$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa File: 96e482ab-646e-3f95-b350-c845e7eb8987.roa (raw, json) Hash identifier: dU97QiKRQ4a9KpaQ8xDuvqcf+Zb2wyOdl0dQW1tstp0= Subject key identifier: 90:11:55:6C:47:6B:D5:1D:BB:20:5C:45:57:35:D3:66:47:F2:4E:4E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFB29868426D0AB6525DB15C Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa Signing time: Mon 27 Jan 2025 18:33:12 +0000 ROA not before: Mon 27 Jan 2025 18:33:12 +0000 ROA not after: Sun 27 Apr 2025 17:33:12 +0000 asID: 15164 IP address blocks: 147.136.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:b2:98:68:42:6d:0a:b6:52:5d:b1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:33:12 2025 GMT Not After : Apr 27 17:33:12 2025 GMT Subject: CN=ca9fa2f4-15b7-42c1-9bff-20c80092c6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2b:7c:bc:f0:2e:d8:16:45:a0:4c:fa:31:79: d1:63:78:2d:c4:82:0f:ca:56:c5:e3:cc:f6:c4:b2: 0a:2f:e5:0f:5c:41:f1:61:bc:61:52:c6:d4:ee:47: 24:03:38:f3:4c:17:18:98:b5:13:4c:0e:cd:54:6a: da:54:7e:bf:d7:48:ac:0a:68:ef:9b:4c:32:e4:c5: c0:f7:b7:58:8b:7d:72:7e:01:4d:fe:a4:71:3d:c1: a1:2e:d4:94:51:eb:b9:d2:06:97:46:82:81:de:54: 81:0f:b7:da:93:8e:76:ce:59:9b:2a:3a:11:be:02: db:67:2d:de:fd:34:d8:45:9c:9d:e9:0a:70:26:28: 66:fe:7c:04:41:23:f5:32:cd:ed:d3:54:9b:53:3c: 92:44:6e:f3:17:34:30:5f:4d:5b:a0:ec:79:95:a3: 2b:42:12:16:ba:8c:1d:28:3e:b6:d7:d4:39:10:3a: 90:dc:22:72:24:5c:fd:54:3c:62:be:dc:64:8e:ec: 9b:2c:ca:f3:be:b0:62:1d:6d:eb:e1:b2:75:1d:9c: 60:48:eb:35:87:c5:5d:9a:47:75:f9:a7:ff:cc:95: 23:fe:43:9a:a7:d8:ae:1e:40:7e:00:e6:97:0e:9c: 25:00:56:fb:e8:ec:93:51:43:42:ad:45:82:43:51: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:55:6C:47:6B:D5:1D:BB:20:5C:45:57:35:D3:66:47:F2:4E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 147.136.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:41:ee:43:b0:38:c3:0e:cb:89:80:05:7c:b0:c6:a3:9f:58: 29:4d:c5:fc:52:28:76:73:19:86:55:f1:63:c7:aa:51:66:89: 0a:e8:e9:f6:2d:14:a3:ad:3c:70:39:05:ce:1c:e7:8f:58:f3: 8c:ca:0d:77:ef:4f:61:e8:63:a5:8c:6d:31:49:c5:3e:06:5a: 57:15:07:c6:5a:88:08:dc:ca:cc:10:09:91:ea:ac:f7:f5:a5: 02:7c:41:c1:b7:42:3a:56:7f:26:4d:a6:a9:35:45:b2:ca:af: 6e:1f:c4:8c:51:ba:a7:be:79:bd:c2:02:bd:00:fd:bb:60:cd: 45:a2:f9:19:ab:d1:ac:50:8d:31:2e:24:3f:63:75:d2:b5:5f: 70:07:0f:9c:d8:9f:1f:f8:b4:82:0d:56:26:d2:26:2d:b8:58: 82:a9:1b:68:42:fc:25:60:82:b5:be:80:17:ae:70:34:fe:87: d2:da:5e:0a:60:80:05:6a:d0:3d:f9:fa:87:ec:5b:4e:eb:bf: 3d:f2:9a:d9:d5:13:2a:8a:2f:da:75:2b:b4:9d:50:c3:04:29: 02:66:7e:04:81:e2:2e:51:f4:fb:a1:c0:82:1b:29:0f:1d:4d: dd:3e:60:86:32:63:93:06:a4:b6:70:de:a9:9e:02:5d:33:6d: e9:d9:bd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivsphoQm0KtlJdsVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4MzMxMloXDTI1MDQyNzE3MzMxMlowLzEtMCsGA1UEAxMk Y2E5ZmEyZjQtMTViNy00MmMxLTliZmYtMjBjODAwOTJjNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCt8vPAu2BZFoEz6MXnRY3gtxIIPylbF48z2 xLIKL+UPXEHxYbxhUsbU7kckAzjzTBcYmLUTTA7NVGraVH6/10isCmjvm0wy5MXA 97dYi31yfgFN/qRxPcGhLtSUUeu50gaXRoKB3lSBD7fak452zlmbKjoRvgLbZy3e /TTYRZyd6QpwJihm/nwEQSP1Ms3t01SbUzySRG7zFzQwX01boOx5laMrQhIWuowd KD6219Q5EDqQ3CJyJFz9VDxivtxkjuybLMrzvrBiHW3r4bJ1HZxgSOs1h8Vdmkd1 +af/zJUj/kOap9iuHkB+AOaXDpwlAFb76OyTUUNCrUWCQ1ENtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJARVWxHa9UduyBcRVc102ZH8k5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOTZlNDgyYWItNjQ2ZS0z Zjk1LWIzNTAtYzg0NWU3ZWI4OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk4j7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtB7kOwOMMOy4mABXywxqOfWClNxfxSKHZzGYZV8WPHqlFmiQro6fYt FKOtPHA5Bc4c549Y84zKDXfvT2HoY6WMbTFJxT4GWlcVB8ZaiAjcyswQCZHqrPf1 pQJ8QcG3QjpWfyZNpqk1RbLKr24fxIxRuqe+eb3CAr0A/btgzUWi+Rmr0axQjTEu JD9jddK1X3AHD5zYnx/4tIINVibSJi24WIKpG2hC/CVggrW+gBeucDT+h9LaXgpg gAVq0D35+ofsW07rvz3ymtnVEyqKL9p1K7SdUMMEKQJmfgSB4i5R9PuhwIIbKQ8d Td0+YIYyY5MGpLZw3qmeAl0zbenZvUY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:23 2025 by rpki-client