$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa File: b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa (raw, json) Hash identifier: uT7xsJ+buKOpIuuDb9CDlaK4X/jglPkK4pB1aTJyISQ= Subject key identifier: D2:13:3F:20:ED:8E:86:6E:AA:79:E0:B7:95:BD:26:BF:DB:49:01:4F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFAFDCEF114B2B34CE6CD6E0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa Signing time: Mon 27 Jan 2025 18:27:41 +0000 ROA not before: Mon 27 Jan 2025 18:27:41 +0000 ROA not after: Sun 27 Apr 2025 17:27:41 +0000 asID: 15164 IP address blocks: 140.82.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:af:dc:ef:11:4b:2b:34:ce:6c:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:27:41 2025 GMT Not After : Apr 27 17:27:41 2025 GMT Subject: CN=54933dc1-6302-4d06-b7fd-7b963fc7e722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:fc:e6:da:f1:ce:3f:b8:05:ba:6e:e8:ba: a4:da:aa:d2:37:8b:3b:59:7b:9d:4c:14:4d:94:a3: 6d:cc:99:fc:c6:5f:a7:af:57:d0:f3:35:ce:c4:30: 8e:0d:43:a9:23:e1:50:ea:91:17:46:75:85:e8:fb: d3:5b:e0:49:1c:a1:17:2a:75:74:0f:17:e6:a0:02: e4:77:84:36:74:c9:15:4e:7e:22:e4:16:21:ef:cf: 0d:84:27:9e:81:24:42:e0:67:ef:0c:b4:3f:0e:21: 0b:47:f9:4d:be:71:5d:3c:a1:4d:9a:d8:54:37:36: 5e:c9:72:75:40:8f:53:00:69:9a:d5:a0:8b:07:73: 4e:e4:22:43:2d:38:b5:64:e6:ed:72:34:bc:8d:6d: 99:5f:f0:dc:f0:55:ac:81:19:32:87:ef:0a:e7:bb: a1:b0:a9:f7:05:9a:1f:07:bd:7b:88:8f:b9:b7:dd: 6f:ff:60:eb:2a:b7:98:61:37:89:5c:92:7d:29:09: 62:5b:9b:6b:55:5b:df:bd:ad:ce:79:d3:76:13:be: 28:80:6e:38:ec:cd:55:2a:d4:b8:b2:9e:4b:28:ff: 18:82:ca:9a:8a:f5:b4:3e:39:0e:b2:80:54:63:88: 46:7d:d9:83:25:df:84:f2:a2:a4:41:49:6a:4c:0e: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:3F:20:ED:8E:86:6E:AA:79:E0:B7:95:BD:26:BF:DB:49:01:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:40:37:fa:e8:d2:be:98:64:46:24:2e:4d:e6:7e:9f:15:3f: a7:a3:a9:80:f7:75:08:96:da:ab:a5:da:60:d2:40:44:2f:85: 01:c3:e7:37:eb:ee:3b:41:bc:de:db:26:61:6e:73:7b:6f:b4: 58:ba:d0:9a:8d:7f:19:22:29:44:b6:6c:a7:1d:94:bb:1c:31: 31:9f:5f:9f:53:3f:a1:2a:fc:d7:cd:ae:3c:68:b4:00:b3:73: b7:d1:6d:d2:7b:bd:9f:30:8c:b8:5d:f0:81:7f:8e:15:8d:f3: 27:21:eb:06:c1:9d:49:fe:d9:57:9f:17:8d:79:12:6b:a5:8f: fa:0e:3f:79:f1:39:aa:e8:3d:7c:cd:da:9d:61:09:2d:7a:ea: 8e:29:b3:d7:89:54:40:ee:e7:9f:c6:28:0c:ee:89:82:dd:e1: 97:c8:8b:3f:d1:ed:12:a9:96:5c:2f:82:b7:9e:90:f7:83:a2: 7a:18:ad:5d:71:18:8f:5a:6d:5a:3c:30:95:dd:da:72:ca:a4: 26:e4:0e:c9:f9:9d:68:22:35:21:fa:98:06:1b:0a:53:ee:53: 1f:ad:54:cb:de:09:55:4e:84:e6:c6:e4:60:f8:b2:8c:e7:2f: f4:45:24:5f:74:da:05:7b:ec:cf:6c:2d:63:ca:cc:6b:8d:18: 78:86:eb:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivr9zvEUsrNM5s1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4Mjc0MVoXDTI1MDQyNzE3Mjc0MVowLzEtMCsGA1UEAxMk NTQ5MzNkYzEtNjMwMi00ZDA2LWI3ZmQtN2I5NjNmYzdlNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6b85trxzj+4Bbpu6Lqk2qrSN4s7WXudTBRN lKNtzJn8xl+nr1fQ8zXOxDCODUOpI+FQ6pEXRnWF6PvTW+BJHKEXKnV0DxfmoALk d4Q2dMkVTn4i5BYh788NhCeegSRC4GfvDLQ/DiELR/lNvnFdPKFNmthUNzZeyXJ1 QI9TAGma1aCLB3NO5CJDLTi1ZObtcjS8jW2ZX/Dc8FWsgRkyh+8K57uhsKn3BZof B717iI+5t91v/2DrKreYYTeJXJJ9KQliW5trVVvfva3OedN2E74ogG447M1VKtS4 sp5LKP8YgsqaivW0PjkOsoBUY4hGfdmDJd+E8qKkQUlqTA5R2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNITPyDtjoZuqnngt5W9Jr/bSQFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjEyYWEyMGQtMWE5OC0z NGY3LWI2MzEtNDgzNmNkNmQ0YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFK+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhAN/ro0r6YZEYkLk3mfp8VP6ejqYD3dQiW2qul2mDSQEQvhQHD5zfr 7jtBvN7bJmFuc3tvtFi60JqNfxkiKUS2bKcdlLscMTGfX59TP6Eq/NfNrjxotACz c7fRbdJ7vZ8wjLhd8IF/jhWN8ych6wbBnUn+2VefF415Emulj/oOP3nxOaroPXzN 2p1hCS166o4ps9eJVEDu55/GKAzuiYLd4ZfIiz/R7RKpllwvgreekPeDonoYrV1x GI9abVo8MJXd2nLKpCbkDsn5nWgiNSH6mAYbClPuUx+tVMveCVVOhObG5GD4sozn L/RFJF902gV77M9sLWPKzGuNGHiG6/g= -----END CERTIFICATE-----Generated at Fri Apr 11 23:21:05 2025 by rpki-client