$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa File: 94268987-5dbb-369d-9877-0d8f1dcd748e.roa (raw, json) Hash identifier: 1OZBnBX3SZ758Ko0G88+fZI5xI/W0ukNbfAR4wcI4bo= Subject key identifier: 46:9F:C5:FF:DA:56:D3:82:08:FF:96:07:AD:C5:0C:84:BD:F1:ED:5B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858499829D227DEE77A9AF470CB00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 3360 IP address blocks: 192.46.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d2:27:de:e7:7a:9a:f4:70:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=44fa4f8a-aeac-42d8-a3de-ddb86e4c6d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:5d:8e:da:19:3d:d4:d1:aa:f5:b0:d3:36: 39:5a:d1:a0:9f:db:e9:76:91:81:ae:10:1a:27:bb: 83:69:54:dc:03:0e:dd:76:34:d2:47:7c:aa:20:17: fe:e6:80:e4:74:e0:14:50:25:9a:bc:94:e8:ac:f4: 4a:a5:1a:2b:71:98:20:19:f4:ee:20:b1:13:60:d8: e5:7b:1e:6a:a5:7c:9f:10:cb:7a:d1:8f:d1:06:d8: 71:c9:d7:82:e7:79:4b:08:e7:0f:02:ae:7f:6a:60: 9b:23:5c:99:36:af:a5:e0:24:47:4e:93:85:86:48: 99:1a:63:a5:23:33:93:da:fd:aa:81:63:bb:4a:83: f3:32:16:e6:75:13:8b:be:6d:77:ed:a7:39:25:ea: 5d:1e:f0:51:71:4a:55:15:6a:0c:bc:2b:5c:40:59: 9b:a0:04:52:d5:45:ee:d4:2f:a8:b0:6e:3e:b1:d9: d8:7c:fa:70:f5:2a:24:46:20:a8:f2:7e:05:82:06: 47:38:17:9c:df:38:af:f8:97:61:f4:3f:3d:83:55: 04:a0:dd:86:aa:f4:3a:74:7c:c4:4f:ef:27:0c:13: 1d:0a:ac:d0:71:21:9b:a0:4c:00:b0:fe:aa:55:f1: a2:15:39:07:6a:4d:e0:2d:f3:9e:61:5a:d7:9c:d5: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9F:C5:FF:DA:56:D3:82:08:FF:96:07:AD:C5:0C:84:BD:F1:ED:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1d:35:93:55:47:72:0e:c8:be:09:72:7f:5e:0a:5b:09:39: 9b:47:75:f2:89:58:1f:53:58:60:1b:9e:b0:77:0c:d6:3a:8f: 8a:35:1c:0b:e5:82:e7:e5:bb:5a:c4:1d:d2:78:68:6b:24:83: 6e:cc:cd:79:78:1b:01:49:83:0a:d7:73:1e:31:a4:9c:6f:1c: c9:c7:ff:26:8b:e3:30:7a:f3:a5:47:95:d5:2d:fa:27:d3:9d: ab:e1:50:12:a4:c4:74:b5:9d:b4:83:e6:e1:7b:45:58:1e:cd: b3:57:f7:3e:a0:94:b3:54:f3:41:d6:5d:47:d0:6f:0e:50:c1: 8c:ae:2c:69:dd:a1:cd:a0:b6:6a:f4:00:67:87:8a:92:6a:ad: 0d:89:9b:51:7c:da:15:a8:cf:a0:45:72:8a:de:2c:1b:67:d3: 5e:fd:32:5d:40:7d:27:35:88:c8:9d:b7:a5:ec:c2:e1:07:46: bd:d5:56:e7:1b:80:d8:0b:76:3b:1f:a8:cf:30:5d:19:04:66: f5:71:aa:b4:95:ac:51:1d:fa:92:2c:8c:84:61:c9:6e:bc:66: 42:c9:db:36:4f:bf:ca:9e:cc:64:a0:5a:3d:47:a1:f6:10:3f: a2:c6:fe:ac:72:bc:ce:ff:28:d1:b7:dc:0c:69:0a:88:ed:b1: 46:ed:95:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdIn3ud6mvRwywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NDRmYTRmOGEtYWVhYy00MmQ4LWEzZGUtZGRiODZlNGM2ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY9djtoZPdTRqvWw0zY5WtGgn9vpdpGBrhAa J7uDaVTcAw7ddjTSR3yqIBf+5oDkdOAUUCWavJTorPRKpRorcZggGfTuILETYNjl ex5qpXyfEMt60Y/RBthxydeC53lLCOcPAq5/amCbI1yZNq+l4CRHTpOFhkiZGmOl IzOT2v2qgWO7SoPzMhbmdROLvm137ac5JepdHvBRcUpVFWoMvCtcQFmboARS1UXu 1C+osG4+sdnYfPpw9SokRiCo8n4FggZHOBec3ziv+Jdh9D89g1UEoN2GqvQ6dHzE T+8nDBMdCqzQcSGboEwAsP6qVfGiFTkHak3gLfOeYVrXnNXp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEafxf/aVtOCCP+WB63FDIS98e1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOTQyNjg5ODctNWRiYi0z NjlkLTk4NzctMGQ4ZjFkY2Q3NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4dNZNVR3IOyL4Jcn9eClsJOZtHdfKJWB9TWGAbnrB3DNY6j4o1HAvl guflu1rEHdJ4aGskg27MzXl4GwFJgwrXcx4xpJxvHMnH/yaL4zB686VHldUt+ifT navhUBKkxHS1nbSD5uF7RVgezbNX9z6glLNU80HWXUfQbw5QwYyuLGndoc2gtmr0 AGeHipJqrQ2Jm1F82hWoz6BFcoreLBtn0179Ml1AfSc1iMidt6XswuEHRr3VVucb gNgLdjsfqM8wXRkEZvVxqrSVrFEd+pIsjIRhyW68ZkLJ2zZPv8qezGSgWj1HofYQ P6LG/qxyvM7/KNG33AxpCojtsUbtla4= -----END CERTIFICATE-----Generated at Tue Apr 22 01:05:44 2025 by rpki-client