$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa File: a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json) Hash identifier: dyGSbjQYxWVckp3IdpvYjx2tmyD/hKwFb0oUS5QrAGs= Subject key identifier: 91:89:B6:50:F0:1F:7D:F1:D8:02:B5:3B:39:BC:BB:0A:17:25:47:AB Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A48B12840FABB05E712F0D80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa Signing time: Thu 23 Jan 2025 18:39:40 +0000 ROA not before: Thu 23 Jan 2025 18:39:40 +0000 ROA not after: Wed 23 Apr 2025 17:39:40 +0000 asID: 15164 IP address blocks: 138.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:8b:12:84:0f:ab:b0:5e:71:2f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 23 18:39:40 2025 GMT Not After : Apr 23 17:39:40 2025 GMT Subject: CN=aa4db78b-51e6-4202-8725-5ec0593da463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d0:a2:d3:dc:fd:91:91:76:2c:b0:ba:53:cd: 56:95:c3:f5:45:92:89:f2:b1:38:01:c8:c4:49:f4: ef:cb:14:ca:d7:71:5c:31:97:fe:b1:fd:d9:c8:36: 2f:ed:3c:40:61:aa:f2:69:77:12:96:59:f6:a1:4d: 2a:60:91:4f:ab:5f:64:1f:93:04:dc:99:f5:89:b9: 08:ab:20:96:8e:99:44:9a:dc:6a:ce:7e:84:d0:39: 5a:a9:a7:40:30:f1:6d:b4:1b:74:af:4f:b0:b4:c9: 21:1f:71:d2:9b:63:2d:89:8c:28:cc:2d:ea:dd:ef: c6:58:7c:7e:ef:73:42:b2:61:d5:8b:6d:61:35:b5: 05:71:4d:e7:1e:e7:4e:1c:55:12:37:b1:9e:56:cb: 92:11:19:ec:68:30:b3:02:87:03:f5:f3:0b:0a:f0: 1a:7b:ed:33:db:b9:89:d9:7a:de:e3:7e:b3:83:59: 1b:85:b6:f9:53:9e:a3:88:b5:97:8c:b3:fa:ef:1c: fa:8e:15:98:d6:bb:e6:15:0e:6e:c2:03:b2:dc:65: 06:f4:c6:6b:5a:48:23:bf:7f:60:58:91:41:ea:7f: eb:0e:4a:14:c9:3f:08:9d:82:26:3f:3e:a8:27:39: 16:64:82:1b:61:cf:0e:3f:16:f1:ef:d6:ea:0d:d6: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:89:B6:50:F0:1F:7D:F1:D8:02:B5:3B:39:BC:BB:0A:17:25:47:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cf:a5:d5:8b:ca:c6:41:8d:dc:b6:7c:6a:37:08:f8:18:43: 9a:4a:6a:d5:33:34:74:bc:b5:4c:0d:c1:20:30:5f:d9:07:09: a6:d8:97:69:d2:27:b9:eb:50:aa:de:bd:1a:b9:51:4e:73:33: c3:95:7a:ee:e5:84:77:ba:13:c6:f2:25:aa:3c:4e:0b:d2:d1: 16:6a:8b:f3:7c:1d:a6:2a:7c:4f:9f:29:8c:e8:15:28:47:5e: a8:ab:31:90:59:43:f0:c3:43:b4:36:ee:89:d1:c3:8b:8f:e1: 69:fb:d6:c9:db:1f:d9:1e:93:16:41:99:67:88:58:5e:1d:9f: 13:ed:2e:62:60:02:7a:ea:8c:33:8b:4c:45:3a:d4:32:50:fc: 70:db:aa:29:a1:a1:52:3b:42:d6:ab:80:5f:09:49:12:1e:1c: 74:cb:a8:e4:8c:2d:bf:67:e2:d9:78:0f:a3:db:83:7c:da:99: a4:c3:b0:5d:dd:07:bb:aa:38:8f:17:da:bc:e6:6e:f1:7f:99: ba:8b:eb:94:78:ad:54:99:6e:f5:99:31:97:4e:61:db:21:a9: 70:ee:74:0a:f5:96:d8:7c:3d:cc:a6:03:c6:aa:bd:ad:cb:66: 9d:7c:d3:f3:aa:96:f4:25:7d:3a:8f:b9:06:98:74:b3:05:b8: fa:de:df:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikixKED6uwXnEvDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMzE4Mzk0MFoXDTI1MDQyMzE3Mzk0MFowLzEtMCsGA1UEAxMk YWE0ZGI3OGItNTFlNi00MjAyLTg3MjUtNWVjMDU5M2RhNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdCi09z9kZF2LLC6U81WlcP1RZKJ8rE4AcjE SfTvyxTK13FcMZf+sf3ZyDYv7TxAYaryaXcSlln2oU0qYJFPq19kH5ME3Jn1ibkI qyCWjplEmtxqzn6E0DlaqadAMPFttBt0r0+wtMkhH3HSm2MtiYwozC3q3e/GWHx+ 73NCsmHVi21hNbUFcU3nHudOHFUSN7GeVsuSERnsaDCzAocD9fMLCvAae+0z27mJ 2Xre436zg1kbhbb5U56jiLWXjLP67xz6jhWY1rvmFQ5uwgOy3GUG9MZrWkgjv39g WJFB6n/rDkoUyT8InYImPz6oJzkWZIIbYc8OPxbx79bqDdbkdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGJtlDwH33x2AK1Ozm8uwoXJUerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTMwZGI0MDctMTE2Zi0z ZWFlLTg1OGYtYTJhNGM4NDQ0NGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHPpdWLysZBjdy2fGo3CPgYQ5pKatUzNHS8tUwNwSAwX9kHCabYl2nS J7nrUKrevRq5UU5zM8OVeu7lhHe6E8byJao8TgvS0RZqi/N8HaYqfE+fKYzoFShH XqirMZBZQ/DDQ7Q27onRw4uP4Wn71snbH9kekxZBmWeIWF4dnxPtLmJgAnrqjDOL TEU61DJQ/HDbqimhoVI7QtargF8JSRIeHHTLqOSMLb9n4tl4D6Pbg3zamaTDsF3d B7uqOI8X2rzmbvF/mbqL65R4rVSZbvWZMZdOYdshqXDudAr1lth8PcymA8aqva3L Zp180/OqlvQlfTqPuQaYdLMFuPre3/E= -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:47 2025 by rpki-client