$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa File: 26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa (raw, json) Hash identifier: +PCFSdp1o8coiXhg0/7FVI8jMI6Q1R9ieimS7yJ6YBA= Subject key identifier: 34:7C:01:D4:FD:BE:6A:2D:A4:95:8D:FA:AF:69:62:3D:E3:E1:24:7D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFBF537530B766940C3F6F80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa Signing time: Mon 27 Jan 2025 18:58:51 +0000 ROA not before: Mon 27 Jan 2025 18:58:51 +0000 ROA not after: Sun 27 Apr 2025 17:58:51 +0000 asID: 15164 IP address blocks: 199.200.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:bf:53:75:30:b7:66:94:0c:3f:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:58:51 2025 GMT Not After : Apr 27 17:58:51 2025 GMT Subject: CN=2b2f0172-c9da-4dfb-a607-65a637e0f418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:e0:99:5a:00:be:6c:04:c6:7e:5d:f2:6e: 6c:46:90:28:1f:54:9a:9a:ac:e8:67:4a:f9:b9:43: 33:64:52:c9:ce:6c:62:6e:28:b5:8e:76:4e:7f:af: 5c:58:da:94:12:6a:4a:dd:6a:4b:de:36:03:6d:da: d5:97:27:b4:fb:c4:2e:ca:03:9b:e3:a1:b4:b3:a0: 42:90:f6:59:73:e2:cc:24:42:6a:bb:09:e2:28:77: 7c:2f:15:cf:4f:ae:61:eb:82:56:6e:4b:95:54:0b: 8a:04:36:d9:92:bd:24:9e:fc:7b:cb:46:52:b2:ec: 5c:3b:f2:a2:a7:75:c7:90:15:da:53:15:92:4f:40: 33:d7:8e:2f:8c:c6:35:e3:45:e2:a6:7e:95:ba:a7: b4:23:b8:5b:df:2a:1c:34:a8:30:0d:d2:3f:a3:72: c0:92:3f:ee:0d:b5:bc:6b:83:b5:be:d6:76:34:30: 7e:67:c5:8e:4a:a4:d9:17:ff:f3:33:57:5b:52:c8: 82:e6:1c:2d:74:48:20:86:38:d9:8d:b6:cb:c0:a7: 76:e7:95:20:14:00:5e:8f:5e:13:ca:2b:a2:9d:c3: b4:ab:c0:bf:3c:08:08:50:1c:00:71:87:a9:8c:8e: 04:e0:b0:65:76:2f:f4:67:0b:ab:7d:25:78:1c:ce: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:01:D4:FD:BE:6A:2D:A4:95:8D:FA:AF:69:62:3D:E3:E1:24:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4f:e2:d3:09:30:7e:0e:0c:77:b9:a8:2c:30:15:14:1b:89: 82:f6:9e:b4:38:0d:61:44:b5:ed:98:05:6f:dd:b8:32:0e:fe: 86:7a:21:5e:8c:6e:6e:bc:2c:cc:3e:ab:c7:90:14:d9:c1:2b: 89:f0:e3:d4:69:9b:1a:08:15:15:4b:c8:c3:f9:41:b2:f0:2c: 1d:e0:c3:1d:12:10:97:6c:8b:cf:61:31:01:47:ed:24:b7:53: 3e:66:52:d0:4a:77:03:86:99:6c:24:d0:8c:73:ac:40:bc:b9: fb:5e:b5:93:ea:6d:02:39:f6:a3:e3:77:bc:5b:1b:c8:cb:c2: 88:13:b9:ee:de:fa:88:86:73:79:72:5a:26:d8:8b:3e:ca:77: 23:e0:e7:1b:25:8d:0d:85:3e:d8:2b:00:95:80:38:e1:07:a3: 80:1d:a3:a6:36:cc:3a:ae:28:05:73:4d:f9:b5:31:dc:e9:be: a2:2c:db:4b:73:a9:3c:95:f7:15:8b:81:98:61:ff:b1:5f:5b: df:5f:9f:c9:45:ca:c1:60:74:be:7f:7e:a3:f4:98:60:89:4d: 24:33:09:fa:88:51:93:b8:39:32:34:94:7e:07:ad:6c:3d:71: 49:72:65:64:1b:d1:6c:ed:7b:43:e7:7e:0d:d4:72:3e:9a:72: 4d:18:3e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivv1N1MLdmlAw/b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NTg1MVoXDTI1MDQyNzE3NTg1MVowLzEtMCsGA1UEAxMk MmIyZjAxNzItYzlkYS00ZGZiLWE2MDctNjVhNjM3ZTBmNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBDgmVoAvmwExn5d8m5sRpAoH1SamqzoZ0r5 uUMzZFLJzmxibii1jnZOf69cWNqUEmpK3WpL3jYDbdrVlye0+8QuygOb46G0s6BC kPZZc+LMJEJquwniKHd8LxXPT65h64JWbkuVVAuKBDbZkr0knvx7y0ZSsuxcO/Ki p3XHkBXaUxWST0Az144vjMY140Xipn6Vuqe0I7hb3yocNKgwDdI/o3LAkj/uDbW8 a4O1vtZ2NDB+Z8WOSqTZF//zM1dbUsiC5hwtdEgghjjZjbbLwKd255UgFABej14T yiuincO0q8C/PAgIUBwAcYepjI4E4LBldi/0ZwurfSV4HM6F/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR8AdT9vmotpJWN+q9pYj3j4SR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjZlYWVmMWEtODBiOS0z NmExLWIzZTQtZWJlNWU2ODMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRP4tMJMH4ODHe5qCwwFRQbiYL2nrQ4DWFEte2YBW/duDIO/oZ6IV6M bm68LMw+q8eQFNnBK4nw49RpmxoIFRVLyMP5QbLwLB3gwx0SEJdsi89hMQFH7SS3 Uz5mUtBKdwOGmWwk0IxzrEC8uftetZPqbQI59qPjd7xbG8jLwogTue7e+oiGc3ly WibYiz7KdyPg5xsljQ2FPtgrAJWAOOEHo4Ado6Y2zDquKAVzTfm1MdzpvqIs20tz qTyV9xWLgZhh/7FfW99fn8lFysFgdL5/fqP0mGCJTSQzCfqIUZO4OTI0lH4HrWw9 cUlyZWQb0Wzte0Pnfg3Ucj6ack0YPnI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:55 2025 by rpki-client