$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa File: 41d21d52-4d7f-37ff-865d-7fef04f2a966.roa (raw, json) Hash identifier: zlnOQ8wBOKpdtQgqSwXSED3/ukKw040XKdjD/6v1J8Y= Subject key identifier: 7A:BF:22:85:40:DD:B1:67:4A:59:AC:25:A2:F3:D1:4C:C2:88:2D:CD Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F43285849350E92615A222C72532F75B4 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 396905 IP address blocks: 192.43.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:92:61:5a:22:2c:72:53:2f:75:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9248d706-9229-4f40-8872-025a20170db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:69:00:89:d1:76:96:d3:7e:0d:e6:44:8a: eb:7f:76:09:5c:a6:69:3a:5a:3d:a2:9e:3d:fb:27: 0b:13:fe:dd:c0:d3:e4:e9:31:c3:5d:97:32:97:7f: f5:83:20:4c:d7:8b:6d:bb:39:6a:22:82:f8:ea:10: 53:bb:64:14:fb:13:c8:75:ff:b6:7a:27:3b:d4:35: d1:1d:8c:2d:a1:fb:99:cb:aa:e4:08:85:2f:54:c2: 38:ef:65:82:b8:6b:1a:b6:f7:77:c0:95:1f:f8:41: 54:fa:52:f0:c1:b5:6c:dc:7c:ce:83:ef:fd:c8:84: 04:1f:6b:9c:91:12:22:2a:46:a1:5f:41:41:7d:e2: 01:6b:26:ae:0e:8a:f1:eb:82:60:18:c7:c6:44:b4: 85:4b:88:d0:87:93:30:78:28:a1:64:46:3e:44:9a: 4f:06:28:be:d8:2c:c4:2d:c8:ab:ea:66:78:8c:a6: 02:32:d3:0c:d3:79:63:a6:01:71:f1:da:5d:27:1d: 69:25:de:35:c8:5a:e1:12:06:30:b7:3f:d2:72:f6: bf:07:05:27:6c:07:b5:2f:f3:89:07:54:d0:7f:69: 3b:44:42:f5:c2:f6:90:c8:ef:64:ee:c8:31:aa:00: 20:bd:44:10:00:3c:dd:b2:45:6c:12:eb:db:7c:1d: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BF:22:85:40:DD:B1:67:4A:59:AC:25:A2:F3:D1:4C:C2:88:2D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/41d21d52-4d7f-37ff-865d-7fef04f2a966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 192.43.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:df:d2:1b:60:7e:fe:da:d1:fc:34:c4:e2:21:68:a7:ef:a8: 7b:d1:43:28:e7:f8:cc:22:66:06:0d:55:a0:6e:fc:70:6b:11: 40:19:79:2e:a9:ec:1c:8d:11:56:13:71:d5:b2:0f:5c:10:25: f4:6a:ed:15:8e:d7:dd:66:96:94:19:0a:27:c8:94:81:37:2d: 5a:55:2a:df:48:dc:82:75:89:b1:96:6e:34:6a:02:1f:9e:bc: fb:f0:eb:56:b5:7a:94:63:b4:12:be:52:8c:36:07:a8:23:aa: 40:8c:fc:66:e9:84:b1:02:ce:6c:49:de:0b:9e:31:3f:21:e0: 23:bb:f4:3d:eb:12:3d:04:39:87:d7:99:82:8a:cf:0a:58:47: 77:36:1b:da:3d:d0:00:e5:55:e2:be:f1:e5:bf:e6:fa:d4:44: 98:18:7b:92:c9:e7:bd:ae:d3:b2:15:a4:42:96:c1:73:fc:60: d9:58:6f:c2:8e:4c:92:b3:91:42:38:cc:f8:aa:71:05:39:13: ed:a4:36:0c:0a:c2:56:88:f3:bc:1c:2a:ee:61:43:6f:94:7e: ed:de:42:96:55:a0:ea:03:ca:55:9e:c3:1b:98:bc:64:45:2e: 36:e5:d2:6f:38:11:ff:73:3f:cd:e7:07:d1:9c:c6:86:33:66: 48:2c:dd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpJhWiIsclMvdbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OTI0OGQ3MDYtOTIyOS00ZjQwLTg4NzItMDI1YTIwMTcwZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJdpAInRdpbTfg3mRIrrf3YJXKZpOlo9op49 +ycLE/7dwNPk6THDXZcyl3/1gyBM14ttuzlqIoL46hBTu2QU+xPIdf+2eic71DXR HYwtofuZy6rkCIUvVMI472WCuGsatvd3wJUf+EFU+lLwwbVs3HzOg+/9yIQEH2uc kRIiKkahX0FBfeIBayauDorx64JgGMfGRLSFS4jQh5MweCihZEY+RJpPBii+2CzE Lcir6mZ4jKYCMtMM03ljpgFx8dpdJx1pJd41yFrhEgYwtz/Scva/BwUnbAe1L/OJ B1TQf2k7REL1wvaQyO9k7sgxqgAgvUQQADzdskVsEuvbfB2AXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq/IoVA3bFnSlmsJaLz0UzCiC3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvNDFkMjFkNTItNGQ3Zi0z N2ZmLTg2NWQtN2ZlZjA0ZjJhOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbf0htgfv7a0fw0xOIhaKfvqHvRQyjn+MwiZgYNVaBu/HBrEUAZeS6p 7ByNEVYTcdWyD1wQJfRq7RWO191mlpQZCifIlIE3LVpVKt9I3IJ1ibGWbjRqAh+e vPvw61a1epRjtBK+Uow2B6gjqkCM/GbphLECzmxJ3gueMT8h4CO79D3rEj0EOYfX mYKKzwpYR3c2G9o90ADlVeK+8eW/5vrURJgYe5LJ572u07IVpEKWwXP8YNlYb8KO TJKzkUI4zPiqcQU5E+2kNgwKwlaI87wcKu5hQ2+Ufu3eQpZVoOoDylWewxuYvGRF Ljbl0m84Ef9zP83nB9GcxoYzZkgs3fQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:00 2025 by rpki-client