$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa File: 44933cdf-f968-308a-928b-ac0b352a324d.roa (raw, json) Hash identifier: T6x/4ADtMMctV84msKRoM0Y3ZVRTYFH12bIjUK02T9s= Subject key identifier: E8:73:8D:7B:E7:03:70:9C:F0:CA:F1:78:86:BF:03:96:D1:41:30:DA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285849CE9A6C396B9EF44B16A66580 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 3356 IP address blocks: 192.46.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6c:39:6b:9e:f4:4b:16:a6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5789cfa8-deb6-46f3-984c-c7f74fbeb1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:81:fa:c7:ad:d2:fd:3a:29:78:ce:fe:7f: 0a:0f:06:01:c2:69:7a:03:89:19:d1:01:40:53:7a: 1f:69:2d:71:54:a0:00:77:83:49:0b:82:0a:19:cd: 7f:05:8d:40:82:79:fa:03:80:0d:34:51:f8:04:c3: 63:c9:ee:32:d7:8c:f7:3f:4f:71:ef:21:7f:b3:e5: 02:2d:c2:b9:fb:13:f6:27:11:94:10:47:ac:ed:03: 93:e6:03:89:18:28:9e:4e:c5:c3:07:16:cc:16:55: 9c:01:a4:b6:26:e8:30:f1:11:08:4c:7f:66:5e:54: cc:a7:e6:b4:86:b9:45:00:b2:c8:10:7b:d6:95:24: 5d:da:24:89:ae:27:7d:bd:46:53:cd:89:69:48:7e: 81:dc:4b:d2:c0:05:d5:d3:93:51:0c:89:ce:f4:ae: 6b:59:7d:f1:74:c8:c8:37:97:af:90:69:35:72:d6: 54:65:46:0a:88:30:ce:9e:dc:70:2f:af:1e:94:e8: 97:33:bd:d9:9e:0a:c1:30:9c:c4:e6:c2:93:62:d9: 37:83:3f:42:ab:70:7d:0d:66:b7:04:de:e2:4d:4b: 00:f3:7b:e0:3b:58:49:e7:d9:fb:8c:72:6f:74:dd: bf:22:59:6e:de:a8:a9:25:a6:bc:82:4a:ae:6d:50: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:73:8D:7B:E7:03:70:9C:F0:CA:F1:78:86:BF:03:96:D1:41:30:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:41:43:0d:cf:86:22:2d:d7:a3:62:8e:a9:07:b1:51:78:31: 71:d4:c2:d9:bd:b7:ba:b0:c6:02:1f:d3:1d:f8:4e:2b:6e:ce: 3a:a4:18:c8:ac:a2:d5:d2:93:d1:0c:63:80:c0:9c:d1:1d:c4: 5c:41:a5:f2:b1:9d:0a:1a:15:01:17:19:e8:65:6b:74:f1:f8: b5:f9:40:8a:5e:e5:48:24:0d:41:7f:7c:94:24:d3:4b:4a:e2: 76:9f:9c:4b:7d:41:0a:10:16:71:02:b8:eb:b4:4b:1e:27:e2: e5:c6:1c:89:a4:a6:8e:8b:e7:80:9b:43:66:ae:97:13:cf:9e: 05:c6:e8:ce:7b:b6:5a:6b:f3:7d:f3:af:9a:c2:84:6e:6a:27: 78:ad:aa:e9:0f:c9:cd:9a:c9:b2:2a:7d:a5:cf:52:da:06:bd: 6a:2d:6e:0b:fb:1b:46:db:e5:89:78:90:9c:a3:9d:7b:11:0e: ce:a4:00:95:0a:c9:3b:1c:e0:13:0a:0c:e4:17:56:cc:09:ec: 25:27:27:b1:30:3a:5d:29:48:63:03:30:01:a6:64:01:bd:dc: 6d:92:ce:07:0f:5d:68:97:1b:3a:39:25:f8:1d:c7:af:4b:f9: c9:c7:94:fb:4b:2e:db:57:e6:33:91:6c:e4:a2:de:b2:f4:dc: 74:fd:22:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmw5a570SxamZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NTc4OWNmYTgtZGViNi00NmYzLTk4NGMtYzdmNzRmYmViMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2B+set0v06KXjO/n8KDwYBwml6A4kZ0QFA U3ofaS1xVKAAd4NJC4IKGc1/BY1Agnn6A4ANNFH4BMNjye4y14z3P09x7yF/s+UC LcK5+xP2JxGUEEes7QOT5gOJGCieTsXDBxbMFlWcAaS2Jugw8REITH9mXlTMp+a0 hrlFALLIEHvWlSRd2iSJrid9vUZTzYlpSH6B3EvSwAXV05NRDInO9K5rWX3xdMjI N5evkGk1ctZUZUYKiDDOntxwL68elOiXM73ZngrBMJzE5sKTYtk3gz9Cq3B9DWa3 BN7iTUsA83vgO1hJ59n7jHJvdN2/Illu3qipJaa8gkqubVDIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhzjXvnA3Cc8MrxeIa/A5bRQTDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDQ5MzNjZGYtZjk2OC0z MDhhLTkyOGItYWMwYjM1MmEzMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwC56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZBQw3PhiIt16NijqkHsVF4MXHUwtm9t7qwxgIf0x34TituzjqkGMis otXSk9EMY4DAnNEdxFxBpfKxnQoaFQEXGehla3Tx+LX5QIpe5UgkDUF/fJQk00tK 4nafnEt9QQoQFnECuOu0Sx4n4uXGHImkpo6L54CbQ2aulxPPngXG6M57tlpr833z r5rChG5qJ3itqukPyc2aybIqfaXPUtoGvWotbgv7G0bb5Yl4kJyjnXsRDs6kAJUK yTsc4BMKDOQXVswJ7CUnJ7EwOl0pSGMDMAGmZAG93G2SzgcPXWiXGzo5Jfgdx69L +cnHlPtLLttX5jORbOSi3rL03HT9IvA= -----END CERTIFICATE-----Generated at Sun May 11 09:36:57 2025 by rpki-client