$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/983ac34d-6313-37bf-b957-ab68dc623f4c.roa File: 983ac34d-6313-37bf-b957-ab68dc623f4c.roa (raw, json) Hash identifier: AfB4icQ6Dt5L5eLdzPoJqgpWYLGd5rbgnmmXS4XICKY= Subject key identifier: BD:37:21:F9:D9:16:D9:62:AE:09:63:2D:AF:34:AA:A4:DA:FA:4E:CB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848B8F0C4DDC182595F67ADA100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/983ac34d-6313-37bf-b957-ab68dc623f4c.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 202 IP address blocks: 192.46.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c4:dd:c1:82:59:5f:67:ad:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=9b6916aa-c880-4971-a74e-2784a2449288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:d3:0f:1c:d9:5f:f0:07:2e:cb:eb:70:fc: 28:7a:9f:2b:93:cd:78:74:c5:fd:c9:13:db:b3:e9: 01:16:c9:2a:89:01:73:bc:54:81:11:7b:45:dc:4b: 1d:73:32:81:9d:7f:f8:75:d7:3a:2c:0c:4c:86:b6: 82:9e:dd:f7:e6:4c:a1:13:a0:a3:9f:17:db:fa:16: 59:82:d0:27:7e:d7:77:93:b0:b8:1a:a7:be:b0:d6: 43:af:69:53:93:6d:84:a6:36:75:ca:65:bc:2f:fe: 5a:72:7d:9d:bf:6c:81:4c:12:27:1e:07:99:6c:73: c6:bf:1f:e8:00:d6:a6:ba:d9:46:72:34:e9:b0:b9: 36:06:8f:b4:b0:44:46:10:3d:e7:3a:08:4d:b0:f5: 80:c1:12:b9:c6:8a:3b:cd:c2:ae:f0:bd:e4:b3:eb: 7c:53:22:3d:b2:85:76:a4:8e:63:08:9b:63:2e:85: f0:91:b3:6b:61:86:16:35:d5:e3:ef:8f:31:b1:8f: a7:fb:93:ec:89:49:1a:b0:39:b1:ca:7a:98:fc:47: 74:07:17:ea:fa:28:f5:43:14:f0:d3:e8:72:aa:96: a9:00:55:3b:fa:52:2f:ba:46:da:b8:f9:59:2b:17: f5:43:fb:48:cd:ee:ff:37:5f:1d:9a:0c:93:04:98: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:21:F9:D9:16:D9:62:AE:09:63:2D:AF:34:AA:A4:DA:FA:4E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/983ac34d-6313-37bf-b957-ab68dc623f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:64:bf:44:56:46:6d:57:bd:d9:51:dc:33:fe:3d:1c:c6:e5: 0f:43:9c:47:94:cf:c2:61:84:d2:d9:b5:b2:37:a5:17:36:a2: 6b:77:74:d7:26:7d:ad:e5:8d:f6:1a:bc:94:c6:60:88:ec:91: 7e:e7:6e:b7:ed:64:0d:e7:ae:16:57:04:9d:bc:17:6a:ef:d6: 0d:0e:33:15:52:cb:f7:66:dc:3e:be:b1:3b:ff:4d:70:dc:6e: 9e:79:c2:cf:61:ea:9a:81:dc:a2:5d:81:93:c2:d9:e9:c9:2c: b8:5a:75:6b:6f:2c:b6:cf:1b:fd:60:d9:7b:88:9c:58:25:d9: 26:b0:42:7a:0f:c9:9f:6d:55:63:24:b7:fd:81:26:d7:29:5f: 05:45:30:9e:78:0d:78:6f:62:4d:53:5a:37:55:f2:77:30:af: 43:ae:a2:a4:30:62:99:8d:ac:45:d0:47:4d:df:07:0c:1d:07: d5:f8:a4:17:b5:42:6f:44:a7:40:de:8f:1c:18:ec:df:f4:9c: de:c4:c4:f4:c9:c4:0b:99:0f:9d:51:15:1b:3c:61:77:24:bf: e5:1b:67:62:3f:8f:6f:17:3b:ad:05:c2:7e:6d:9f:b4:a9:52: c3:73:df:e2:9f:4a:f2:78:83:b3:d7:1d:cf:4f:05:4a:84:9c: e2:56:fe:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MTdwYJZX2etoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OWI2OTE2YWEtYzg4MC00OTcxLWE3NGUtMjc4NGEyNDQ5Mjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmXTDxzZX/AHLsvrcPwoep8rk814dMX9yRPb s+kBFskqiQFzvFSBEXtF3EsdczKBnX/4ddc6LAxMhraCnt335kyhE6Cjnxfb+hZZ gtAnftd3k7C4Gqe+sNZDr2lTk22EpjZ1ymW8L/5acn2dv2yBTBInHgeZbHPGvx/o ANamutlGcjTpsLk2Bo+0sERGED3nOghNsPWAwRK5xoo7zcKu8L3ks+t8UyI9soV2 pI5jCJtjLoXwkbNrYYYWNdXj748xsY+n+5PsiUkasDmxynqY/Ed0Bxfq+ij1QxTw 0+hyqpapAFU7+lIvukbauPlZKxf1Q/tIze7/N18dmgyTBJixkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL03IfnZFtlirgljLa80qqTa+k7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOTgzYWMzNGQtNjMxMy0z N2JmLWI5NTctYWI2OGRjNjIzZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9kv0RWRm1XvdlR3DP+PRzG5Q9DnEeUz8JhhNLZtbI3pRc2omt3dNcm fa3ljfYavJTGYIjskX7nbrftZA3nrhZXBJ28F2rv1g0OMxVSy/dm3D6+sTv/TXDc bp55ws9h6pqB3KJdgZPC2enJLLhadWtvLLbPG/1g2XuInFgl2SawQnoPyZ9tVWMk t/2BJtcpXwVFMJ54DXhvYk1TWjdV8ncwr0OuoqQwYpmNrEXQR03fBwwdB9X4pBe1 Qm9Ep0DejxwY7N/0nN7ExPTJxAuZD51RFRs8YXckv+UbZ2I/j28XO60Fwn5tn7Sp UsNz3+KfSvJ4g7PXHc9PBUqEnOJW/sc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:49 2025 by rpki-client