$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa File: db6195fd-1939-3b6e-ad36-d0a8359d831e.roa (raw, json) Hash identifier: pLQRSarihasnouHofauAFtXXziSJrc3Btc9wg1v8VmM= Subject key identifier: 0E:23:79:EA:C0:80:9B:0E:22:70:F1:20:44:03:4F:19:B1:90:68:0C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F432858498CFF13174F72824FE9039480 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 203 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:13:17:4f:72:82:4f:e9:03:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=1febb23e-5924-4c97-94f8-a01e08d2bf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b6:e8:d8:13:71:78:e8:ae:42:f4:e6:33:c5: 86:2b:49:56:4a:a6:11:07:62:56:67:f5:cb:5d:db: 65:6f:6c:3c:30:fc:74:13:7a:7c:37:33:46:82:51: ff:bc:73:cd:38:9a:aa:da:22:b1:c2:a2:b6:e6:8b: ce:f0:d6:a8:0a:48:42:a3:25:c4:3b:fc:36:21:54: f6:c9:01:69:93:55:8b:56:ee:e8:2e:20:53:a9:a6: 4d:df:22:51:f5:ed:75:a7:d6:e4:f5:22:67:db:47: f1:0a:75:ee:e0:13:1d:88:60:2f:a7:50:22:82:a1: d3:aa:b6:cf:cf:2f:3f:b2:14:13:57:b8:a8:b8:fc: 57:a6:70:a1:5d:9d:91:12:83:bd:e2:fd:9e:74:ac: 13:a6:41:7e:47:dd:86:af:dd:99:41:00:36:bd:5a: c3:1c:e8:95:1c:ab:e6:08:a9:df:2e:6c:a0:bb:79: e5:57:0c:5e:ae:69:48:ac:30:42:d3:f3:de:d2:ad: 88:d5:7d:5b:88:6a:a5:11:24:96:4c:29:d6:70:af: 17:19:1d:cd:21:6c:b2:02:12:b5:b3:46:68:ae:ba: 47:7b:5f:ba:5e:c7:57:d8:98:b9:6e:ce:90:d8:e4: 58:49:6b:94:4c:35:10:71:d1:d6:ab:78:73:1d:b7: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:23:79:EA:C0:80:9B:0E:22:70:F1:20:44:03:4F:19:B1:90:68:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/db6195fd-1939-3b6e-ad36-d0a8359d831e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bf:de:a0:41:b9:d7:84:50:7e:6c:7d:65:99:6c:25:9e:41: 7e:66:59:4d:d3:50:03:16:13:69:ce:f5:97:b8:c1:59:f6:3d: 36:6c:b5:3a:d1:0d:2e:2b:0e:57:d7:7e:3e:9a:1f:24:eb:59: b4:8e:1d:28:a4:b1:6e:32:94:27:a0:f4:9c:86:3d:c7:c6:66: ed:a8:6b:40:e8:b5:41:36:9a:1d:86:3c:22:69:08:d2:92:f2: e0:2c:f3:e5:57:ec:a7:41:c6:20:f2:6b:1e:96:fc:fa:ce:7e: 31:e6:a8:7b:74:27:2e:5f:9d:c8:87:6b:40:79:53:c8:bd:17: 9f:00:51:7d:31:02:4d:3a:a6:c7:0e:69:49:2d:fb:e3:62:de: 6e:8c:de:e2:d9:3c:a2:64:73:c6:04:65:4a:86:75:03:86:ca: 8a:3c:07:da:be:6a:40:21:e6:0e:90:6c:be:ea:26:de:2e:c5: d7:0c:c5:98:f7:fb:21:98:ec:b6:26:c2:f3:6b:8a:d6:a8:be: 15:45:3a:ea:24:d6:5a:65:e8:e9:e2:a3:3e:2e:d2:54:ce:f1: 40:17:a4:4c:99:26:dd:84:c2:ca:99:e5:50:5c:c8:01:79:9a: b0:7c:cf:78:ee:0a:9d:e6:d2:08:4d:bd:7d:66:9a:96:67:13: 53:b9:f6:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xMXT3KCT+kDlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MWZlYmIyM2UtNTkyNC00Yzk3LTk0ZjgtYTAxZTA4ZDJiZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbbo2BNxeOiuQvTmM8WGK0lWSqYRB2JWZ/XL Xdtlb2w8MPx0E3p8NzNGglH/vHPNOJqq2iKxwqK25ovO8NaoCkhCoyXEO/w2IVT2 yQFpk1WLVu7oLiBTqaZN3yJR9e11p9bk9SJn20fxCnXu4BMdiGAvp1AigqHTqrbP zy8/shQTV7iouPxXpnChXZ2REoO94v2edKwTpkF+R92Gr92ZQQA2vVrDHOiVHKvm CKnfLmygu3nlVwxermlIrDBC0/Pe0q2I1X1biGqlESSWTCnWcK8XGR3NIWyyAhK1 s0ZorrpHe1+6XsdX2Ji5bs6Q2ORYSWuUTDUQcdHWq3hzHbd7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4jeerAgJsOInDxIEQDTxmxkGgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGI2MTk1ZmQtMTkzOS0z YjZlLWFkMzYtZDBhODM1OWQ4MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+/3qBBudeEUH5sfWWZbCWeQX5mWU3TUAMWE2nO9Ze4wVn2PTZstTrR DS4rDlfXfj6aHyTrWbSOHSiksW4ylCeg9JyGPcfGZu2oa0DotUE2mh2GPCJpCNKS 8uAs8+VX7KdBxiDyax6W/PrOfjHmqHt0Jy5fnciHa0B5U8i9F58AUX0xAk06pscO aUkt++Ni3m6M3uLZPKJkc8YEZUqGdQOGyoo8B9q+akAh5g6QbL7qJt4uxdcMxZj3 +yGY7LYmwvNritaovhVFOuok1lpl6Onioz4u0lTO8UAXpEyZJt2EwsqZ5VBcyAF5 mrB8z3juCp3m0ghNvX1mmpZnE1O59p0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:01 2025 by rpki-client