$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36f5b837-d9ff-3440-8943-967c81a7eba1.roa File: 36f5b837-d9ff-3440-8943-967c81a7eba1.roa (raw, json) Hash identifier: V/lTp4dUQ2DU92VcG+eeHv33JX+G0is04CZB2YscsHA= Subject key identifier: F2:C5:72:02:E6:87:C1:DE:E2:05:7C:A7:7B:FD:77:E1:DF:72:02:67 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858491246BA736E8574085F4D9700 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36f5b837-d9ff-3440-8943-967c81a7eba1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 192.46.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:73:6e:85:74:08:5f:4d:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6e44a88f-2d78-4dd1-8edc-9a190c47e7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:94:09:27:a1:51:c0:ef:86:e4:3a:e1:20: 74:be:25:dd:f4:b4:f4:10:30:ac:9b:3c:16:14:63: d3:a0:b8:7d:f7:da:d2:19:16:94:8d:03:b4:ec:bd: 4e:51:fd:48:fd:83:ea:a8:8f:90:b0:a1:17:68:99: 6f:4f:d3:d0:44:98:28:9a:9c:3d:90:dd:02:6f:38: 1d:e5:3d:f9:db:eb:3e:4d:51:ab:84:26:02:99:79: 73:5a:48:e7:35:40:5f:94:d7:7f:49:a4:a1:86:14: 33:8f:3c:54:ee:66:98:0d:e2:cb:9f:ea:b5:aa:c7: 25:ad:30:76:13:62:86:bc:77:62:8c:e8:10:22:c0: 35:68:28:df:58:41:5c:91:a5:71:ea:d5:7f:7a:08: c6:43:3f:db:2d:27:ed:0d:78:ca:48:24:fc:3c:8a: 71:06:20:80:29:6e:80:af:59:13:c6:26:b3:b4:64: 7f:ac:a5:10:72:52:94:c2:31:7b:98:bd:db:9e:33: b9:57:ec:a1:9b:b9:fb:1b:d8:98:4f:ef:1a:9a:2f: 4e:74:6d:50:a7:64:d0:97:b3:66:65:07:1a:04:e5: 9b:e9:43:51:82:82:25:ac:59:8f:73:77:6b:99:fa: 2d:ca:30:f0:3d:20:22:aa:f2:e7:46:c9:e1:73:27: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:72:02:E6:87:C1:DE:E2:05:7C:A7:7B:FD:77:E1:DF:72:02:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36f5b837-d9ff-3440-8943-967c81a7eba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:65:a4:71:bf:4b:ea:95:b7:10:c4:d4:90:89:9e:c8:e5:7b: f4:63:1b:0e:6a:ee:f8:7f:52:ff:94:30:0c:29:db:97:a8:94: 45:06:5e:57:ff:35:25:d8:e6:94:89:f4:9d:4d:e0:1f:d7:1f: 45:99:69:0b:82:81:e6:1e:87:fc:0f:b8:c8:3e:99:9c:0f:1b: b0:ef:e7:cd:06:54:b7:59:1e:57:38:df:6f:c1:59:fc:9a:7a: 9a:bb:57:d6:aa:64:11:db:8f:80:22:4f:31:fe:ec:7a:bf:aa: bf:eb:49:57:80:f6:82:9d:28:48:47:22:40:42:c6:51:5e:64: 08:5c:d2:c4:b1:ae:23:6a:fb:79:e6:53:3d:60:ae:d8:75:4f: 0f:3c:d0:ed:33:7b:08:0a:12:02:05:4d:b2:d8:d4:20:78:49: 9c:29:94:1f:76:d9:1d:2d:99:01:82:f4:79:8a:4e:96:5a:8a: 2c:35:09:f1:2e:35:2a:d1:e3:e5:88:9b:50:ac:d1:61:bf:33: 81:a0:89:e2:4e:22:88:64:1f:01:23:24:62:50:c0:89:86:2d: 48:89:0a:f6:10:78:51:b9:e3:c0:60:28:54:5d:45:02:b4:1d: c9:bb:ff:64:06:27:54:a0:2c:c7:f0:01:df:c9:37:b3:9b:6a: 40:c3:75:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrpzboV0CF9NlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmU0NGE4OGYtMmQ3OC00ZGQxLThlZGMtOWExOTBjNDdlN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDaUCSehUcDvhuQ64SB0viXd9LT0EDCsmzwW FGPToLh999rSGRaUjQO07L1OUf1I/YPqqI+QsKEXaJlvT9PQRJgompw9kN0Cbzgd 5T352+s+TVGrhCYCmXlzWkjnNUBflNd/SaShhhQzjzxU7maYDeLLn+q1qsclrTB2 E2KGvHdijOgQIsA1aCjfWEFckaVx6tV/egjGQz/bLSftDXjKSCT8PIpxBiCAKW6A r1kTxiaztGR/rKUQclKUwjF7mL3bnjO5V+yhm7n7G9iYT+8ami9OdG1Qp2TQl7Nm ZQcaBOWb6UNRgoIlrFmPc3drmfotyjDwPSAiqvLnRsnhcydQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLFcgLmh8He4gV8p3v9d+HfcgJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzZmNWI4MzctZDlmZi0z NDQwLTg5NDMtOTY3YzgxYTdlYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhlpHG/S+qVtxDE1JCJnsjle/RjGw5q7vh/Uv+UMAwp25eolEUGXlf/ NSXY5pSJ9J1N4B/XH0WZaQuCgeYeh/wPuMg+mZwPG7Dv580GVLdZHlc432/BWfya epq7V9aqZBHbj4AiTzH+7Hq/qr/rSVeA9oKdKEhHIkBCxlFeZAhc0sSxriNq+3nm Uz1grth1Tw880O0zewgKEgIFTbLY1CB4SZwplB922R0tmQGC9HmKTpZaiiw1CfEu NSrR4+WIm1Cs0WG/M4GgieJOIohkHwEjJGJQwImGLUiJCvYQeFG548BgKFRdRQK0 Hcm7/2QGJ1SgLMfwAd/JN7ObakDDda8= -----END CERTIFICATE-----Generated at Fri Apr 11 23:16:23 2025 by rpki-client