$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa File: 827107c2-556d-3daf-ac8f-65dbeda65b85.roa (raw, json) Hash identifier: 4hgaFn/CkJKPHkLXA4KciZzzVTbnzpfrAaCPBEv9+L8= Subject key identifier: 2B:1E:60:E7:7A:F6:22:47:D3:AC:FA:6E:8C:0F:88:6F:CD:9C:D3:66 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFBE97F701747EEFC3F10980 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa Signing time: Mon 27 Jan 2025 18:57:22 +0000 ROA not before: Mon 27 Jan 2025 18:57:22 +0000 ROA not after: Sun 27 Apr 2025 17:57:22 +0000 asID: 15164 IP address blocks: 199.200.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:be:97:f7:01:74:7e:ef:c3:f1:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:57:22 2025 GMT Not After : Apr 27 17:57:22 2025 GMT Subject: CN=717ec95f-44cf-4d89-8c4c-f140d5b8ecc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:50:af:c7:23:e4:57:20:68:b0:f3:55:48: 76:6f:37:2e:1f:31:68:d3:b5:a4:dc:9e:f9:3b:3f: ea:66:58:db:68:d9:a5:2e:1f:06:b7:56:c7:53:bb: 69:32:79:07:95:b9:40:29:f1:48:09:73:8d:04:c4: 9c:49:e0:31:f3:f8:8e:6c:f8:3f:6c:a0:09:60:76: d2:25:f8:c6:03:18:43:2c:c1:d3:f7:ab:f5:cb:3d: dc:77:ed:45:c2:fd:c5:84:95:22:10:51:59:98:29: cc:08:68:69:9e:22:50:0a:58:af:9c:13:78:d7:3a: e0:8b:ad:2f:0f:e6:b5:64:09:5c:ef:ae:c9:99:a7: 68:d6:46:c0:0e:bf:58:b1:eb:25:96:cc:c8:2c:5b: ca:13:91:c1:e1:de:fb:40:a0:56:65:88:70:d5:c6: 97:5a:d3:d7:4a:3e:14:73:7d:b5:42:bb:67:1a:dc: 81:01:48:54:1f:e3:64:cc:85:bb:5b:71:59:d8:da: 34:b9:c9:80:97:bd:40:ce:a4:e8:48:31:87:ad:14: 60:e6:f2:e9:c2:b1:df:9e:e5:a4:0e:93:b9:51:34: 0b:bb:21:16:db:4c:3f:d4:ba:0b:e8:92:8a:43:84: a5:31:fb:83:dd:b8:22:b6:bd:c3:0f:73:9d:0c:14: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1E:60:E7:7A:F6:22:47:D3:AC:FA:6E:8C:0F:88:6F:CD:9C:D3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:38:cb:73:5b:1c:cf:15:aa:a6:6d:e9:83:f8:00:63:5e:0c: c4:6f:6a:ae:5e:3f:25:27:fd:cd:ac:06:2d:c7:78:db:fc:35: 7f:0b:dc:fe:fb:d1:0d:cd:9b:f1:2b:78:a3:b0:db:74:4f:f6: 48:63:6b:cc:8e:45:2c:4d:ae:85:ac:55:36:b3:00:f6:41:d0: ac:98:45:f2:e9:2c:31:06:9c:47:22:8f:0b:b5:2c:ef:ae:5f: c0:c2:60:95:6b:91:37:95:4d:f8:ab:88:5c:a6:67:25:c6:66: fc:8a:b0:16:98:b7:2b:07:b5:08:24:9a:8e:6c:33:e0:54:21: f9:47:c4:e2:9a:25:14:a5:39:2d:9b:3b:8d:54:82:b5:74:b0: fb:36:21:73:1a:2b:96:89:12:c7:3b:2e:bf:9f:75:e1:27:6f: 33:0a:80:35:f2:05:37:bc:7a:72:d2:1c:63:15:be:5b:ac:6c: 89:87:4b:85:2b:e2:8d:30:9e:45:1d:b6:e0:ac:e5:9f:13:41: 85:01:ef:5c:e4:af:dc:4a:09:56:e9:9e:5f:36:67:2a:8a:b1: c6:27:9f:d9:4d:de:ae:3a:06:73:26:d9:45:db:3f:76:27:72: 12:b7:77:ed:5a:0d:e7:c0:3c:66:5e:b1:e1:c4:1f:06:15:c0: ae:16:e4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivvpf3AXR+78PxCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NTcyMloXDTI1MDQyNzE3NTcyMlowLzEtMCsGA1UEAxMk NzE3ZWM5NWYtNDRjZi00ZDg5LThjNGMtZjE0MGQ1YjhlY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweVQr8cj5FcgaLDzVUh2bzcuHzFo07Wk3J75 Oz/qZljbaNmlLh8Gt1bHU7tpMnkHlblAKfFICXONBMScSeAx8/iObPg/bKAJYHbS JfjGAxhDLMHT96v1yz3cd+1Fwv3FhJUiEFFZmCnMCGhpniJQClivnBN41zrgi60v D+a1ZAlc767Jmado1kbADr9YsesllszILFvKE5HB4d77QKBWZYhw1caXWtPXSj4U c321QrtnGtyBAUhUH+NkzIW7W3FZ2No0ucmAl71AzqToSDGHrRRg5vLpwrHfnuWk DpO5UTQLuyEW20w/1LoL6JKKQ4SlMfuD3bgitr3DD3OdDBSQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCseYOd69iJH06z6bowPiG/NnNNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODI3MTA3YzItNTU2ZC0z ZGFmLWFjOGYtNjVkYmVkYTY1Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF04y3NbHM8VqqZt6YP4AGNeDMRvaq5ePyUn/c2sBi3HeNv8NX8L3P77 0Q3Nm/EreKOw23RP9khja8yORSxNroWsVTazAPZB0KyYRfLpLDEGnEcijwu1LO+u X8DCYJVrkTeVTfiriFymZyXGZvyKsBaYtysHtQgkmo5sM+BUIflHxOKaJRSlOS2b O41UgrV0sPs2IXMaK5aJEsc7Lr+fdeEnbzMKgDXyBTe8enLSHGMVvlusbImHS4Ur 4o0wnkUdtuCs5Z8TQYUB71zkr9xKCVbpnl82ZyqKscYnn9lN3q46BnMm2UXbP3Yn chK3d+1aDefAPGZeseHEHwYVwK4W5Kw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:29:36 2025 by rpki-client