$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa File: 5d3cc9ef-4f92-3787-8755-b634d19dda46.roa (raw, json) Hash identifier: ie5RnJEpymrdzhyCoac22QMQQYaRkDej5kdck6ssQV4= Subject key identifier: 69:EC:67:DF:61:E0:FB:1E:44:E5:E9:FC:D3:BF:0B:0D:F2:9B:A9:E2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A48A931EAE93385521AF4C60 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa Signing time: Thu 23 Jan 2025 18:38:40 +0000 ROA not before: Thu 23 Jan 2025 18:38:40 +0000 ROA not after: Wed 23 Apr 2025 17:38:40 +0000 asID: 15164 IP address blocks: 138.199.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:8a:93:1e:ae:93:38:55:21:af:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 23 18:38:40 2025 GMT Not After : Apr 23 17:38:40 2025 GMT Subject: CN=833422ff-b3e7-4751-9ff7-3505110d900a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:42:f7:07:3b:2b:89:a9:33:f3:3a:a5:0f: 53:2e:0c:b1:4e:d4:73:21:59:6f:48:cd:ff:f3:fe: 15:bc:52:db:f7:6d:f3:e6:9b:32:e1:70:78:c9:8e: ba:20:da:36:37:83:60:4c:f0:4e:10:b2:22:6c:7d: bc:3d:3f:41:ef:11:bb:30:c3:5c:8a:20:8f:75:0c: c9:0c:f9:2f:03:72:6a:b7:78:70:ae:3a:10:dd:ae: 09:ea:fb:c4:7b:60:c8:3d:d4:6c:1e:04:4b:a5:7c: e4:b8:be:78:cb:4a:cb:d5:22:4f:9c:b1:14:6e:67: cf:a4:e3:87:0d:ff:b1:cf:7a:d0:9e:c3:21:56:e5: fa:7f:4c:d6:75:26:70:fe:c9:4b:96:f1:82:7a:7e: 10:80:bc:93:da:8a:32:66:aa:0c:12:d0:88:27:05: 0b:a9:d8:88:29:81:e0:a1:aa:ce:c6:9e:6b:20:f8: bf:76:a4:e3:d9:e4:85:9e:fc:06:22:17:b2:7f:a4: de:5e:fc:35:0a:e5:17:43:2b:cb:a5:66:98:74:02: ce:38:3e:34:3f:3e:be:83:50:37:e3:c5:ae:5f:fd: b3:64:c6:64:03:da:d9:53:37:20:1b:a1:71:c0:79: de:e8:06:87:c7:03:b9:7b:05:ed:1c:1e:4e:c1:84: cb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:67:DF:61:E0:FB:1E:44:E5:E9:FC:D3:BF:0B:0D:F2:9B:A9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:46:78:af:00:f8:72:01:c8:2d:1f:56:b3:4f:a4:7e:56:b7: 5b:54:47:6d:79:f2:23:68:82:11:55:0b:f9:f4:c3:77:cb:91: bf:37:75:05:81:0d:10:69:ba:88:36:4a:4b:1d:ff:e8:11:05: 18:1c:7a:5c:2d:04:10:77:5b:f3:af:0f:d0:3d:7a:55:de:79: 70:0a:3e:54:06:6d:79:33:10:df:bd:33:2b:b6:75:50:59:36: 78:f2:84:7f:4d:1e:90:19:b6:75:93:4b:28:1e:0f:38:f2:f2: 6d:8a:f7:c6:0a:bc:83:14:77:f2:d1:1d:c8:65:40:39:7e:ea: c5:2d:99:82:a5:f6:9c:8d:20:f4:e5:65:db:0d:db:e1:bf:39: 91:f5:72:a3:9b:00:db:06:a7:04:d3:cd:8b:ce:af:c6:25:64: 1c:bc:4d:51:93:6a:cc:c1:c4:72:b9:a8:3c:8f:c5:8c:77:a7: 2f:f7:6a:e1:70:f2:4c:f2:f3:42:c7:7f:15:02:08:c8:db:24: ff:c4:c3:ea:0d:40:24:ba:d7:d8:16:52:ff:b0:13:e0:7a:68: 2a:71:81:5d:07:bd:b5:73:2c:48:5e:f0:89:17:0b:b7:d5:bf: cf:93:16:8e:0d:a3:96:d3:e7:b1:32:fc:88:20:73:f4:4f:31: 46:0d:92:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikipMerpM4VSGvTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMzE4Mzg0MFoXDTI1MDQyMzE3Mzg0MFowLzEtMCsGA1UEAxMk ODMzNDIyZmYtYjNlNy00NzUxLTlmZjctMzUwNTExMGQ5MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqlC9wc7K4mpM/M6pQ9TLgyxTtRzIVlvSM3/ 8/4VvFLb923z5psy4XB4yY66INo2N4NgTPBOELIibH28PT9B7xG7MMNciiCPdQzJ DPkvA3Jqt3hwrjoQ3a4J6vvEe2DIPdRsHgRLpXzkuL54y0rL1SJPnLEUbmfPpOOH Df+xz3rQnsMhVuX6f0zWdSZw/slLlvGCen4QgLyT2ooyZqoMEtCIJwULqdiIKYHg oarOxp5rIPi/dqTj2eSFnvwGIheyf6TeXvw1CuUXQyvLpWaYdALOOD40Pz6+g1A3 48WuX/2zZMZkA9rZUzcgG6FxwHne6AaHxwO5ewXtHB5OwYTLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnsZ99h4PseROXp/NO/Cw3ym6niMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWQzY2M5ZWYtNGY5Mi0z Nzg3LTg3NTUtYjYzNGQxOWRkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJGeK8A+HIByC0fVrNPpH5Wt1tUR2158iNoghFVC/n0w3fLkb83dQWB DRBpuog2Sksd/+gRBRgcelwtBBB3W/OvD9A9elXeeXAKPlQGbXkzEN+9Myu2dVBZ NnjyhH9NHpAZtnWTSygeDzjy8m2K98YKvIMUd/LRHchlQDl+6sUtmYKl9pyNIPTl ZdsN2+G/OZH1cqObANsGpwTTzYvOr8YlZBy8TVGTaszBxHK5qDyPxYx3py/3auFw 8kzy80LHfxUCCMjbJP/Ew+oNQCS619gWUv+wE+B6aCpxgV0HvbVzLEhe8IkXC7fV v8+TFo4No5bT57Ey/Iggc/RPMUYNkqY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:44 2025 by rpki-client