$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/23d9774d-40f5-3315-85fc-4ed6856e5617.roa File: 23d9774d-40f5-3315-85fc-4ed6856e5617.roa (raw, json) Hash identifier: ie4u2m3FJmxnLlxkNzybxM5ucPDvJtcPNSdLM4e9KSU= Subject key identifier: 40:DD:70:6F:5F:9B:A2:B8:50:09:AA:E8:41:F1:DA:CA:58:9D:33:98 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849CBCFA119B96E441500B9BF00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/23d9774d-40f5-3315-85fc-4ed6856e5617.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 3360 IP address blocks: 192.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a1:19:b9:6e:44:15:00:b9:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=35d15127-b227-4430-869e-b8635cc1c651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:f0:65:2f:3a:e3:95:28:cd:fc:9f:d5:74: c8:f1:a7:44:92:4f:da:23:02:51:37:e5:22:17:17: ee:67:2b:b5:6a:5e:01:cc:40:95:3a:8e:a1:78:74: 10:5b:10:4a:0a:33:2b:80:db:91:3a:e2:ec:4a:29: 2d:86:d8:1f:a0:56:ad:6c:8d:57:8c:d7:2b:87:12: bd:88:f8:7b:fd:6f:a4:0e:39:e3:eb:3a:56:33:73: 7f:ba:37:b5:fe:83:5e:dd:8f:b3:4a:63:9b:35:0e: d9:e0:7c:d6:47:bb:6e:be:9a:b5:43:5a:d8:b7:dd: 5d:a1:6f:5a:40:73:f0:68:43:ad:bc:14:66:9d:bd: 34:e3:c5:97:38:2f:e9:bc:d1:26:4e:15:a2:b4:13: 17:7e:bb:35:78:ed:48:8d:4b:a2:73:d3:0d:e7:66: 8f:4a:85:ca:13:fd:06:64:1e:2a:57:66:c2:0f:de: 97:46:53:fb:60:68:88:fe:e5:f4:1e:88:82:c5:de: 49:be:4d:c3:1e:94:a9:ae:cf:96:87:dd:3c:db:30: 97:82:18:78:71:d2:e0:b1:90:9c:1b:61:e7:f4:e6: 5e:da:e7:ac:77:2b:e1:1b:67:80:db:8a:fe:5a:d9: 7a:2d:f0:aa:73:a4:c5:51:1e:6d:5c:52:08:47:48: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:70:6F:5F:9B:A2:B8:50:09:AA:E8:41:F1:DA:CA:58:9D:33:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/23d9774d-40f5-3315-85fc-4ed6856e5617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.56.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:58:ec:a0:cd:8b:42:fe:85:8f:01:dc:f0:f4:54:a1:bb:36: 14:89:85:85:01:0d:79:57:88:62:43:7c:ba:8d:35:36:05:0a: b6:5e:60:47:f2:c7:17:69:10:51:7d:87:b6:05:43:91:1e:2a: 88:e6:4b:1f:f0:4c:e4:e0:50:ed:96:c9:a7:3e:52:90:56:57: 4c:44:be:2a:ad:ba:68:2e:80:64:7a:60:dd:d4:42:c7:2c:d9: 4a:66:0e:4e:7b:1a:d5:14:f8:42:93:e5:2a:51:bd:c7:f2:dc: 1e:47:b2:6b:d2:b2:dd:ac:53:e8:04:cc:7d:0a:71:53:e1:9a: 31:85:9a:51:ad:c2:70:32:ca:af:3a:be:78:6d:10:d4:ba:44: b7:b1:ce:9c:14:4c:9d:b6:bd:b9:be:67:b5:04:1a:70:b8:8c: 4d:50:20:47:b0:20:1f:30:0a:f4:71:05:b3:22:fa:4c:50:87: 30:10:61:22:49:77:93:6a:e8:fa:7f:98:89:2a:6f:e1:81:90: d8:4d:7a:80:12:1e:24:64:e0:95:20:28:e4:40:2c:f8:6c:3b: 7b:2d:88:ba:b6:9b:eb:2b:d5:90:71:66:bc:a3:ba:74:e4:9c: 98:26:07:16:7c:c3:bc:56:c2:41:b6:2e:fb:12:ff:5f:81:23: d3:e3:69:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6EZuW5EFQC5vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MzVkMTUxMjctYjIyNy00NDMwLTg2OWUtYjg2MzVjYzFjNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHwZS8645Uozfyf1XTI8adEkk/aIwJRN+Ui FxfuZyu1al4BzECVOo6heHQQWxBKCjMrgNuROuLsSikthtgfoFatbI1XjNcrhxK9 iPh7/W+kDjnj6zpWM3N/uje1/oNe3Y+zSmObNQ7Z4HzWR7tuvpq1Q1rYt91doW9a QHPwaEOtvBRmnb0048WXOC/pvNEmThWitBMXfrs1eO1IjUuic9MN52aPSoXKE/0G ZB4qV2bCD96XRlP7YGiI/uX0HoiCxd5Jvk3DHpSprs+Wh9082zCXghh4cdLgsZCc G2Hn9OZe2uesdyvhG2eA24r+Wtl6LfCqc6TFUR5tXFIIR0iYxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDdcG9fm6K4UAmq6EHx2spYnTOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjNkOTc3NGQtNDBmNS0z MzE1LTg1ZmMtNGVkNjg1NmU1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDgaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpY7KDNi0L+hY8B3PD0VKG7NhSJhYUBDXlXiGJDfLqNNTYFCrZeYEfy xxdpEFF9h7YFQ5EeKojmSx/wTOTgUO2Wyac+UpBWV0xEviqtumgugGR6YN3UQscs 2UpmDk57GtUU+EKT5SpRvcfy3B5HsmvSst2sU+gEzH0KcVPhmjGFmlGtwnAyyq86 vnhtENS6RLexzpwUTJ22vbm+Z7UEGnC4jE1QIEewIB8wCvRxBbMi+kxQhzAQYSJJ d5Nq6Pp/mIkqb+GBkNhNeoASHiRk4JUgKORALPhsO3stiLq2m+sr1ZBxZryjunTk nJgmBxZ8w7xWwkG2LvsS/1+BI9PjaUo= -----END CERTIFICATE-----Generated at Sat May 10 22:15:18 2025 by rpki-client