$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa File: 6cddac52-a8dd-3b87-b490-18149b48f2a3.roa (raw, json) Hash identifier: 8jZO7LhGlC0pS3/uLqQKm9xBsDlD9SaqhaIQpd0b+o8= Subject key identifier: BB:64:06:DF:49:CD:D4:52:58:47:E5:75:F3:3C:CE:EA:C2:34:0B:0E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFB9756CBB6D75A056258540 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa Signing time: Mon 27 Jan 2025 18:47:01 +0000 ROA not before: Mon 27 Jan 2025 18:47:01 +0000 ROA not after: Sun 27 Apr 2025 17:47:01 +0000 asID: 15164 IP address blocks: 173.244.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:b9:75:6c:bb:6d:75:a0:56:25:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:47:01 2025 GMT Not After : Apr 27 17:47:01 2025 GMT Subject: CN=c00b1763-aeea-4894-9b12-74a655853ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:fa:10:07:58:3e:37:21:ff:5c:30:3c:92: f2:e0:0c:03:bb:75:89:2f:0f:4f:e0:2b:ea:1d:a3: 8c:48:4a:90:8f:fc:45:67:9a:fb:d0:26:23:f9:a9: 62:f1:12:cd:b0:7f:42:16:a5:a0:17:0c:db:5f:89: db:e2:5c:9f:6f:86:71:cc:48:74:de:6c:bd:21:04: a7:ca:19:29:88:45:cb:13:7c:c9:1d:a5:a7:4e:86: d7:5b:42:67:0a:e4:77:c8:ed:30:88:6d:68:c6:05: 47:36:e4:b8:1f:f9:d3:2c:5a:24:6b:13:06:f1:0c: 8f:d0:7a:f3:14:3c:59:bf:7a:2b:55:1b:9a:44:ab: 6b:e2:6b:e5:35:e5:7c:ac:31:13:af:a0:b2:c2:88: b8:cf:f6:bb:f1:46:62:6d:2f:c6:05:f5:3b:5d:1c: f0:b7:bd:90:dd:a9:7a:98:60:1f:7e:93:29:e8:e3: 38:67:ab:32:07:4f:c1:6c:19:ce:8b:e1:1e:ab:82: e7:1c:9e:c2:82:b2:3c:c0:a8:a5:f8:c3:f9:42:7f: 3c:d0:0b:58:e3:c6:93:ea:9d:63:20:d0:81:d2:0d: d9:9d:6b:fb:ef:f3:51:9a:60:7a:9a:fd:42:0b:95: 05:da:0c:5e:68:db:1b:6f:78:2c:2c:fb:7f:27:9d: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:64:06:DF:49:CD:D4:52:58:47:E5:75:F3:3C:CE:EA:C2:34:0B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:aa:4f:6a:e2:3f:ee:5e:65:a1:b2:72:bd:07:90:8a:a1:8c: 8f:22:8e:8f:90:de:cc:da:80:e9:4e:01:3f:87:b8:78:41:43: 21:54:18:ee:2a:e0:90:ff:f5:51:33:13:33:3d:09:6a:19:6d: 42:eb:ea:5e:52:88:8b:a0:fd:fa:20:78:82:40:4d:1d:38:29: 3f:c9:4b:1d:63:34:69:66:79:30:c7:b9:b0:b3:18:34:1b:cd: 9a:19:74:da:d6:65:ce:2a:d1:f9:5c:c1:1b:4e:6f:ea:42:bf: b1:a4:b6:08:36:dc:7e:cf:9b:30:12:6c:c5:bb:b8:a1:18:91: 29:d6:57:da:7b:c0:88:48:4a:68:cc:c0:2d:7a:1b:4b:37:fe: d6:52:f5:8c:f4:17:58:bc:68:d6:be:a1:c9:eb:25:7a:cb:d0: 83:f5:ba:f8:57:d5:3e:59:14:09:fa:b5:a0:77:a9:48:0b:64: d6:15:57:3c:b3:8d:73:56:56:68:0e:1d:72:b7:30:52:38:31: 0d:2b:1c:f8:3d:44:a0:e0:a7:7d:09:5a:66:77:ba:02:6c:70: a1:34:a0:fe:39:9a:d0:2e:6e:77:cf:3e:9c:99:67:90:8f:1f: de:ca:38:1a:48:92:c9:f0:7a:cd:75:58:05:20:6b:fb:bc:fa: e9:0e:7e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivuXVsu211oFYlhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NDcwMVoXDTI1MDQyNzE3NDcwMVowLzEtMCsGA1UEAxMk YzAwYjE3NjMtYWVlYS00ODk0LTliMTItNzRhNjU1ODUzZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AT6EAdYPjch/1wwPJLy4AwDu3WJLw9P4Cvq HaOMSEqQj/xFZ5r70CYj+ali8RLNsH9CFqWgFwzbX4nb4lyfb4ZxzEh03my9IQSn yhkpiEXLE3zJHaWnTobXW0JnCuR3yO0wiG1oxgVHNuS4H/nTLFokaxMG8QyP0Hrz FDxZv3orVRuaRKtr4mvlNeV8rDETr6Cywoi4z/a78UZibS/GBfU7XRzwt72Q3al6 mGAffpMp6OM4Z6syB0/BbBnOi+Eeq4LnHJ7CgrI8wKil+MP5Qn880AtY48aT6p1j INCB0g3ZnWv77/NRmmB6mv1CC5UF2gxeaNsbb3gsLPt/J50d2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtkBt9JzdRSWEfldfM8zurCNAsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNmNkZGFjNTItYThkZC0z Yjg3LWI0OTAtMTgxNDliNDhmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2qT2riP+5eZaGycr0HkIqhjI8ijo+Q3szagOlOAT+HuHhBQyFUGO4q 4JD/9VEzEzM9CWoZbULr6l5SiIug/fogeIJATR04KT/JSx1jNGlmeTDHubCzGDQb zZoZdNrWZc4q0flcwRtOb+pCv7Gktgg23H7PmzASbMW7uKEYkSnWV9p7wIhISmjM wC16G0s3/tZS9Yz0F1i8aNa+ocnrJXrL0IP1uvhX1T5ZFAn6taB3qUgLZNYVVzyz jXNWVmgOHXK3MFI4MQ0rHPg9RKDgp30JWmZ3ugJscKE0oP45mtAubnfPPpyZZ5CP H97KOBpIksnwes11WAUga/u8+ukOfoI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:24 2025 by rpki-client