$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa File: 09210bcd-f256-3fd2-9377-2d63cc5d849e.roa (raw, json) Hash identifier: XeW+YzzZ1oSWaHYgEya826Hd/yXOHpDnsd7FWGtwIgM= Subject key identifier: 13:84:6E:2E:9A:72:73:D2:F0:82:4C:BE:FD:B1:C4:67:BE:48:97:AB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848EF613E7E46B424D73912D840 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 192.46.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3e:7e:46:b4:24:d7:39:12:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=712c166b-1fa8-40e5-ac1e-305a44444a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:ec:2a:68:4e:b9:92:d3:92:a1:a1:90:0e: bd:7a:f6:03:26:3e:3b:b3:4f:40:f8:2f:cc:41:09: 7f:cf:01:b4:f3:98:61:c2:72:ca:22:11:4a:a4:52: 15:a3:10:92:e8:bc:c7:fe:ce:17:21:af:5c:f1:85: 24:df:59:79:ca:e2:50:38:8f:3b:27:64:f5:94:fd: 77:ff:aa:14:ba:ad:cf:4d:25:11:a1:6e:af:1f:7b: 60:fd:65:66:ab:d3:9d:d6:36:b3:7c:66:34:a3:16: b8:0d:03:ff:e0:62:8c:4e:bc:5f:82:74:52:58:7a: 84:de:4d:e5:7f:73:dd:7e:28:b0:e3:c6:ec:51:de: c5:d1:8a:69:83:3a:aa:2c:8a:64:6c:1d:75:64:62: 26:13:76:02:ca:24:fb:92:49:35:32:e3:30:89:a3: 1d:d4:be:c2:e2:8d:45:e3:65:17:7c:c4:c6:f4:24: 4a:32:ca:dd:68:91:02:26:fb:6a:02:f8:fd:8d:36: 44:e5:96:2d:bd:f3:e4:24:b9:8d:f4:d2:5d:d5:45: 0a:e5:7a:4c:ea:14:f9:15:11:a0:1c:cc:62:19:59: f6:d4:40:28:50:c0:6a:aa:7e:1b:d7:5d:a3:ab:e4: 1f:bd:1a:93:73:ca:b0:2a:29:dd:86:09:7e:9f:10: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:84:6E:2E:9A:72:73:D2:F0:82:4C:BE:FD:B1:C4:67:BE:48:97:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:25:0d:ab:36:c3:41:1d:fc:c0:39:da:b2:49:f1:16:8f:05: d2:3e:1d:f9:e2:48:93:e6:36:8d:fe:9e:74:fe:18:05:21:26: d5:eb:88:c7:52:b0:14:58:68:ea:16:e8:ea:4c:ce:1a:5d:9b: a9:61:5c:f9:d0:d4:ab:34:76:9c:07:b5:16:bf:97:f1:f4:da: 2b:e6:9d:11:08:ee:b7:04:e7:8d:2a:13:ce:9d:d7:e8:1b:ff: 1d:38:87:83:98:86:13:63:15:81:9a:18:ef:8f:21:31:2a:64: 78:2c:82:b1:3c:53:15:73:eb:17:8a:f5:3e:84:39:e0:95:11: 18:bd:3a:cd:c1:57:3e:1a:41:c0:24:53:c7:56:c5:98:5d:7c: 68:e6:24:d0:b7:09:1d:11:c7:5f:57:c4:72:22:99:81:12:6b: 4d:90:cc:b1:ee:12:be:03:55:30:f9:6b:47:41:09:32:f4:55: 57:a2:06:26:3b:67:a5:66:2e:c0:56:c1:ad:9f:6f:fe:1a:16: 99:07:09:cb:54:83:e8:0e:56:ba:36:53:28:9f:5f:96:1d:be: 8d:68:12:6e:a6:7b:1d:a1:3a:e1:66:ae:b7:55:d1:72:3d:78: 76:55:8f:40:d8:c3:40:00:91:f8:da:a5:70:65:87:da:5f:63: 1b:07:9b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT5+RrQk1zkS2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NzEyYzE2NmItMWZhOC00MGU1LWFjMWUtMzA1YTQ0NDQ0YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV3sKmhOuZLTkqGhkA69evYDJj47s09A+C/M QQl/zwG085hhwnLKIhFKpFIVoxCS6LzH/s4XIa9c8YUk31l5yuJQOI87J2T1lP13 /6oUuq3PTSURoW6vH3tg/WVmq9Od1jazfGY0oxa4DQP/4GKMTrxfgnRSWHqE3k3l f3Pdfiiw48bsUd7F0YppgzqqLIpkbB11ZGImE3YCyiT7kkk1MuMwiaMd1L7C4o1F 42UXfMTG9CRKMsrdaJECJvtqAvj9jTZE5ZYtvfPkJLmN9NJd1UUK5XpM6hT5FRGg HMxiGVn21EAoUMBqqn4b112jq+QfvRqTc8qwKindhgl+nxCxVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOEbi6acnPS8IJMvv2xxGe+SJerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDkyMTBiY2QtZjI1Ni0z ZmQyLTkzNzctMmQ2M2NjNWQ4NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGclDas2w0Ed/MA52rJJ8RaPBdI+HfniSJPmNo3+nnT+GAUhJtXriMdS sBRYaOoW6OpMzhpdm6lhXPnQ1Ks0dpwHtRa/l/H02ivmnREI7rcE540qE86d1+gb /x04h4OYhhNjFYGaGO+PITEqZHgsgrE8UxVz6xeK9T6EOeCVERi9Os3BVz4aQcAk U8dWxZhdfGjmJNC3CR0Rx19XxHIimYESa02QzLHuEr4DVTD5a0dBCTL0VVeiBiY7 Z6VmLsBWwa2fb/4aFpkHCctUg+gOVro2UyifX5Ydvo1oEm6mex2hOuFmrrdV0XI9 eHZVj0DYw0AAkfjapXBlh9pfYxsHm7s= -----END CERTIFICATE-----Generated at Sat May 10 09:47:39 2025 by rpki-client