$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa File: 91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa (raw, json) Hash identifier: NUME1xQu3SUe06TP/f9IeC56NCYgGvr22aZigWs5ULs= Subject key identifier: 8A:3E:64:B8:69:2C:39:59:C8:B1:2B:FC:C8:8F:C1:B0:22:4A:6B:89 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848F4F6A31AC74DC37A8302CF60 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3477 IP address blocks: 192.67.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a3:1a:c7:4d:c3:7a:83:02:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d6f09d21-cee8-4e2e-be90-117023ea097b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:98:c2:e2:24:2f:ec:02:cc:00:a3:83:3e: d9:48:85:39:0a:11:3e:e2:36:df:e5:5f:84:a8:8f: 67:59:30:d4:0b:58:1f:73:a5:26:a1:0c:3e:2a:a7: 48:2b:11:16:65:9d:d5:4c:d6:43:9c:ca:4b:50:1c: 3e:36:c5:c2:22:1c:41:0a:d9:6e:1a:c3:3f:49:ce: 47:30:b3:6c:5b:85:00:18:c1:df:cc:bd:f3:44:6d: 40:63:b2:db:d7:48:54:fd:b2:b0:fa:80:b9:16:d5: 6e:e5:a8:d3:8f:31:0c:27:d0:c3:a8:66:8a:d5:75: 7d:61:91:5e:55:01:df:d9:9b:5a:f3:42:9b:1e:cb: 31:9e:5d:35:15:59:b6:ce:02:23:af:32:85:49:21: 5d:0c:92:d6:cb:5e:84:d2:ea:54:69:08:85:3b:63: 22:39:8e:5a:b8:c0:26:ab:cd:2c:f2:59:20:06:43: 62:ac:d7:a0:99:7a:5e:9b:7d:ef:29:79:ac:e7:07: 1d:b3:a4:87:cc:4e:bb:12:22:e1:4e:95:da:c8:5c: cc:bc:e2:a2:a5:46:53:0b:44:aa:be:aa:df:ed:ab: 1c:6f:64:13:0f:a6:91:6a:b7:f4:53:57:78:32:be: 2d:79:82:48:3d:3e:75:f1:39:40:42:4b:84:ad:62: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:64:B8:69:2C:39:59:C8:B1:2B:FC:C8:8F:C1:B0:22:4A:6B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.67.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:92:0e:f9:fc:04:aa:88:99:e3:7a:63:39:eb:7e:92:6e:66: 3b:f1:9f:1c:08:d8:b9:8c:1e:af:c2:1b:73:2d:07:5d:18:d3: 61:af:50:50:27:c2:ac:49:87:cd:70:d6:2c:36:e0:0d:1c:87: 4d:21:fe:49:db:96:e2:3a:d3:22:6f:ec:49:74:a0:45:29:4e: b8:36:14:7c:bd:36:95:96:6d:ee:13:d3:60:ba:81:9e:27:89: fb:4c:bc:cc:06:4b:dd:0f:be:af:b8:38:c8:33:a5:06:be:18: 96:0b:98:81:bd:15:2d:02:ef:fa:71:a1:58:94:78:d6:b0:3d: b7:1f:85:5c:81:f7:fc:ea:ec:0e:0b:d2:93:d3:35:d7:e4:8a: f4:6f:33:ef:57:f5:e8:af:46:cb:fd:07:c6:b2:ac:57:17:6a: b9:34:f9:3a:98:3d:51:95:44:65:5c:1e:29:81:81:44:7f:91: 90:b7:f4:f8:99:f7:21:7a:d0:8d:09:93:dd:27:eb:bd:b2:88: 88:21:26:8c:51:a9:1d:b5:df:65:44:e0:3e:ac:45:07:d3:3e: 04:4a:bf:c4:59:dd:19:ea:9e:76:ee:dc:47:0b:74:27:68:2e: 45:4f:f9:b1:8d:fb:72:15:06:a2:5d:aa:53:47:27:e3:d1:5b: df:75:af:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qMax03DeoMCz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDZmMDlkMjEtY2VlOC00ZTJlLWJlOTAtMTE3MDIzZWEwOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3smYwuIkL+wCzACjgz7ZSIU5ChE+4jbf5V+E qI9nWTDUC1gfc6UmoQw+KqdIKxEWZZ3VTNZDnMpLUBw+NsXCIhxBCtluGsM/Sc5H MLNsW4UAGMHfzL3zRG1AY7Lb10hU/bKw+oC5FtVu5ajTjzEMJ9DDqGaK1XV9YZFe VQHf2Zta80KbHssxnl01FVm2zgIjrzKFSSFdDJLWy16E0upUaQiFO2MiOY5auMAm q80s8lkgBkNirNegmXpem33vKXms5wcds6SHzE67EiLhTpXayFzMvOKipUZTC0Sq vqrf7ascb2QTD6aRarf0U1d4Mr4teYJIPT518TlAQkuErWLaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo+ZLhpLDlZyLEr/MiPwbAiSmuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvOTFjNGNjMmItMmRkYy0z NjRiLWJkNzktNjhiZmJkOWY5OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqSDvn8BKqImeN6YznrfpJuZjvxnxwI2LmMHq/CG3MtB10Y02GvUFAn wqxJh81w1iw24A0ch00h/knbluI60yJv7El0oEUpTrg2FHy9NpWWbe4T02C6gZ4n iftMvMwGS90Pvq+4OMgzpQa+GJYLmIG9FS0C7/pxoViUeNawPbcfhVyB9/zq7A4L 0pPTNdfkivRvM+9X9eivRsv9B8ayrFcXark0+TqYPVGVRGVcHimBgUR/kZC39PiZ 9yF60I0Jk90n672yiIghJoxRqR2132VE4D6sRQfTPgRKv8RZ3Rnqnnbu3EcLdCdo LkVP+bGN+3IVBqJdqlNHJ+PRW991r50= -----END CERTIFICATE-----Generated at Sat Apr 5 03:41:46 2025 by rpki-client