$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa File: 0e07f313-ba74-3140-a996-a0639aa53e0b.roa (raw, json) Hash identifier: ee7aRIT0ygvCgD1/BojjgIpLqr5mm+i2dnTN7h5ffKc= Subject key identifier: 64:DA:8D:E2:D0:D1:72:1F:B6:DF:F1:B7:6A:23:C2:73:A3:1B:07:D9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848ADC6178009091672853402F8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 3360 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:17:80:09:09:16:72:85:34:02:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=2cd56b4f-04b0-4ba3-94e7-e5417ee85139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:41:85:a3:6f:c4:8f:61:53:0b:e2:ff:f7: 0c:21:62:5d:86:5f:f6:f0:49:c3:86:5d:b6:10:c1: 7e:83:91:9b:eb:fb:f9:5c:7d:2f:99:14:57:4d:a6: 33:73:80:07:9c:c3:7f:33:80:c9:58:6e:fb:1c:83: 1e:d3:43:91:0f:2f:b2:0d:6f:e1:85:f4:f8:50:c0: fd:c3:d5:5f:8d:41:81:34:66:95:f2:93:a2:4f:ea: b4:29:49:37:b0:03:7c:a1:5a:89:10:6b:2a:4c:7c: 10:77:15:1f:f3:78:ee:b2:0e:9d:08:61:cd:8a:09: da:8e:68:92:11:8a:46:1a:39:80:ea:22:9b:7e:c9: 5c:05:30:af:0c:fc:87:c0:c6:06:ad:09:67:0f:65: 24:15:35:aa:69:2c:1c:ba:63:b0:76:ea:53:8f:21: 81:96:5a:a5:fc:81:75:6d:dc:18:3a:41:50:9a:2a: d9:a1:5f:15:8f:29:8c:db:70:10:bc:cd:7b:80:41: e7:a4:e7:aa:a7:5f:87:f2:b4:53:5f:8e:15:80:56: ef:03:ee:1f:36:a0:ac:b5:dc:cc:d1:eb:e0:30:bc: c5:cb:b4:ae:cb:66:5e:38:40:8c:12:29:af:74:62: 9e:f3:be:0b:c0:13:b4:3d:7d:4d:7c:c7:1a:88:c0: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DA:8D:E2:D0:D1:72:1F:B6:DF:F1:B7:6A:23:C2:73:A3:1B:07:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:18:6e:61:8b:ca:00:da:9e:a8:14:d6:4a:f2:25:a9:7c:e8: 04:2a:f7:3d:6e:aa:07:8e:cf:2c:aa:61:d5:ca:1c:bf:63:d7: d9:15:d4:5c:42:a1:ee:aa:58:6e:6a:3a:36:f8:77:37:99:0c: 60:82:ea:1a:57:4c:0a:7f:5a:08:da:99:fe:4b:65:4a:35:50: 06:e2:c6:0e:42:39:8a:b9:18:8e:f6:d2:55:e5:45:6c:18:16: 91:4a:4b:ce:06:01:59:6e:3b:a1:44:a2:76:71:ec:99:91:4b: be:5a:ef:9b:1f:14:b4:6e:c9:22:7b:28:6e:ee:eb:33:35:2b: 92:bd:03:4e:e6:21:15:52:5f:1c:a2:86:92:a4:7a:49:37:06: 16:c5:eb:42:1c:4f:31:f7:47:c5:bc:92:46:cd:a2:bc:05:6b: a0:6c:fc:01:ce:9b:8a:98:06:e7:71:dd:d6:b7:5a:41:67:10: ed:6b:48:07:b2:b8:1b:a6:96:cf:9e:f7:57:87:86:9e:13:4a: a2:04:23:5e:08:a4:8c:29:85:e0:ef:05:93:ff:82:76:28:4c: 24:fa:e1:e0:eb:94:75:43:d5:35:0f:e6:4e:ed:1c:23:03:33: d4:48:8b:12:b5:96:d8:2a:76:5a:d5:74:b0:62:d3:4e:70:0f: 32:f0:93:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxheACQkWcoU0AvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmNkNTZiNGYtMDRiMC00YmEzLTk0ZTctZTU0MTdlZTg1MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9JBhaNvxI9hUwvi//cMIWJdhl/28EnDhl22 EMF+g5Gb6/v5XH0vmRRXTaYzc4AHnMN/M4DJWG77HIMe00ORDy+yDW/hhfT4UMD9 w9VfjUGBNGaV8pOiT+q0KUk3sAN8oVqJEGsqTHwQdxUf83jusg6dCGHNignajmiS EYpGGjmA6iKbfslcBTCvDPyHwMYGrQlnD2UkFTWqaSwcumOwdupTjyGBllql/IF1 bdwYOkFQmirZoV8VjymM23AQvM17gEHnpOeqp1+H8rRTX44VgFbvA+4fNqCstdzM 0evgMLzFy7Suy2ZeOECMEimvdGKe874LwBO0PX1NfMcaiMAA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTajeLQ0XIftt/xt2ojwnOjGwfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGUwN2YzMTMtYmE3NC0z MTQwLWE5OTYtYTA2MzlhYTUzZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4YbmGLygDanqgU1kryJal86AQq9z1uqgeOzyyqYdXKHL9j19kV1FxC oe6qWG5qOjb4dzeZDGCC6hpXTAp/Wgjamf5LZUo1UAbixg5COYq5GI720lXlRWwY FpFKS84GAVluO6FEonZx7JmRS75a75sfFLRuySJ7KG7u6zM1K5K9A07mIRVSXxyi hpKkekk3BhbF60IcTzH3R8W8kkbNorwFa6Bs/AHOm4qYBudx3da3WkFnEO1rSAey uBumls+e91eHhp4TSqIEI14IpIwpheDvBZP/gnYoTCT64eDrlHVD1TUP5k7tHCMD M9RIixK1ltgqdlrVdLBi005wDzLwk6U= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:40 2025 by rpki-client