$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa File: c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa (raw, json) Hash identifier: Jw1jsZuiSDBdyW2nDN1FkCZ/MIzQVm3bGk6J6rtFO5M= Subject key identifier: 7A:10:2E:70:2B:B8:8D:A6:63:9B:43:14:65:30:BF:B8:23:CD:87:19 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F432858499DBF38A1F4258BCF94248F60 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 0 IP address blocks: 192.74.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:a1:f4:25:8b:cf:94:24:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=84d11a6e-4e2d-41e2-b7aa-19ee0f3d1457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:ad:38:79:33:b8:97:d8:c7:f5:6b:2d:49: 66:8e:ab:bd:26:16:05:46:99:29:52:05:7c:0a:dc: 26:24:27:ff:43:01:72:96:0f:f6:4f:14:59:d0:6f: 25:34:81:ff:54:8a:89:1a:8c:9e:13:96:2b:1d:f7: 45:30:62:64:45:cb:15:b5:ad:91:a9:ad:ac:60:53: 1b:24:08:b6:39:eb:cf:c7:60:ba:47:75:45:34:9e: dc:af:52:a6:e4:c2:f2:a0:e5:d9:64:ac:69:16:cc: ab:ef:e5:03:80:fd:4a:ea:46:61:de:de:82:89:66: 9c:0a:97:21:ea:47:6c:56:8d:eb:04:d5:3c:b7:ce: ca:2d:a3:b2:7c:75:d4:e1:a6:6a:f4:24:01:d5:d9: 80:86:6d:3a:b1:0e:5f:d2:3a:07:07:cf:b4:f4:0d: a8:34:02:87:07:51:bb:d5:79:d5:0a:7f:53:ff:4f: df:2a:d1:5f:ea:2d:11:35:76:6b:8f:78:39:f9:60: 52:57:59:c5:55:7d:28:e8:c7:f5:06:1c:a4:65:b3: dd:6f:f1:84:76:1e:5e:fe:89:41:84:78:51:ae:df: 9b:18:20:91:ef:83:49:26:01:cb:50:59:3e:66:39: cb:af:c7:d1:f5:20:4e:b5:05:47:b1:95:c7:e6:95: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:10:2E:70:2B:B8:8D:A6:63:9B:43:14:65:30:BF:B8:23:CD:87:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.74.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b4:cc:aa:f3:36:2d:2e:c0:48:b5:4c:df:01:6e:8d:ff:74: 40:c1:91:a3:cf:7b:eb:6b:07:3e:9c:83:e8:05:07:91:8f:28: 44:33:3b:c4:f8:f5:81:1c:6f:4e:5a:97:46:12:e8:28:83:de: 1b:c3:91:3d:3d:56:92:72:44:1a:5e:b8:f2:48:c7:b3:70:f7: 4c:4f:0e:a2:32:5a:21:5f:3c:a8:7d:1a:34:c9:93:77:ba:39: 3f:7a:b7:50:59:40:1c:9f:b8:63:ab:44:42:01:ea:07:91:ce: 4a:e6:87:2c:47:7d:cf:5e:4a:3c:34:19:88:fd:6e:72:5a:ca: c0:8d:4e:85:ad:ed:d7:c2:28:cd:f3:1c:63:7a:ad:f9:5a:a0: d0:03:5b:40:c3:05:04:f0:3b:90:0d:49:5a:16:48:41:e0:44: 43:3f:cd:06:83:16:ee:4d:97:d7:b3:b4:f3:fa:36:1e:e7:76: 0e:42:ac:9b:96:d5:ec:2f:94:f7:9a:48:2f:55:dd:54:d1:df: 39:24:72:c0:80:ca:d3:0d:ba:7b:2e:e6:cd:e9:d9:fd:cc:2b: b0:4a:1e:d9:d0:de:66:8e:81:44:9d:74:08:de:19:07:04:1e: cf:5a:67:32:b3:52:43:b4:00:d5:0a:eb:e4:59:10:c5:a8:a0: 4d:a8:fa:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzih9CWLz5Qkj2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ODRkMTFhNmUtNGUyZC00MWUyLWI3YWEtMTllZTBmM2QxNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvStOHkzuJfYx/VrLUlmjqu9JhYFRpkpUgV8 CtwmJCf/QwFylg/2TxRZ0G8lNIH/VIqJGoyeE5YrHfdFMGJkRcsVta2Rqa2sYFMb JAi2OevPx2C6R3VFNJ7cr1Km5MLyoOXZZKxpFsyr7+UDgP1K6kZh3t6CiWacCpch 6kdsVo3rBNU8t87KLaOyfHXU4aZq9CQB1dmAhm06sQ5f0joHB8+09A2oNAKHB1G7 1XnVCn9T/0/fKtFf6i0RNXZrj3g5+WBSV1nFVX0o6Mf1BhykZbPdb/GEdh5e/olB hHhRrt+bGCCR74NJJgHLUFk+ZjnLr8fR9SBOtQVHsZXH5pXwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoQLnAruI2mY5tDFGUwv7gjzYcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYzJmY2QxNmQtZDIyMC0z YjhkLThlMGYtMWE1NWUzMjFjM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwErZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC0zKrzNi0uwEi1TN8Bbo3/dEDBkaPPe+trBz6cg+gFB5GPKEQzO8T4 9YEcb05al0YS6CiD3hvDkT09VpJyRBpeuPJIx7Nw90xPDqIyWiFfPKh9GjTJk3e6 OT96t1BZQByfuGOrREIB6geRzkrmhyxHfc9eSjw0GYj9bnJaysCNToWt7dfCKM3z HGN6rflaoNADW0DDBQTwO5ANSVoWSEHgREM/zQaDFu5Nl9eztPP6Nh7ndg5CrJuW 1ewvlPeaSC9V3VTR3zkkcsCAytMNunsu5s3p2f3MK7BKHtnQ3maOgUSddAjeGQcE Hs9aZzKzUkO0ANUK6+RZEMWooE2o+s0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:38 2025 by rpki-client