$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: vyADG5UJfInVmR1ojY2LRTZs55sH+JasflfOIGL5IZM= Subject key identifier: 06:8D:56:70:03:40:72:3F:F6:51:1B:40:00:07:2C:73:18:80:F3:DC Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F43285848ADC6198F8B618D97D0F80500 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:19:8f:8b:61:8d:97:d0:f8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=1c6893ed-9cd2-4108-bf25-b78fa44e9204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:84:ab:eb:de:d1:2b:df:22:3a:3e:83:c5: f3:80:fc:61:9c:aa:ef:cb:b6:0e:65:46:e7:fb:91: 34:01:f3:7e:f2:a8:9f:95:3e:08:83:b9:d7:db:8f: 24:4a:1f:d9:98:fa:86:1a:b9:0d:0f:92:f4:b5:fc: be:8f:4a:fe:a0:2e:34:00:18:e4:e0:39:04:67:63: ce:8f:d4:84:ef:63:a3:ca:96:31:96:17:d9:8a:f3: c8:2c:73:d9:0a:33:26:d5:71:46:31:c0:f5:ee:60: 07:2a:ad:7f:6a:31:fb:7f:20:0b:90:b9:5f:f2:24: 9f:51:d4:07:82:67:82:5c:13:3f:ed:b5:c4:f0:44: 8b:ac:18:40:8d:96:ec:b9:5f:1b:be:0f:d4:ba:b0: ba:46:5c:93:93:30:f7:9f:2d:2c:05:66:d6:24:f6: 25:fd:d9:54:a4:3f:0f:c1:20:ba:12:9e:ba:4f:c4: 0c:65:85:46:03:9c:7f:27:f6:d5:bd:44:39:bf:c3: d2:49:8c:53:61:fc:d8:eb:53:51:ef:a4:f4:1e:78: b1:e1:37:27:57:e5:4c:7a:57:60:d8:f2:23:48:f6: 41:0c:ed:6c:09:67:91:5f:39:21:8a:84:13:e3:7a: 71:8f:d3:87:05:e9:49:85:be:21:cf:ab:80:fa:e4: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8D:56:70:03:40:72:3F:F6:51:1B:40:00:07:2C:73:18:80:F3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:de:f6:bd:36:bc:f9:5c:56:2d:57:91:a5:15:b0:45:bf:f6: 39:f1:b7:c1:ae:47:c1:3b:78:04:b8:e5:5d:7a:61:9d:78:2d: 69:e8:c2:78:e7:5d:d0:db:da:9a:1c:c4:cb:66:16:ed:57:d9: 2d:1c:f3:54:ac:93:3f:fd:f5:f8:58:48:7c:69:26:fe:0a:11: b7:0b:06:83:9f:2d:d0:d2:e1:a6:db:3b:34:e6:72:30:30:8c: 3f:f2:ee:cd:64:75:a1:5f:a5:97:93:3f:b1:13:08:29:66:4a: ba:eb:25:77:46:23:ec:f1:90:17:55:42:3c:db:ff:fb:ac:ff: 1a:2b:8a:c8:3b:42:65:7f:74:dc:80:75:a9:86:fa:61:eb:72: 0c:3c:10:c5:52:f2:aa:2e:e0:32:6b:8b:78:47:46:8a:e1:5e: 61:e0:0c:9c:d8:49:9d:1c:9e:15:4f:04:c7:43:84:dc:e3:fc: ce:ee:94:66:22:8a:23:5f:19:3e:63:67:7e:2c:b8:78:7c:72: fa:2e:ba:b4:f6:94:c9:57:f2:de:fb:39:4a:96:6e:d7:31:d9: 26:0a:ec:b8:76:39:d7:41:70:24:44:46:8d:54:c6:14:8a:7a: 47:4c:d0:d6:45:95:d2:48:9c:47:41:28:8c:47:2b:9e:18:85: 56:c8:49:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhmPi2GNl9D4BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MWM2ODkzZWQtOWNkMi00MTA4LWJmMjUtYjc4ZmE0NGU5MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmEq+ve0SvfIjo+g8XzgPxhnKrvy7YOZUbn +5E0AfN+8qiflT4Ig7nX248kSh/ZmPqGGrkND5L0tfy+j0r+oC40ABjk4DkEZ2PO j9SE72OjypYxlhfZivPILHPZCjMm1XFGMcD17mAHKq1/ajH7fyALkLlf8iSfUdQH gmeCXBM/7bXE8ESLrBhAjZbsuV8bvg/UurC6RlyTkzD3ny0sBWbWJPYl/dlUpD8P wSC6Ep66T8QMZYVGA5x/J/bVvUQ5v8PSSYxTYfzY61NR76T0Hnix4TcnV+VMeldg 2PIjSPZBDO1sCWeRXzkhioQT43pxj9OHBelJhb4hz6uA+uQ6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaNVnADQHI/9lEbQAAHLHMYgPPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7e9r02vPlcVi1XkaUVsEW/9jnxt8GuR8E7eAS45V16YZ14LWnownjn XdDb2pocxMtmFu1X2S0c81Sskz/99fhYSHxpJv4KEbcLBoOfLdDS4abbOzTmcjAw jD/y7s1kdaFfpZeTP7ETCClmSrrrJXdGI+zxkBdVQjzb//us/xorisg7QmV/dNyA damG+mHrcgw8EMVS8qou4DJri3hHRorhXmHgDJzYSZ0cnhVPBMdDhNzj/M7ulGYi iiNfGT5jZ34suHh8cvouurT2lMlX8t77OUqWbtcx2SYK7Lh2OddBcCRERo1UxhSK ekdM0NZFldJInEdBKIxHK54YhVbISXg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:12 2025 by rpki-client