$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa File: bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa (raw, json) Hash identifier: +XKDzTjHym10gVjgJH1rxOBPyU7eFUSle0ADIgMv07A= Subject key identifier: 0D:F3:49:96:66:A2:4C:ED:B8:14:4E:C0:94:01:E9:E4:33:32:31:07 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858494733E7C014DDC62237B38300 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3360 IP address blocks: 192.25.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e7:c0:14:dd:c6:22:37:b3:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=bb9fa0eb-c86c-4abd-835f-f1452a7d92d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:4f:c2:ba:60:10:fc:02:97:bb:08:65:91: ec:1c:9e:91:b6:60:d5:dd:16:d0:53:40:30:fd:58: 4c:63:30:c0:24:f9:45:91:0b:67:5a:2e:b8:32:6a: 38:a4:4d:95:7b:90:a3:3c:c1:60:29:e7:25:63:00: 28:d0:d7:c9:5f:42:7d:2e:83:a6:88:f9:7e:96:68: 81:29:c0:b6:64:ac:f4:56:30:71:d7:cb:5f:1b:d1: b4:54:4c:82:58:27:12:a4:05:c5:15:64:3c:50:b7: b8:87:8c:fe:5f:80:4a:ca:b9:95:ee:e6:3a:c5:46: ca:be:c6:c3:4c:7f:65:c2:60:7b:7e:45:a2:a2:cf: a6:56:8d:ac:38:b3:99:4c:b9:01:72:26:61:37:0f: b0:d3:2e:bb:9e:35:de:d0:6d:3f:8d:5f:f7:3b:bc: a8:c0:56:97:5a:9b:7e:d5:11:bc:ab:f4:df:5f:e5: 97:b3:fa:b5:2c:b0:60:49:a9:5e:0c:76:d6:b4:bd: 7d:ef:b5:3c:f3:e5:3c:8c:4f:21:39:d9:c1:59:31: 0c:6f:45:33:f4:47:90:66:7d:77:72:1d:c7:9f:a9: 03:78:8b:fd:d7:7d:8c:9b:73:fb:31:aa:e1:8d:67: 2d:6c:92:42:5b:d2:9d:96:cb:8e:a5:4c:33:56:7e: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F3:49:96:66:A2:4C:ED:B8:14:4E:C0:94:01:E9:E4:33:32:31:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e2:d1:99:15:67:14:c5:cc:34:f0:b1:60:8f:c4:79:f6:4e: 1c:b1:78:a6:e5:95:3d:65:eb:f4:fb:47:4d:62:8a:65:d3:b8: 41:16:97:ec:29:84:7c:04:11:ca:23:d3:b2:2d:4f:42:ba:7c: a2:c4:a1:08:52:41:4a:e9:37:85:38:c3:01:26:3b:11:25:f0: b5:1c:17:7b:c5:04:87:cb:d8:f0:9b:e3:f9:de:51:06:51:c6: de:9b:c6:bd:f9:f2:a0:69:c1:36:6c:7a:17:aa:6a:b3:2d:b6: a7:da:f9:da:8e:86:5e:0c:e1:2d:9c:d4:d8:32:76:7b:54:3b: 4a:a1:17:fc:2f:d7:94:c2:bf:44:8f:74:89:1a:af:d8:54:5e: 23:bd:6f:4b:dc:b8:2c:3f:b8:73:91:e9:d0:e4:36:55:63:11: 89:fe:0c:2c:91:9a:2c:28:29:63:ef:d1:aa:bb:f3:e5:e4:cb: 0c:1c:14:af:07:54:d4:50:ad:c6:8b:c4:11:4e:96:fc:71:9e: 6d:89:07:6b:29:b5:67:09:53:bc:77:cc:7d:bc:d2:4c:7e:6d: 4f:32:33:a5:5f:6d:46:01:77:60:26:5b:a5:60:34:28:79:23: b2:56:7f:b4:be:46:1b:cc:7c:57:15:d2:78:12:e8:67:40:ce: 73:f1:d9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+fAFN3GIjezgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YmI5ZmEwZWItYzg2Yy00YWJkLTgzNWYtZjE0NTJhN2Q5MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibZPwrpgEPwCl7sIZZHsHJ6RtmDV3RbQU0Aw /VhMYzDAJPlFkQtnWi64Mmo4pE2Ve5CjPMFgKeclYwAo0NfJX0J9LoOmiPl+lmiB KcC2ZKz0VjBx18tfG9G0VEyCWCcSpAXFFWQ8ULe4h4z+X4BKyrmV7uY6xUbKvsbD TH9lwmB7fkWios+mVo2sOLOZTLkBciZhNw+w0y67njXe0G0/jV/3O7yowFaXWpt+ 1RG8q/TfX+WXs/q1LLBgSaleDHbWtL1977U88+U8jE8hOdnBWTEMb0Uz9EeQZn13 ch3Hn6kDeIv9132Mm3P7MarhjWctbJJCW9KdlsuOpUwzVn5yvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3zSZZmokztuBROwJQB6eQzMjEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmRiMmNiN2QtMjAwZC0z MDdjLWI2MTItOWZmOTRiNGM3MWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFri0ZkVZxTFzDTwsWCPxHn2ThyxeKbllT1l6/T7R01iimXTuEEWl+wp hHwEEcoj07ItT0K6fKLEoQhSQUrpN4U4wwEmOxEl8LUcF3vFBIfL2PCb4/neUQZR xt6bxr358qBpwTZseheqarMttqfa+dqOhl4M4S2c1NgydntUO0qhF/wv15TCv0SP dIkar9hUXiO9b0vcuCw/uHOR6dDkNlVjEYn+DCyRmiwoKWPv0aq78+XkywwcFK8H VNRQrcaLxBFOlvxxnm2JB2sptWcJU7x3zH280kx+bU8yM6VfbUYBd2AmW6VgNCh5 I7JWf7S+RhvMfFcV0ngS6GdAznPx2WY= -----END CERTIFICATE-----Generated at Sun Apr 6 09:58:16 2025 by rpki-client