$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/951de829-8b10-3f95-bfd5-95088698b75e.roa File: 951de829-8b10-3f95-bfd5-95088698b75e.roa (raw, json) Hash identifier: fH8STEmI087XFyJpd2JFLTvqhBoCplgHlTPnnMZyGqU= Subject key identifier: AD:33:7A:40:67:D4:F3:91:4A:DD:C5:0C:D6:98:D2:46:CA:A7:9C:57 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFAB0B4E7DAF030F3C092BA0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/951de829-8b10-3f95-bfd5-95088698b75e.roa Signing time: Mon 27 Jan 2025 18:17:59 +0000 ROA not before: Mon 27 Jan 2025 18:17:59 +0000 ROA not after: Sun 27 Apr 2025 17:17:59 +0000 asID: 15164 IP address blocks: 140.82.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:ab:0b:4e:7d:af:03:0f:3c:09:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:17:59 2025 GMT Not After : Apr 27 17:17:59 2025 GMT Subject: CN=4f82ef1d-ec81-4be0-92f1-99cff9698ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:28:04:a2:bb:f2:97:03:f4:e9:27:79:df:4f: 23:10:32:d1:e9:80:f7:ca:6d:95:b2:1f:2a:8f:3a: 02:3b:63:3b:6c:5e:02:7f:01:b6:f3:fc:48:9a:fe: 6b:a3:f2:db:ff:b6:09:ce:39:64:2f:2a:45:50:3b: 00:5b:cf:12:e0:8b:a5:7d:c2:d4:fa:5e:99:fa:cb: e0:39:76:c3:05:98:9f:f3:2b:64:bf:42:72:62:15: 54:0b:12:36:9c:3d:f6:17:7d:f8:6b:d5:97:bd:8d: c4:bc:7f:56:45:77:85:db:ed:b2:7f:d3:52:89:d3: 7c:bc:0e:f7:a4:9c:70:46:c8:d8:1f:c4:6c:07:a0: 7b:0d:7f:e0:71:c4:66:da:7f:a0:9c:40:f6:dd:17: 1c:f3:f5:1a:24:d6:05:92:21:ad:ba:e9:81:71:5c: 64:17:ef:4f:64:b8:3d:db:1f:07:be:e6:a1:8f:55: 12:63:2b:5b:69:ce:fa:ef:4c:a1:73:6d:f3:f9:4b: 6a:49:a8:1c:d5:e1:ab:c9:29:7d:2f:ff:cf:14:e8: 2d:c3:9e:c4:43:9e:72:55:7d:4b:69:26:75:d8:24: c9:19:10:6f:0d:99:31:81:a8:20:8c:a5:95:f0:fa: 0b:08:2b:94:74:3f:84:8c:9b:2e:5b:64:5b:be:e0: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:33:7A:40:67:D4:F3:91:4A:DD:C5:0C:D6:98:D2:46:CA:A7:9C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/951de829-8b10-3f95-bfd5-95088698b75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:60:93:70:99:62:6e:bf:d6:da:f6:ad:3f:86:f0:5e:e9:57: 52:a0:9e:3d:a1:a4:37:4d:bc:0b:0e:34:06:fe:26:a5:78:be: 31:52:36:ce:2f:f4:1d:ff:54:7b:11:fd:83:6d:e4:eb:78:0f: 88:33:ef:6b:2e:5e:51:00:90:7e:aa:d8:82:d2:0a:d9:99:67: f7:bc:a6:f3:61:cb:2d:27:84:33:df:16:76:87:c0:86:f6:88: cc:e8:84:ad:28:87:38:0e:43:56:5a:12:0b:31:68:23:ef:8f: 67:ad:82:f4:5e:ab:00:f5:18:c5:9b:72:9e:11:da:e3:f5:a4: 81:e9:b7:bd:b7:98:61:27:86:58:b6:f1:32:66:19:bb:51:7e: e6:75:0f:e3:4d:94:38:46:f3:e6:f0:d1:43:e3:36:0f:7d:67: ab:c9:77:9c:9c:85:6f:3b:fd:08:96:e5:63:f8:2f:42:8c:37: 2a:19:5b:3d:dc:1b:3d:f0:5e:a4:69:a5:86:77:2d:91:e4:28: 90:66:f7:a6:2c:2c:8e:88:2c:6c:8c:38:53:17:19:3c:60:13: 46:9b:c4:ee:a0:4c:ef:3b:d4:d7:47:7d:88:70:cb:84:97:1e: 91:91:e1:36:7b:21:14:c0:78:da:e8:2d:db:d5:b2:f2:d8:98: 17:87:11:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivqwtOfa8DDzwJK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4MTc1OVoXDTI1MDQyNzE3MTc1OVowLzEtMCsGA1UEAxMk NGY4MmVmMWQtZWM4MS00YmUwLTkyZjEtOTljZmY5Njk4YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SgEorvylwP06Sd5308jEDLR6YD3ym2Vsh8q jzoCO2M7bF4CfwG28/xImv5ro/Lb/7YJzjlkLypFUDsAW88S4IulfcLU+l6Z+svg OXbDBZif8ytkv0JyYhVUCxI2nD32F334a9WXvY3EvH9WRXeF2+2yf9NSidN8vA73 pJxwRsjYH8RsB6B7DX/gccRm2n+gnED23Rcc8/UaJNYFkiGtuumBcVxkF+9PZLg9 2x8Hvuahj1USYytbac7670yhc23z+UtqSagc1eGrySl9L//PFOgtw57EQ55yVX1L aSZ12CTJGRBvDZkxgaggjKWV8PoLCCuUdD+EjJsuW2RbvuDyxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0zekBn1PORSt3FDNaY0kbKp5xXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOTUxZGU4MjktOGIxMC0z Zjk1LWJmZDUtOTUwODg2OThiNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFK0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRgk3CZYm6/1tr2rT+G8F7pV1Kgnj2hpDdNvAsONAb+JqV4vjFSNs4v 9B3/VHsR/YNt5Ot4D4gz72suXlEAkH6q2ILSCtmZZ/e8pvNhyy0nhDPfFnaHwIb2 iMzohK0ohzgOQ1ZaEgsxaCPvj2etgvReqwD1GMWbcp4R2uP1pIHpt723mGEnhli2 8TJmGbtRfuZ1D+NNlDhG8+bw0UPjNg99Z6vJd5ychW87/QiW5WP4L0KMNyoZWz3c Gz3wXqRppYZ3LZHkKJBm96YsLI6ILGyMOFMXGTxgE0abxO6gTO871NdHfYhwy4SX HpGR4TZ7IRTAeNroLdvVsvLYmBeHEc4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:11:21 2025 by rpki-client