:2f:e1:75:39:7e:bc:c6:d2:af:4e:8b:b3:35:99:58: 16:56:f0:0b:a5:99:92:cd:d1:79:01:5b:87:d0:b6:c5:01:6d: 71:9c:8c:11:0f:ff:65:64:5b:79:31:41:0c:02:e2:4d:e7:53: 97:01:aa:c4:1c:94:b4:af:6c:73:93:35:62:0e:f5:c6:35:0f: 61:a6:31:22:97:20:6b:77:82:bd:2f:ff:74:61:bf:af:c3:b1: e4:f5:e9:78:74:a1:99:3d:7b:81:21:1d:96:e2:f3:23:f8:17: 98:b2:bd:56:df:9a:c0:47:95:8c:e2:1c:68:0d:93:b8:87:46: 81:6a:c6:79:8b:b4:2f:5b:0b:57:af:11:0a:82:12:39:be:95: b6:3d:d1:5a:19:a6:7e:a5:2f:46:aa:13:67:6b:a0:4d:92:6f: 96:1e:46:48:53:33:fc:bf:72:39:bc:b9:2c:51:90:fd:d5:33: d2:b0:5f:db:65:8e:e4:3d:70:04:da:67:1e:69:66:e5:f1:11: b5:da:cd:ee:a1:73:70:d1:77:35:07:7a:54:00:f8:c8:85:a5: c4:7a:8f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIgOYw8g0TFsGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjhhOGZhMDgtMDFjYS00OWRjLWJjYjgtYzU4ODE4MjYwYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AIS1sgLA9dFzQGJ1VUU2P+q7D/3QG1CHIOQ 3U85YhDnt5m8pRNK/XstiJ7oSlMAYDT6hXksMAr2hm2oAIMefdThZA0RyZgfk+3P Rxms/1CEsXIMlj6tvpTQdKO+DoRtUImrmxLpSkkEglANh6TcxxjaPhJJOs0Z27QW kcU3LIoI5ALgCy0ugtgMG263GXu25GzUeDLBZPo6SkpOoBKaDCZshIeEXsPd0sFS QCNg74+s/+vfb2dyZDdZIllIvvHe0MNMrX1yC9C0BNyaStJdHZmxRYV97vcb12pD kRdvDBmhCi5eGxDXwYDDOF0z4nQwhfjODVfJjRDgkAIyXNrvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD5d1+wXR3nDQn0J5zeAaLCLzuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZjY2MzFhNWEtMjY2OC0z OThjLTg3ZTEtYzhjOTc0OTU4YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwORYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC8T52KpcNsym4bT9N6UCpF4z+VV7D/7spb14zWUMBH3WR7FgND0C/h dTl+vMbSr06LszWZWBZW8AulmZLN0XkBW4fQtsUBbXGcjBEP/2VkW3kxQQwC4k3n U5cBqsQclLSvbHOTNWIO9cY1D2GmMSKXIGt3gr0v/3Rhv6/DseT16Xh0oZk9e4Eh HZbi8yP4F5iyvVbfmsBHlYziHGgNk7iHRoFqxnmLtC9bC1evEQqCEjm+lbY90VoZ pn6lL0aqE2droE2Sb5YeRkhTM/y/cjm8uSxRkP3VM9KwX9tljuQ9cATaZx5pZuXx EbXaze6hc3DRdzUHelQA+MiFpcR6j5g= -----END CERTIFICATE-----Generated at Tue Apr 29 07:51:46 2025 by rpki-client