$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa File: ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa (raw, json) Hash identifier: ZunZocvVoNqgSNqkHQvTFmuo5egHNHbuwsBLk2sdSZg= Subject key identifier: A6:4C:20:5F:96:AA:ED:CF:F9:E1:77:7A:61:89:96:A5:29:F7:AA:B8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848ADC6179167B6701F994B73C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 3356 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:17:91:67:b6:70:1f:99:4b:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=e25f7f81-396a-47b5-ab0d-543ff0bf181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:53:3d:d1:cb:88:4f:e8:b7:28:89:f4:30: a8:01:01:47:50:34:66:71:96:2d:48:bf:f7:42:d3: de:fe:71:21:a0:b8:ff:6d:1d:b7:44:f7:a7:42:15: 82:f1:52:cb:f7:13:fd:b5:d7:12:b0:ac:30:8a:93: c0:8a:56:f0:56:db:68:a7:5c:56:66:a6:0c:16:bc: 0d:69:de:7d:06:7b:a8:a6:07:0d:80:30:1c:67:8e: 55:e8:c6:5e:05:1b:b8:01:8e:2e:1c:fb:95:3b:8c: a0:f7:29:37:14:0c:85:40:01:88:7e:b3:8b:85:b5: 71:c8:89:f7:76:8d:a2:f8:08:dd:e2:d3:54:ce:60: 1c:f8:73:43:5c:18:50:0d:82:3f:b2:51:ca:a1:86: 12:f3:b0:b6:ee:d8:17:ce:ee:61:4a:61:1d:6e:17: 99:62:a6:f5:6d:1f:f5:c9:9c:a8:e9:b3:61:a2:63: 2c:f3:07:02:5b:2a:87:fa:d1:0b:50:65:6d:a7:41: 59:d6:e5:cc:c3:d5:d1:aa:ef:e7:b8:b6:31:a5:22: 2a:32:25:3f:96:04:91:81:01:08:2f:8e:2f:bd:bd: 49:f4:55:51:50:4a:2c:d6:22:a4:70:e1:9c:6a:dc: 55:cb:8c:8e:8a:d9:3e:52:4f:d1:6e:b1:61:27:cd: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:20:5F:96:AA:ED:CF:F9:E1:77:7A:61:89:96:A5:29:F7:AA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac04f9aa-b8b4-302e-a54c-2baa1f3bfa25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:8f:52:7f:bf:8f:f5:c9:54:1b:0b:f5:e9:fe:50:56:84:c8: 48:21:27:a6:ad:8a:6e:1c:02:53:e2:95:62:37:d4:97:99:1b: 38:98:5f:ab:b3:59:aa:04:5a:0f:35:58:c9:46:7f:68:f8:94: 18:e1:e3:a5:63:ad:92:b1:c0:e4:8b:34:28:f5:15:e1:45:b0: 42:dc:a8:60:59:96:b3:c4:b9:c3:5e:c1:3b:f3:9a:03:0d:59: bc:39:c5:89:2a:85:17:1f:7c:cb:07:7f:57:6a:12:5c:40:79: 7c:ab:c8:5d:ea:fe:00:20:f4:1e:96:02:2b:40:af:81:22:04: 24:79:49:7b:4a:2d:5a:e0:c8:54:02:c2:8f:52:71:97:49:16: e2:0c:05:21:50:9c:78:4f:e1:7b:0b:bb:15:e7:ce:53:91:d2: 20:85:39:7b:25:69:0f:b4:30:00:33:ad:df:80:dd:f1:b8:ca: 46:56:46:4f:f7:68:40:87:32:51:4e:ae:93:36:0b:9e:db:64: e9:5b:ef:2d:31:39:d5:d3:7c:ee:c4:a4:7d:cc:bc:73:3b:40: 3a:ae:da:06:a0:33:04:b4:16:65:6c:49:86:7d:05:c8:e7:2c: 12:72:3c:cd:38:14:10:cc:19:29:bd:e5:05:49:23:09:72:85: 27:46:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxheRZ7ZwH5lLc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTI1ZjdmODEtMzk2YS00N2I1LWFiMGQtNTQzZmYwYmYxODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNTPdHLiE/otyiJ9DCoAQFHUDRmcZYtSL/3 QtPe/nEhoLj/bR23RPenQhWC8VLL9xP9tdcSsKwwipPAilbwVttop1xWZqYMFrwN ad59BnuopgcNgDAcZ45V6MZeBRu4AY4uHPuVO4yg9yk3FAyFQAGIfrOLhbVxyIn3 do2i+Ajd4tNUzmAc+HNDXBhQDYI/slHKoYYS87C27tgXzu5hSmEdbheZYqb1bR/1 yZyo6bNhomMs8wcCWyqH+tELUGVtp0FZ1uXMw9XRqu/nuLYxpSIqMiU/lgSRgQEI L44vvb1J9FVRUEos1iKkcOGcatxVy4yOitk+Uk/RbrFhJ80xhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZMIF+Wqu3P+eF3emGJlqUp96q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWMwNGY5YWEtYjhiNC0z MDJlLWE1NGMtMmJhYTFmM2JmYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGPUn+/j/XJVBsL9en+UFaEyEghJ6atim4cAlPilWI31JeZGziYX6uz WaoEWg81WMlGf2j4lBjh46VjrZKxwOSLNCj1FeFFsELcqGBZlrPEucNewTvzmgMN Wbw5xYkqhRcffMsHf1dqElxAeXyryF3q/gAg9B6WAitAr4EiBCR5SXtKLVrgyFQC wo9ScZdJFuIMBSFQnHhP4XsLuxXnzlOR0iCFOXslaQ+0MAAzrd+A3fG4ykZWRk/3 aECHMlFOrpM2C57bZOlb7y0xOdXTfO7EpH3MvHM7QDqu2gagMwS0FmVsSYZ9Bcjn LBJyPM04FBDMGSm95QVJIwlyhSdG75g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:52 2025 by rpki-client