$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa File: 564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa (raw, json) Hash identifier: gakZylmpxtUb9TFDlB/rUq8wx6idrFI2U8xbQvSfWyc= Subject key identifier: 2E:98:1F:5C:B0:8A:B2:E6:ED:74:26:2F:BC:62:40:DA:69:07:C0:49 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A483FA9F0B3EC49C7FF9D380 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa Signing time: Thu 23 Jan 2025 18:25:23 +0000 ROA not before: Thu 23 Jan 2025 18:25:23 +0000 ROA not after: Wed 23 Apr 2025 17:25:23 +0000 asID: 15164 IP address blocks: 138.199.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:83:fa:9f:0b:3e:c4:9c:7f:f9:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 23 18:25:23 2025 GMT Not After : Apr 23 17:25:23 2025 GMT Subject: CN=3c790087-b29f-4ce3-ad2a-cb741780d57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:c6:b8:b4:d6:d6:21:91:17:fd:53:24:13: a2:31:30:47:76:a3:03:b0:d7:f1:72:67:5e:ed:13: 04:36:2b:96:39:77:e6:27:4a:24:b5:34:dc:a1:e8: 5e:4a:e7:bc:68:84:c2:78:e1:79:4c:e0:e1:60:cd: dc:23:80:9e:7b:91:b4:b5:7e:39:34:60:b5:3d:2d: 16:a9:67:eb:c4:51:bb:56:d3:e5:71:c8:32:21:58: c8:e2:0f:2d:05:3c:4a:ae:b2:1c:df:eb:6a:fb:8c: 13:3f:ac:28:1a:19:70:c2:45:9d:d5:db:a4:55:c8: 60:7a:68:30:fe:ee:62:25:c9:1c:46:14:04:f1:88: 4c:16:de:17:00:0a:25:43:84:ff:20:df:9d:ec:04: a4:a4:75:11:cd:fe:7e:22:45:8f:fe:f7:da:b5:0a: b3:17:35:c6:d2:5c:6a:7d:bf:51:fc:1e:fd:62:67: 4e:9d:a8:af:32:b9:92:1f:ce:70:1b:00:5c:ec:43: 81:6c:bb:ab:d6:0b:d3:e3:a6:63:e2:32:e3:8f:76: 6a:d0:60:e6:6b:fd:6e:bb:47:ac:c3:3a:12:81:54: bf:13:c1:91:f6:86:3f:59:1e:b9:2a:1c:b7:3c:d0: d7:c5:3e:d7:1e:cf:bb:cd:a5:27:0c:1e:4a:e1:2d: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:1F:5C:B0:8A:B2:E6:ED:74:26:2F:BC:62:40:DA:69:07:C0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4e:1d:2b:4d:cd:ce:62:7c:a4:2d:cf:d2:8d:38:5e:ae:d7: d2:bc:73:86:97:a9:a8:ac:dc:1b:97:0b:4b:33:6c:86:18:0e: 77:01:68:c2:dc:fb:1b:9a:ec:e4:a4:63:0a:e4:c1:18:5f:90: 76:44:f0:4b:7b:37:81:56:d0:06:64:ba:95:51:e3:87:43:5e: a4:c2:c4:78:b6:4b:e2:24:74:b8:c6:4b:47:80:f3:f0:be:05: 21:1e:56:b9:74:22:a7:80:9f:f0:b1:f0:05:f6:dc:df:a6:46: 7b:ef:56:4c:af:dd:ca:ee:3b:46:b1:36:32:08:77:b1:7b:89: f0:a3:39:9a:23:09:4a:1e:4e:3d:01:ab:66:82:86:81:dc:7b: cd:7b:d6:16:e2:46:57:dd:74:28:23:1b:8e:a9:96:d4:0b:a5: e1:72:7c:52:37:47:ab:99:e5:58:8f:22:d3:4f:b4:cb:36:41: bd:59:74:9d:8f:94:97:e7:e9:00:31:e0:13:33:b2:c1:c9:23: b0:dc:29:57:26:3e:dc:26:39:81:c0:f0:70:c0:57:9b:58:2a: 56:85:fa:ad:33:ad:92:b8:78:1f:22:2d:fa:8a:78:cd:0a:e9: cb:da:94:e5:56:50:40:9b:8a:6d:32:59:6c:f9:7e:76:83:e9: a3:b1:c9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikg/qfCz7EnH/504AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMzE4MjUyM1oXDTI1MDQyMzE3MjUyM1owLzEtMCsGA1UEAxMk M2M3OTAwODctYjI5Zi00Y2UzLWFkMmEtY2I3NDE3ODBkNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcvGuLTW1iGRF/1TJBOiMTBHdqMDsNfxcmde 7RMENiuWOXfmJ0oktTTcoeheSue8aITCeOF5TODhYM3cI4Cee5G0tX45NGC1PS0W qWfrxFG7VtPlccgyIVjI4g8tBTxKrrIc3+tq+4wTP6woGhlwwkWd1dukVchgemgw /u5iJckcRhQE8YhMFt4XAAolQ4T/IN+d7ASkpHURzf5+IkWP/vfatQqzFzXG0lxq fb9R/B79YmdOnaivMrmSH85wGwBc7EOBbLur1gvT46Zj4jLjj3Zq0GDma/1uu0es wzoSgVS/E8GR9oY/WR65Khy3PNDXxT7XHs+7zaUnDB5K4S0TgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6YH1ywirLm7XQmL7xiQNppB8BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTY0ZmE1NTktY2RmMi0z OTIzLWI0ZTItYmY4YmNmMzQyZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZOHStNzc5ifKQtz9KNOF6u19K8c4aXqais3BuXC0szbIYYDncBaMLc +xua7OSkYwrkwRhfkHZE8Et7N4FW0AZkupVR44dDXqTCxHi2S+IkdLjGS0eA8/C+ BSEeVrl0IqeAn/Cx8AX23N+mRnvvVkyv3cruO0axNjIId7F7ifCjOZojCUoeTj0B q2aChoHce8171hbiRlfddCgjG46pltQLpeFyfFI3R6uZ5ViPItNPtMs2Qb1ZdJ2P lJfn6QAx4BMzssHJI7DcKVcmPtwmOYHA8HDAV5tYKlaF+q0zrZK4eB8iLfqKeM0K 6cvalOVWUECbim0yWWz5fnaD6aOxyTY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:09 2025 by rpki-client