$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa File: c9b75257-3222-3571-8c3f-8375e5c50eb2.roa (raw, json) Hash identifier: aFJ1HrnuIlOYyeA7g4qbIxRAzBx67OBVhqCcLPydUtk= Subject key identifier: 56:22:35:E1:7E:EA:AD:E6:01:4E:B1:0E:C6:0D:C9:79:82:D5:7E:B3 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFBEC18E650C649862C6AD40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa Signing time: Mon 27 Jan 2025 18:57:42 +0000 ROA not before: Mon 27 Jan 2025 18:57:42 +0000 ROA not after: Sun 27 Apr 2025 17:57:42 +0000 asID: 15164 IP address blocks: 199.200.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:be:c1:8e:65:0c:64:98:62:c6:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:57:42 2025 GMT Not After : Apr 27 17:57:42 2025 GMT Subject: CN=e24ed59c-1ea7-4647-a372-6ab4e672cf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:89:97:23:3e:69:4c:e6:69:10:7a:0e:f8: 0b:46:aa:f0:92:56:dc:97:d4:fd:3d:a4:0c:bb:5f: e8:6d:d8:b0:d1:cc:36:60:6f:a1:4d:08:5d:e2:7a: 4d:0e:7f:aa:4e:55:0f:90:9e:96:7d:14:f7:01:77: a0:5a:e9:d0:d9:9b:5f:99:e9:ae:30:88:0a:c7:76: c2:e2:14:8e:63:2f:bc:a5:52:cc:9c:ff:84:37:72: 55:50:ba:93:7d:02:e7:97:fa:23:bd:28:b9:24:6e: fb:8b:55:ec:71:5f:10:94:da:83:9b:96:cc:bc:99: f8:b6:d9:f5:4a:cf:48:1a:3f:85:27:d1:c8:99:32: 20:11:cc:e4:82:f1:58:a1:54:fe:ec:de:9e:31:ad: 9a:c9:84:46:0f:68:03:0b:b2:7f:84:18:27:f2:e8: cf:ed:c2:00:af:e1:4f:98:a8:0c:4c:07:c3:46:f5: 23:30:ab:38:0c:a8:87:3b:43:50:bb:b7:42:37:85: c1:b3:dd:5d:24:3a:48:9a:e7:fd:8b:0b:fb:55:86: 4a:f9:7e:5e:86:b2:26:0c:6a:e2:30:78:6f:e3:29: 87:aa:1a:bc:e2:2a:ad:ca:a0:ea:1f:83:34:53:0c: 8c:6c:39:6d:87:d0:2f:b4:83:76:2b:49:49:61:11: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:22:35:E1:7E:EA:AD:E6:01:4E:B1:0E:C6:0D:C9:79:82:D5:7E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4f:a1:64:66:ab:3b:fd:25:3e:ff:33:c9:a1:32:80:bb:09: 49:01:b5:29:6b:2b:b2:53:9d:54:b9:2c:2c:da:be:31:fc:32: f3:ef:c2:c3:a7:23:67:97:dc:1a:29:65:84:03:e3:f5:7f:8d: a7:35:60:ca:5b:60:85:41:ab:7f:d0:c8:23:8b:5d:81:77:d0: a3:df:33:bd:a1:ce:06:e3:36:b2:ef:0b:e3:a0:2c:cc:0f:45: 33:81:30:0b:e1:95:50:9a:7a:91:bb:30:e5:01:da:3c:fc:ef: 78:7a:d5:89:15:7d:13:4c:40:f0:b9:8e:3d:f3:a4:fd:43:54: c3:e1:f8:b5:ba:bb:20:74:1b:3f:28:f9:4f:d4:af:d4:37:25: 0e:8c:c9:fd:0c:3f:bb:19:fb:fa:a2:a9:c2:64:3a:bf:2e:55: fd:7c:2b:6c:48:93:40:0b:48:d7:79:d8:eb:b2:92:3c:dd:2a: bb:6f:51:fb:b8:96:ad:23:1d:60:41:52:c2:a5:3f:30:7c:ed: 74:b2:00:86:01:dc:a7:95:3e:d3:2e:c8:b3:5c:0c:b9:10:5e: 23:cb:2f:ad:9c:8c:52:74:9d:a8:d3:dd:91:d1:4e:b0:06:d0: 25:6e:3d:58:f6:60:11:65:85:b0:19:fc:6a:8a:9d:eb:3b:a2: 39:38:7f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivvsGOZQxkmGLGrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NTc0MloXDTI1MDQyNzE3NTc0MlowLzEtMCsGA1UEAxMk ZTI0ZWQ1OWMtMWVhNy00NjQ3LWEzNzItNmFiNGU2NzJjZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6+JlyM+aUzmaRB6DvgLRqrwklbcl9T9PaQM u1/obdiw0cw2YG+hTQhd4npNDn+qTlUPkJ6WfRT3AXegWunQ2ZtfmemuMIgKx3bC 4hSOYy+8pVLMnP+EN3JVULqTfQLnl/ojvSi5JG77i1XscV8QlNqDm5bMvJn4ttn1 Ss9IGj+FJ9HImTIgEczkgvFYoVT+7N6eMa2ayYRGD2gDC7J/hBgn8ujP7cIAr+FP mKgMTAfDRvUjMKs4DKiHO0NQu7dCN4XBs91dJDpImuf9iwv7VYZK+X5ehrImDGri MHhv4ymHqhq84iqtyqDqH4M0UwyMbDlth9AvtIN2K0lJYREUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYiNeF+6q3mAU6xDsYNyXmC1X6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzliNzUyNTctMzIyMi0z NTcxLThjM2YtODM3NWU1YzUwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdPoWRmqzv9JT7/M8mhMoC7CUkBtSlrK7JTnVS5LCzavjH8MvPvwsOn I2eX3BopZYQD4/V/jac1YMpbYIVBq3/QyCOLXYF30KPfM72hzgbjNrLvC+OgLMwP RTOBMAvhlVCaepG7MOUB2jz873h61YkVfRNMQPC5jj3zpP1DVMPh+LW6uyB0Gz8o +U/Ur9Q3JQ6Myf0MP7sZ+/qiqcJkOr8uVf18K2xIk0ALSNd52OuykjzdKrtvUfu4 lq0jHWBBUsKlPzB87XSyAIYB3KeVPtMuyLNcDLkQXiPLL62cjFJ0najT3ZHRTrAG 0CVuPVj2YBFlhbAZ/GqKnes7ojk4f9U= -----END CERTIFICATE-----Generated at Fri Apr 11 23:31:07 2025 by rpki-client