$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa File: cfe38164-9925-3474-b313-5d1f2f118da1.roa (raw, json) Hash identifier: 9fqqv0X4wPVA4Q4JkWUdq95tLTWWVgPZ4iSwb4Y0U7c= Subject key identifier: 61:70:70:B0:97:F6:93:24:BD:E9:6D:11:CE:47:A3:9C:4C:B6:36:12 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849CBCFA12631FD91AA5B398680 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 202 IP address blocks: 192.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a1:26:31:fd:91:aa:5b:39:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=bbb20ef2-2437-4c87-8cd3-60c07363e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:7b:cb:9b:27:80:73:9e:07:71:20:c7:87: 1f:b0:5a:8a:9d:7c:ad:2e:b5:3a:37:57:a2:26:b0: 80:56:ee:1d:57:5f:3f:94:8c:72:52:df:97:36:d2: 5b:44:8b:b4:49:c6:11:38:d1:57:22:56:29:72:97: 4d:44:03:c9:15:fc:1d:67:0b:e0:8d:23:3c:95:1f: 30:d9:d2:7b:f0:1e:21:14:7b:b3:d4:9b:87:4f:2f: 3c:61:7b:cc:bf:e0:eb:8d:49:7c:9c:1d:37:44:c4: 92:66:cf:56:d4:4b:b0:a3:b9:c2:80:bb:d1:79:18: c8:58:60:d1:3f:ac:1b:2d:b3:cd:d5:b1:30:da:19: aa:9a:34:26:14:25:7e:4c:83:87:67:e5:8a:cf:c1: 35:85:dd:7a:33:aa:2f:60:38:17:90:90:c2:b8:84: d8:95:e9:26:e9:d0:0e:74:69:66:92:47:74:8a:31: 81:ea:a8:55:d2:7b:96:63:7d:d3:3b:4a:8f:06:7a: d6:82:00:02:88:ed:c2:6b:b9:de:77:c0:16:7f:ba: 1e:80:02:68:a4:76:bb:c9:c5:9f:8f:e7:94:dd:99: 0b:f0:b2:31:3c:aa:30:be:3e:ad:33:f5:75:43:41: 73:d7:78:bb:1d:4e:6c:28:24:b8:be:d5:e4:80:82: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:70:70:B0:97:F6:93:24:BD:E9:6D:11:CE:47:A3:9C:4C:B6:36:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.56.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:78:38:20:65:3b:03:af:57:06:8d:49:b9:0c:c5:49:47:0e: 9b:dd:ba:49:bc:e5:a8:05:98:9c:9e:c5:09:d2:eb:0e:59:ef: bc:b0:a7:0a:8f:2a:17:f1:f4:5a:d4:53:bc:11:54:d6:59:64: f2:7f:95:aa:4e:b7:9a:9d:0c:d0:10:44:9d:33:f7:2b:97:d7: b0:1a:ee:d6:33:f9:16:5f:58:b3:c0:a9:33:07:8a:fd:cf:59: 21:9a:22:d5:63:db:58:bf:88:e5:17:52:35:8a:9b:2a:af:6b: bd:79:45:81:43:c5:3e:6c:26:bc:41:6d:fe:d9:b2:9f:9e:b4: 69:d5:6e:d4:93:93:9b:82:29:b7:85:7e:db:8a:c3:aa:8b:4f: 74:b5:1b:de:b4:ec:7a:0b:38:01:2d:0a:1e:14:4e:f2:e2:7d: d5:bf:7b:dd:08:bd:59:ce:bb:98:66:15:f1:69:2a:d1:1e:3a: b2:3c:7e:92:28:2b:45:ee:e9:18:a9:b9:56:a9:65:64:72:ec: 4c:9d:92:5d:b7:6e:0a:e2:5f:23:7e:6b:29:81:12:4b:61:c7: 2a:9b:d0:c8:0d:fd:89:df:8a:a0:32:22:bb:76:5e:14:70:90: dd:d7:fb:c3:04:e9:f0:98:9a:2b:27:c6:3b:2a:fc:24:5d:2f: 46:6d:0a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6EmMf2Rqls5hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YmJiMjBlZjItMjQzNy00Yzg3LThjZDMtNjBjMDczNjNlMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBJ7y5sngHOeB3Egx4cfsFqKnXytLrU6N1ei JrCAVu4dV18/lIxyUt+XNtJbRIu0ScYRONFXIlYpcpdNRAPJFfwdZwvgjSM8lR8w 2dJ78B4hFHuz1JuHTy88YXvMv+DrjUl8nB03RMSSZs9W1Euwo7nCgLvReRjIWGDR P6wbLbPN1bEw2hmqmjQmFCV+TIOHZ+WKz8E1hd16M6ovYDgXkJDCuITYlekm6dAO dGlmkkd0ijGB6qhV0nuWY33TO0qPBnrWggACiO3Ca7ned8AWf7oegAJopHa7ycWf j+eU3ZkL8LIxPKowvj6tM/V1Q0Fz13i7HU5sKCS4vtXkgIJCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFwcLCX9pMkveltEc5Ho5xMtjYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2ZlMzgxNjQtOTkyNS0z NDc0LWIzMTMtNWQxZjJmMTE4ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDgaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF4OCBlOwOvVwaNSbkMxUlHDpvdukm85agFmJyexQnS6w5Z77ywpwqP Khfx9FrUU7wRVNZZZPJ/lapOt5qdDNAQRJ0z9yuX17Aa7tYz+RZfWLPAqTMHiv3P WSGaItVj21i/iOUXUjWKmyqva715RYFDxT5sJrxBbf7Zsp+etGnVbtSTk5uCKbeF ftuKw6qLT3S1G9607HoLOAEtCh4UTvLifdW/e90IvVnOu5hmFfFpKtEeOrI8fpIo K0Xu6RipuVapZWRy7Eydkl23bgriXyN+aymBEkthxyqb0MgN/YnfiqAyIrt2XhRw kN3X+8ME6fCYmisnxjsq/CRdL0ZtCjI= -----END CERTIFICATE-----Generated at Thu Jul 10 17:53:32 2025 by rpki-client