$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa File: f13fc02f-a824-3a53-a360-617f1ec4209c.roa (raw, json) Hash identifier: PWZpuIwrInr2K0JLpTnqRbFN7InQ+k0IaX40BIrI3OE= Subject key identifier: BE:21:EB:F4:1F:7C:7B:B9:D2:81:86:1F:4E:39:02:AB:56:64:B5:B0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858491246BA6440B2375F8708F140 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 192.46.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:64:40:b2:37:5f:87:08:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=dd09bcaf-339c-48e1-8003-53966fd0e40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:de:b6:19:d5:09:b4:13:d4:b7:ea:65:d4: aa:39:b1:5a:fb:57:d0:0f:73:38:2d:45:5a:72:6c: a7:ef:3b:2b:f4:20:b4:24:f0:7f:a0:87:43:43:3c: 1e:9d:39:26:94:5d:49:31:76:31:55:77:12:44:6a: 79:56:d0:68:f3:e4:78:23:45:bb:9d:18:79:cf:02: 9c:f7:f4:3e:b1:15:8b:61:c3:9f:8c:ed:b0:31:57: 9f:f0:ad:cb:81:40:3d:1e:7f:af:dd:0a:50:87:c7: 0d:4f:14:b9:97:e0:96:88:11:af:8c:f4:8d:3a:98: af:ed:7e:b5:c4:ef:10:e4:9a:17:70:59:ef:36:39: ed:c5:32:ce:b0:5e:be:ea:0c:b5:ca:e9:9c:7f:97: f1:45:f8:f5:5a:70:b5:b7:18:8b:4d:91:96:f1:4c: fc:e6:fc:07:b6:5b:3c:ca:cf:28:4b:20:fa:06:38: 6b:a5:b4:4c:ad:3c:67:53:78:54:b5:2b:38:00:35: 15:b0:67:2e:2e:cf:a8:04:06:c6:34:f8:9b:ee:4d: 3c:49:23:f1:29:38:c7:0a:19:8d:a4:78:7e:0a:d8: f6:dd:4e:da:9c:f3:53:69:fa:6e:14:10:d9:6b:b6: 12:8b:1f:fd:a9:85:28:85:21:af:9a:39:a8:6d:f2: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:21:EB:F4:1F:7C:7B:B9:D2:81:86:1F:4E:39:02:AB:56:64:B5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8a:19:1a:9d:0a:1e:7b:b3:84:59:10:3b:57:d7:a4:ba:4f: 7d:f6:6f:2d:78:ef:ff:eb:52:8d:b4:60:75:28:db:8e:82:56: ea:ed:ca:3e:5f:d7:ce:d1:a7:74:9b:50:23:da:af:28:a1:9e: ef:46:c1:85:b4:c9:84:d9:17:20:82:51:71:4a:32:7b:41:25: 7f:5c:ec:7a:cb:ef:ee:5d:c7:ba:84:57:15:f3:11:e0:87:bc: d6:55:1f:a6:57:ec:91:a6:c1:2a:be:ce:f2:45:01:76:f7:46: cc:c5:5a:70:ac:67:48:ea:ff:5a:19:c3:b5:c7:7f:0d:cd:00: 33:74:9b:f3:0f:6f:b3:3d:4f:f9:c8:e8:cf:02:76:e4:a2:91: f3:3a:35:53:f1:79:68:75:95:35:af:12:56:88:81:af:64:38: 43:71:ef:ed:4e:48:9c:a3:de:d2:34:98:80:e8:ed:92:ea:e4: f8:1f:c3:54:e4:70:13:fb:f4:fc:a8:1c:08:97:43:af:f8:70: a2:f0:63:fa:c6:d1:9a:05:df:85:c4:40:70:9d:3b:cd:d7:75: a6:97:4c:3d:63:cf:65:6b:b9:89:ac:c6:94:85:c1:42:22:e0: 2a:26:41:31:c0:65:83:82:33:84:86:e9:87:9f:2f:b6:00:f8: dc:a6:27:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrpkQLI3X4cI8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGQwOWJjYWYtMzM5Yy00OGUxLTgwMDMtNTM5NjZmZDBlNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDnethnVCbQT1LfqZdSqObFa+1fQD3M4LUVa cmyn7zsr9CC0JPB/oIdDQzwenTkmlF1JMXYxVXcSRGp5VtBo8+R4I0W7nRh5zwKc 9/Q+sRWLYcOfjO2wMVef8K3LgUA9Hn+v3QpQh8cNTxS5l+CWiBGvjPSNOpiv7X61 xO8Q5JoXcFnvNjntxTLOsF6+6gy1yumcf5fxRfj1WnC1txiLTZGW8Uz85vwHtls8 ys8oSyD6BjhrpbRMrTxnU3hUtSs4ADUVsGcuLs+oBAbGNPib7k08SSPxKTjHChmN pHh+Ctj23U7anPNTafpuFBDZa7YSix/9qYUohSGvmjmobfK70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4h6/QffHu50oGGH045AqtWZLWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjEzZmMwMmYtYTgyNC0z YTUzLWEzNjAtNjE3ZjFlYzQyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyKGRqdCh57s4RZEDtX16S6T332by147//rUo20YHUo246CVurtyj5f 187Rp3SbUCParyihnu9GwYW0yYTZFyCCUXFKMntBJX9c7HrL7+5dx7qEVxXzEeCH vNZVH6ZX7JGmwSq+zvJFAXb3RszFWnCsZ0jq/1oZw7XHfw3NADN0m/MPb7M9T/nI 6M8CduSikfM6NVPxeWh1lTWvElaIga9kOENx7+1OSJyj3tI0mIDo7ZLq5Pgfw1Tk cBP79PyoHAiXQ6/4cKLwY/rG0ZoF34XEQHCdO83XdaaXTD1jz2VruYmsxpSFwUIi 4ComQTHAZYOCM4SG6YefL7YA+NymJ5s= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:51 2025 by rpki-client