$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa File: 5f99b2c0-a5d9-339c-825e-94a6f461f236.roa (raw, json) Hash identifier: FHigtMKT5ncUIxzz+cc3+UbOnZD3x8EGyjpbqrraGLg= Subject key identifier: 86:34:39:F3:27:8F:76:86:D5:6F:C3:95:62:4C:B0:E8:F3:C5:1B:F8 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A228004A7BD6E49E1E6ED980 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa Signing time: Wed 22 Jan 2025 22:08:26 +0000 ROA not before: Wed 22 Jan 2025 22:08:26 +0000 ROA not after: Tue 22 Apr 2025 21:08:26 +0000 asID: 15164 IP address blocks: 104.218.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:28:00:4a:7b:d6:e4:9e:1e:6e:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 22 22:08:26 2025 GMT Not After : Apr 22 21:08:26 2025 GMT Subject: CN=2dda3ce5-c148-42ba-bf31-5d13461b503b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:bc:d2:1b:bc:dd:e5:6e:ab:9b:7e:fd:9b: a7:63:f5:ea:7c:1e:69:b8:61:84:34:17:28:73:98: 46:f6:29:43:e3:1c:4b:d8:c1:bf:6e:a1:c4:97:fe: 3e:b3:d2:9e:4f:bd:ca:8a:73:5c:36:42:ad:b7:0d: f2:82:6c:9e:eb:ef:64:f4:ff:09:91:74:0e:b2:a6: 92:f7:60:ad:b7:57:fd:2d:2e:ef:a4:14:9e:07:85: 28:77:95:db:27:1d:17:08:12:63:05:e4:6d:e1:7b: ed:b3:a0:57:2f:26:2f:80:a3:5c:f7:ff:cf:d9:89: d7:17:1e:b5:72:27:ad:a6:82:f0:73:eb:2f:11:2d: 5c:78:60:c1:fd:8a:22:f3:23:16:a8:24:7f:21:70: 84:60:de:b7:ae:42:51:cb:ee:b4:f3:5c:c4:c3:0a: 10:69:7b:a6:09:34:14:3a:de:30:0f:7b:2b:f1:4d: 32:8b:e8:86:9c:e0:14:27:48:06:91:cd:94:fe:99: 4b:c6:d0:38:c5:c9:ec:f0:d6:e7:77:21:20:36:76: ed:1f:e7:69:3d:d9:af:1f:2b:26:46:9e:de:fd:b3: cd:b2:92:5f:ec:e6:e8:0e:f4:56:6d:d3:73:74:f9: 10:88:8b:86:ec:5d:7b:0a:97:ce:ac:bc:db:24:d0: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:34:39:F3:27:8F:76:86:D5:6F:C3:95:62:4C:B0:E8:F3:C5:1B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 104.218.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6b:f7:d0:1f:13:11:bf:47:2f:c0:65:f0:cf:88:f4:51:75: 1b:aa:ce:be:35:7f:13:98:34:be:f1:9b:85:43:27:67:45:33: 42:21:f3:10:8f:1b:5d:6b:5d:62:8e:92:36:ec:2d:29:33:bb: 3f:cf:f1:01:11:6b:f8:71:ee:3c:58:fa:69:43:5e:d7:74:9d: ec:f2:dc:6e:7c:17:84:c6:53:be:8d:36:03:de:e0:0a:36:41: fa:71:29:aa:34:b1:1c:05:e3:87:ee:ed:b9:af:cb:82:56:84: d8:5e:9f:d2:87:17:eb:e7:c8:c0:99:f6:7f:47:50:eb:1a:b9: e7:25:48:60:60:cc:43:58:5d:da:3e:f5:20:fe:d8:62:c3:7d: 47:30:9c:eb:d7:a6:2b:ed:ae:6c:fb:57:f3:06:dd:c2:fc:6d: fa:f5:f6:63:4c:85:fa:f7:83:70:f3:7a:3d:d2:87:e4:4d:b5: 49:a6:f9:67:4f:2a:98:cb:1b:ed:14:4c:b8:89:9c:89:9d:8e: c2:ed:d1:6a:53:7f:8d:e3:17:2a:64:3f:81:91:52:82:b0:27: 22:45:f6:87:5b:e2:aa:0e:ea:55:6b:2b:67:dc:4c:ff:b7:b1: f3:a0:de:08:57:b2:73:e8:22:1e:b5:aa:3c:8a:1d:8a:51:46: db:68:07:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiKABKe9bknh5u2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMjIyMDgyNloXDTI1MDQyMjIxMDgyNlowLzEtMCsGA1UEAxMk MmRkYTNjZTUtYzE0OC00MmJhLWJmMzEtNWQxMzQ2MWI1MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMe80hu83eVuq5t+/ZunY/XqfB5puGGENBco c5hG9ilD4xxL2MG/bqHEl/4+s9KeT73KinNcNkKttw3ygmye6+9k9P8JkXQOsqaS 92Ctt1f9LS7vpBSeB4Uod5XbJx0XCBJjBeRt4Xvts6BXLyYvgKNc9//P2YnXFx61 cietpoLwc+svES1ceGDB/Yoi8yMWqCR/IXCEYN63rkJRy+6081zEwwoQaXumCTQU Ot4wD3sr8U0yi+iGnOAUJ0gGkc2U/plLxtA4xcns8NbndyEgNnbtH+dpPdmvHysm Rp7e/bPNspJf7OboDvRWbdNzdPkQiIuG7F17CpfOrLzbJND9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY0OfMnj3aG1W/DlWJMsOjzxRv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWY5OWIyYzAtYTVkOS0z MzljLTgyNWUtOTRhNmY0NjFmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVr99AfExG/Ry/AZfDPiPRRdRuqzr41fxOYNL7xm4VDJ2dFM0Ih8xCP G11rXWKOkjbsLSkzuz/P8QERa/hx7jxY+mlDXtd0nezy3G58F4TGU76NNgPe4Ao2 QfpxKao0sRwF44fu7bmvy4JWhNhen9KHF+vnyMCZ9n9HUOsaueclSGBgzENYXdo+ 9SD+2GLDfUcwnOvXpivtrmz7V/MG3cL8bfr19mNMhfr3g3Dzej3Sh+RNtUmm+WdP KpjLG+0UTLiJnImdjsLt0WpTf43jFypkP4GRUoKwJyJF9odb4qoO6lVrK2fcTP+3 sfOg3ghXsnPoIh61qjyKHYpRRttoB/s= -----END CERTIFICATE-----Generated at Fri Apr 11 22:54:47 2025 by rpki-client