$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa File: 0e07f313-ba74-3140-a996-a0639aa53e0b.roa (raw, json) Hash identifier: 0XdQfz4I3LqHi7HMmMJ0X1NUS8IPQKK9KmBEJSGK28Y= Subject key identifier: 49:55:7A:D0:25:F3:2E:95:B1:24:83:0B:C5:23:5B:D1:23:EA:32:60 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858498CFF12E56E0BE29420253DC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 3360 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:12:e5:6e:0b:e2:94:20:25:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=1e879a8b-1863-4960-b649-dd7e834e0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:a2:fe:c1:3d:c3:93:4d:c7:f0:42:9b:44: 03:e9:1a:bd:70:a5:28:32:36:25:ea:b0:b3:ac:86: bd:bf:af:21:63:77:c0:bd:15:57:b0:86:d3:1e:2e: 43:be:f8:a8:3c:24:91:08:6d:f6:e7:7d:d1:77:f9: 6d:ee:65:8a:0c:0e:f5:6b:57:e4:8d:98:bb:9a:57: 5a:ac:75:bf:aa:6a:70:7c:18:b2:9d:79:48:43:d0: ea:bc:8f:83:4b:84:5d:b8:db:b8:a5:a7:53:c0:e4: cb:ef:76:c6:36:f9:a0:5a:08:7b:a0:ee:4e:15:e3: dd:af:1a:58:f8:d2:ad:80:29:bc:21:ed:57:c9:33: d7:69:31:95:42:21:eb:47:20:a9:d7:86:67:f5:fe: bb:8e:30:38:ea:55:e7:83:cb:7f:c1:18:a4:f6:3b: fa:fe:14:63:d5:dc:b5:4f:1e:3c:a3:a6:0b:ef:56: a1:85:6c:ad:cc:c4:c8:bd:cb:95:cc:bc:57:59:82: c6:19:10:0d:6d:23:f6:00:8b:ef:4d:ef:f2:b7:32: dc:58:02:df:20:e3:53:a2:d1:ba:b3:d6:4a:95:72: a2:09:3e:f1:84:22:62:26:a5:b5:d8:3b:7d:81:d5: a4:b0:a0:fb:00:5a:16:6a:8f:9f:01:8b:8c:de:ea: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:7A:D0:25:F3:2E:95:B1:24:83:0B:C5:23:5B:D1:23:EA:32:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0e07f313-ba74-3140-a996-a0639aa53e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:34:27:d2:ad:03:88:87:0c:f8:ea:f4:86:c5:7a:a2:49:86: 14:a8:ea:3b:c7:e2:87:21:c5:b0:5b:53:79:d6:62:8d:c6:c3: f4:9f:fb:fb:92:69:bb:fb:d4:5a:82:2b:b8:05:fc:33:86:89: 96:39:c6:da:2d:91:26:9a:af:ea:c7:3d:f0:09:42:9b:1e:7e: fd:82:15:80:d8:bd:6a:75:d0:15:01:04:f7:17:3f:3b:03:fe: b7:22:24:91:0c:1d:4d:97:c3:90:66:ff:0e:3f:0b:95:0e:51: de:8d:de:e0:ef:65:4b:0a:4a:f5:e3:cc:b2:17:2d:50:30:33: db:5d:4d:7f:b7:07:63:6b:12:14:25:37:e9:24:d1:82:83:ea: 38:36:73:78:f5:f0:ae:d3:d6:76:7f:70:81:5e:99:c4:d2:9c: 04:51:66:59:ca:b7:a0:36:a2:f9:d6:88:b9:a1:03:36:7d:82: a5:47:b7:fa:08:22:8c:f0:f0:05:fa:6a:cb:45:3c:79:d0:e7: 8a:10:05:ac:61:f3:63:cc:0c:2b:7a:23:3b:d3:d2:eb:c4:57: 64:e0:70:0a:c2:cf:79:a4:07:20:0e:df:8c:91:8a:52:fe:50: 71:1d:7a:58:b7:4b:dc:f3:fe:91:73:39:c1:58:4c:f4:04:fb: 28:d6:64:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xLlbgvilCAlPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MWU4NzlhOGItMTg2My00OTYwLWI2NDktZGQ3ZTgzNGUwMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V2i/sE9w5NNx/BCm0QD6Rq9cKUoMjYl6rCz rIa9v68hY3fAvRVXsIbTHi5DvvioPCSRCG32533Rd/lt7mWKDA71a1fkjZi7mlda rHW/qmpwfBiynXlIQ9DqvI+DS4RduNu4padTwOTL73bGNvmgWgh7oO5OFePdrxpY +NKtgCm8Ie1XyTPXaTGVQiHrRyCp14Zn9f67jjA46lXng8t/wRik9jv6/hRj1dy1 Tx48o6YL71ahhWytzMTIvcuVzLxXWYLGGRANbSP2AIvvTe/ytzLcWALfIONTotG6 s9ZKlXKiCT7xhCJiJqW12Dt9gdWksKD7AFoWao+fAYuM3uqOLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElVetAl8y6VsSSDC8UjW9Ej6jJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGUwN2YzMTMtYmE3NC0z MTQwLWE5OTYtYTA2MzlhYTUzZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE0J9KtA4iHDPjq9IbFeqJJhhSo6jvH4ochxbBbU3nWYo3Gw/Sf+/uS abv71FqCK7gF/DOGiZY5xtotkSaar+rHPfAJQpsefv2CFYDYvWp10BUBBPcXPzsD /rciJJEMHU2Xw5Bm/w4/C5UOUd6N3uDvZUsKSvXjzLIXLVAwM9tdTX+3B2NrEhQl N+kk0YKD6jg2c3j18K7T1nZ/cIFemcTSnARRZlnKt6A2ovnWiLmhAzZ9gqVHt/oI Iozw8AX6astFPHnQ54oQBaxh82PMDCt6IzvT0uvEV2TgcArCz3mkByAO34yRilL+ UHEdeli3S9zz/pFzOcFYTPQE+yjWZDs= -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:12 2025 by rpki-client