$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa File: 207c1b2b-d1db-300f-bc1a-372f077d979a.roa (raw, json) Hash identifier: fjfOtgMY5232Wm4iJfUqYJAEzm9PXFWGoB1X0pX0PKk= Subject key identifier: EB:FD:4A:AD:14:BE:A0:BE:5B:EF:EE:16:92:DF:3C:1D:45:9B:97:B0 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFBFA82A4A9F966C18A51280 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa Signing time: Mon 27 Jan 2025 18:59:31 +0000 ROA not before: Mon 27 Jan 2025 18:59:31 +0000 ROA not after: Sun 27 Apr 2025 17:59:31 +0000 asID: 15164 IP address blocks: 199.200.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:bf:a8:2a:4a:9f:96:6c:18:a5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:59:31 2025 GMT Not After : Apr 27 17:59:31 2025 GMT Subject: CN=0ebaff20-b01f-4d29-94d4-ec844be9ffb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:b4:e0:df:34:b1:88:86:54:32:a7:31:f7: 63:15:c2:6f:b6:cf:a7:82:e4:de:b0:de:b2:5c:72: da:0d:77:46:48:af:28:e8:bd:d0:e9:67:58:dd:a2: 94:bd:f5:25:fb:4d:1b:b9:f0:d4:99:d5:cb:72:96: 04:34:57:90:23:62:70:5e:e0:83:1e:0e:86:af:31: 16:9b:f0:2c:f2:0f:f7:8e:51:b0:6d:e7:4b:59:8b: ff:ef:6b:62:7f:a2:32:50:19:63:0d:1d:c6:cd:9c: 11:b5:e0:a1:66:d4:27:15:c8:52:ef:7e:d6:67:ac: 1e:c0:21:c8:20:f8:f2:49:6f:a1:5e:83:3c:55:23: a3:3d:0e:d2:31:99:7e:9a:a5:95:93:ef:52:b6:13: 31:a7:b8:91:32:d6:3c:26:3b:b3:41:f2:4f:32:9c: 81:ac:a4:d0:eb:ff:10:d7:c4:fa:e9:f8:f5:55:b8: 72:3a:a1:6f:05:89:83:ed:8e:62:53:72:08:de:d6: 22:ef:15:e5:34:03:67:43:ff:25:e2:d2:45:b4:0d: 0a:f9:e2:6a:14:1d:80:4b:6b:23:86:4d:dc:e8:41: 4f:ea:c6:a1:a0:be:18:64:bf:8c:40:ef:c2:2a:44: 26:0d:d9:04:84:54:3c:74:29:36:99:2a:5c:f9:07: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:4A:AD:14:BE:A0:BE:5B:EF:EE:16:92:DF:3C:1D:45:9B:97:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d5:48:2c:ec:da:05:12:35:37:bc:25:e9:3b:10:d9:6c:97: e1:f3:1e:60:81:02:65:ad:98:cc:8a:8b:e2:96:43:86:52:e0: a9:e9:f7:c5:cb:0c:73:78:81:e4:34:1a:64:3a:ef:c1:d8:8b: 52:a3:e7:f7:65:4a:f4:f0:41:b8:17:5b:e2:28:c6:3b:33:57: e4:f5:bc:a3:fd:0f:fb:70:cf:50:e3:1b:f2:19:1d:ca:b7:6f: dd:2a:6f:b1:cd:6a:86:0b:a1:75:69:64:96:e8:50:e1:e7:3b: 9f:19:c5:7b:2f:f0:18:b3:0a:07:0c:e9:a0:73:a0:f2:b1:0d: d9:c5:6a:9f:39:1f:f8:80:fe:d0:96:61:ad:54:1e:15:8c:ff: 8b:d8:00:4e:5f:3c:71:01:46:81:2e:32:49:9e:69:b4:38:fa: 45:fb:58:39:b6:a1:f1:8e:2d:6a:29:31:d9:e6:0d:24:f6:ac: 2e:e3:70:67:e0:08:1e:b1:d0:30:60:63:a6:c1:3c:55:82:f1: ee:7a:64:c6:2d:a4:37:96:df:e7:65:0e:f9:53:e6:3e:b9:d2: 1a:21:6c:ae:cd:5b:10:2d:5f:e8:e6:87:c3:6d:99:20:7a:3c: ed:2b:a4:f0:84:dd:28:27:bf:75:58:ab:cd:03:c6:f3:d2:00: 7e:68:2c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivv6gqSp+WbBilEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NTkzMVoXDTI1MDQyNzE3NTkzMVowLzEtMCsGA1UEAxMk MGViYWZmMjAtYjAxZi00ZDI5LTk0ZDQtZWM4NDRiZTlmZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1a04N80sYiGVDKnMfdjFcJvts+nguTesN6y XHLaDXdGSK8o6L3Q6WdY3aKUvfUl+00bufDUmdXLcpYENFeQI2JwXuCDHg6GrzEW m/As8g/3jlGwbedLWYv/72tif6IyUBljDR3GzZwRteChZtQnFchS737WZ6wewCHI IPjySW+hXoM8VSOjPQ7SMZl+mqWVk+9SthMxp7iRMtY8JjuzQfJPMpyBrKTQ6/8Q 18T66fj1VbhyOqFvBYmD7Y5iU3II3tYi7xXlNANnQ/8l4tJFtA0K+eJqFB2AS2sj hk3c6EFP6sahoL4YZL+MQO/CKkQmDdkEhFQ8dCk2mSpc+QcxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv9Sq0UvqC+W+/uFpLfPB1Fm5ewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjA3YzFiMmItZDFkYi0z MDBmLWJjMWEtMzcyZjA3N2Q5NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8haMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLVSCzs2gUSNTe8Jek7ENlsl+HzHmCBAmWtmMyKi+KWQ4ZS4Knp98XL DHN4geQ0GmQ678HYi1Kj5/dlSvTwQbgXW+IoxjszV+T1vKP9D/twz1DjG/IZHcq3 b90qb7HNaoYLoXVpZJboUOHnO58ZxXsv8BizCgcM6aBzoPKxDdnFap85H/iA/tCW Ya1UHhWM/4vYAE5fPHEBRoEuMkmeabQ4+kX7WDm2ofGOLWopMdnmDST2rC7jcGfg CB6x0DBgY6bBPFWC8e56ZMYtpDeW3+dlDvlT5j650hohbK7NWxAtX+jmh8NtmSB6 PO0rpPCE3Sgnv3VYq80DxvPSAH5oLLA= -----END CERTIFICATE-----Generated at Sun Apr 13 01:11:29 2025 by rpki-client