$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json) Hash identifier: np4txkiDeyrH68o4tb2+Dk9LM6g/qJmJLNfcOVXsIh0= Subject key identifier: 74:C5:51:EC:2D:A2:0C:7F:26:34:39:0D:B3:C7:1F:B3:D5:40:A6:8B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848ADC617B0D565CBFB23E5CCC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 203 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:17:b0:d5:65:cb:fb:23:e5:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=b18dd2d9-7a40-4272-b8ad-17c198464753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:01:f5:10:58:3d:23:4a:9d:27:5d:40:44: 59:db:e3:a8:ee:1b:7b:89:c2:9d:70:61:4b:fa:56: 0b:d4:f4:e3:95:5f:b9:39:24:1c:4c:b8:55:69:cd: 1c:d9:7c:d9:3f:cc:0b:0d:7e:31:da:be:56:a6:7c: 2c:8a:86:d6:da:52:96:8f:b8:cb:71:37:8a:a0:6f: 57:90:e4:d4:2e:0f:eb:00:73:7f:3e:a1:2f:81:57: 78:8c:cc:9a:9f:83:62:3f:85:0c:51:67:07:29:e0: 31:37:f0:53:17:54:19:0d:b6:83:f2:51:35:e1:fd: 4e:e6:3c:6d:b8:a6:56:b7:cb:bc:4b:c2:29:66:c9: 5a:f1:e9:71:77:22:94:ea:74:f2:92:74:3f:75:bc: 0a:06:29:df:16:db:b2:d9:2b:5b:0b:db:1f:96:d4: 4f:8f:bf:41:20:93:b1:7a:3f:18:fa:6a:ef:81:2b: 80:33:54:43:e3:86:82:1e:a5:4f:92:e1:52:7e:d2: 52:de:24:77:be:aa:d1:0a:6d:cb:f9:ab:4f:ff:4c: 65:46:e1:b4:b3:33:5e:4c:5c:0a:1b:35:17:7b:72: 4f:ef:00:a4:18:07:db:14:76:fd:ba:67:fb:e2:30: 6c:b9:85:24:8b:f0:ff:83:f2:b1:08:72:49:5e:c6: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:51:EC:2D:A2:0C:7F:26:34:39:0D:B3:C7:1F:B3:D5:40:A6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:75:7f:6b:97:c2:2c:c1:ff:11:96:e4:fe:41:a6:86:6d:af: 79:a2:94:00:39:c7:f4:71:b7:51:3c:59:89:27:64:de:7a:86: f8:67:e1:77:f7:08:f4:ee:78:62:f1:a3:21:22:b2:8a:70:39: a9:91:88:8f:0a:16:c1:d0:69:03:ea:f7:14:a4:d3:43:b3:1e: 67:19:f1:be:65:7c:a1:90:f2:61:e3:94:73:06:e1:97:a5:c0: d4:8b:db:d9:38:fb:7a:d6:bd:ca:1a:8c:2b:a6:14:e4:45:8b: 38:ca:1b:2e:bd:db:ac:43:84:40:36:e1:01:a0:5b:79:f9:f0: f5:f2:ed:94:b4:aa:ba:5f:92:22:9e:49:73:20:db:ad:4c:17: 4d:93:c4:a7:b0:47:95:3f:fc:4a:6f:4e:72:51:d9:c2:96:f0: 56:57:35:41:ec:42:11:32:9b:b1:eb:6b:87:1c:ad:8c:ff:21: c8:61:7b:82:c8:ac:2a:64:be:61:fc:3b:87:d8:d7:6a:6b:64: b8:08:89:57:04:ef:63:12:81:e0:fb:ea:a9:e2:cc:64:73:5d: 83:d7:e9:88:37:0d:c4:36:b4:87:89:5a:d8:88:f4:1c:79:92: b3:5d:02:47:23:21:f9:60:27:35:10:0f:42:4c:21:82:b4:f7: 0e:b9:1a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhew1WXL+yPlzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjE4ZGQyZDktN2E0MC00MjcyLWI4YWQtMTdjMTk4NDY0NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwkB9RBYPSNKnSddQERZ2+Oo7ht7icKdcGFL +lYL1PTjlV+5OSQcTLhVac0c2XzZP8wLDX4x2r5WpnwsiobW2lKWj7jLcTeKoG9X kOTULg/rAHN/PqEvgVd4jMyan4NiP4UMUWcHKeAxN/BTF1QZDbaD8lE14f1O5jxt uKZWt8u8S8IpZsla8elxdyKU6nTyknQ/dbwKBinfFtuy2StbC9sfltRPj79BIJOx ej8Y+mrvgSuAM1RD44aCHqVPkuFSftJS3iR3vqrRCm3L+atP/0xlRuG0szNeTFwK GzUXe3JP7wCkGAfbFHb9umf74jBsuYUki/D/g/KxCHJJXsY+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTFUewtogx/JjQ5DbPHH7PVQKaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGI2MTk1ZmQtMTkzOS0z YjZlLWFkMzYtZDBhODM1OWQ4MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ1f2uXwizB/xGW5P5BpoZtr3milAA5x/Rxt1E8WYknZN56hvhn4Xf3 CPTueGLxoyEisopwOamRiI8KFsHQaQPq9xSk00OzHmcZ8b5lfKGQ8mHjlHMG4Zel wNSL29k4+3rWvcoajCumFORFizjKGy6926xDhEA24QGgW3n58PXy7ZS0qrpfkiKe SXMg261MF02TxKewR5U//EpvTnJR2cKW8FZXNUHsQhEym7Hra4ccrYz/Ichhe4LI rCpkvmH8O4fY12prZLgIiVcE72MSgeD76qnizGRzXYPX6Yg3DcQ2tIeJWtiI9Bx5 krNdAkcjIflgJzUQD0JMIYK09w65Gl4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:03:04 2025 by rpki-client