$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa File: cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa (raw, json) Hash identifier: fES/KVNORCY2Lr8doxk8NqSEt23OKtzBiHmPYllG2Mw= Subject key identifier: 5F:6F:69:4C:B8:31:AC:86:AD:F0:30:B8:0F:DA:04:29:12:5F:92:71 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AFBDFAE7E521E514AE1483C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa Signing time: Mon 27 Jan 2025 18:56:08 +0000 ROA not before: Mon 27 Jan 2025 18:56:08 +0000 ROA not after: Sun 27 Apr 2025 17:56:08 +0000 asID: 15164 IP address blocks: 199.200.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:bd:fa:e7:e5:21:e5:14:ae:14:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 18:56:08 2025 GMT Not After : Apr 27 17:56:08 2025 GMT Subject: CN=5045733a-a2b0-421e-9db1-31416ec95145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:fa:47:d1:e6:95:b9:17:a0:8f:92:2b:c9: 53:10:c0:20:21:a6:bc:84:43:2e:a3:2a:74:73:ba: 69:13:fa:25:be:c6:08:1d:e5:70:10:4a:1a:41:f8: 03:a7:22:ec:e0:52:f9:e6:07:39:e5:31:c2:f2:f6: 31:98:dc:40:99:98:70:99:79:5d:8e:9f:a7:57:91: d3:04:ff:7b:7d:9e:ef:88:d2:4a:6b:39:97:94:97: 4c:6e:eb:4f:97:f4:ff:d4:6d:a6:dd:30:0d:c5:96: 0d:40:ff:e5:9b:06:96:7e:52:c1:cf:42:5e:34:16: 1e:79:d3:3a:2b:dd:e4:64:ea:06:cd:87:83:c2:00: cd:c9:07:01:08:56:fc:a1:64:2c:97:f3:24:e2:40: ca:03:b3:0e:ef:c2:11:6c:68:6f:52:81:8b:f6:54: 1c:8d:ed:10:06:14:df:26:5f:a9:50:6c:9a:62:8b: 08:c7:db:bd:ef:21:e1:b6:fe:4d:ea:3f:98:35:46: e6:24:31:52:aa:c4:79:da:8f:ad:d8:29:8a:cd:9d: 28:6c:f0:57:cc:cd:17:f6:36:f2:b4:37:09:36:65: a1:60:9f:68:1a:50:f8:f1:1f:56:b6:49:67:1f:74: c1:b7:9d:5e:55:51:77:90:f2:bf:17:41:0b:20:34: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6F:69:4C:B8:31:AC:86:AD:F0:30:B8:0F:DA:04:29:12:5F:92:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bd:a3:a9:56:27:c8:5b:a9:12:37:85:48:8c:fd:65:6a:c2: de:12:f2:d4:50:0d:bf:cf:d1:2f:a5:13:ae:96:6f:fb:8c:a8: 0d:5e:e6:2f:dd:a8:a0:0f:b2:dd:5f:13:a2:be:ee:35:f9:1f: 0a:17:9b:41:bc:06:11:7f:da:60:17:1a:55:58:6d:9b:d1:09: 2c:95:74:57:82:32:2c:ef:1d:44:d1:58:a1:0e:c0:8c:f3:15: fa:e0:7e:cc:59:58:96:59:89:79:44:cf:75:61:6a:82:a7:c0: d6:ca:1d:dc:17:6a:6f:dc:64:77:85:55:43:f6:ef:2b:17:4e: de:09:01:6f:51:96:16:d9:1b:e6:b4:ec:c3:11:2f:01:72:91: 75:98:cb:26:64:1b:47:5e:1c:37:72:d3:65:58:b7:9b:9b:97: 76:85:5e:b3:bc:70:f6:87:77:12:c3:c0:8f:c7:a9:ae:49:38: 24:79:56:b8:35:0e:ce:09:91:6d:22:2d:6b:c7:bc:5b:f2:55: 33:ac:16:ae:94:ff:df:6b:62:73:29:08:31:05:79:ab:64:6c: 81:d7:ab:a1:76:58:a5:31:8e:51:19:14:66:f9:63:27:83:17: e2:b9:33:b5:87:61:82:99:df:7f:c0:fe:01:e8:1a:47:d9:ad: ad:d4:f6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivvfrn5SHlFK4Ug8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE4NTYwOFoXDTI1MDQyNzE3NTYwOFowLzEtMCsGA1UEAxMk NTA0NTczM2EtYTJiMC00MjFlLTlkYjEtMzE0MTZlYzk1MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAL6R9HmlbkXoI+SK8lTEMAgIaa8hEMuoyp0 c7ppE/olvsYIHeVwEEoaQfgDpyLs4FL55gc55THC8vYxmNxAmZhwmXldjp+nV5HT BP97fZ7viNJKazmXlJdMbutPl/T/1G2m3TANxZYNQP/lmwaWflLBz0JeNBYeedM6 K93kZOoGzYeDwgDNyQcBCFb8oWQsl/Mk4kDKA7MO78IRbGhvUoGL9lQcje0QBhTf Jl+pUGyaYosIx9u97yHhtv5N6j+YNUbmJDFSqsR52o+t2CmKzZ0obPBXzM0X9jby tDcJNmWhYJ9oGlD48R9WtklnH3TBt51eVVF3kPK/F0ELIDT4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9vaUy4MayGrfAwuA/aBCkSX5JxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvY2ZmMWFiZGMtZmFkYS0z YTFlLWE5NjItMDA0M2MyZGQ3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW9o6lWJ8hbqRI3hUiM/WVqwt4S8tRQDb/P0S+lE66Wb/uMqA1e5i/d qKAPst1fE6K+7jX5HwoXm0G8BhF/2mAXGlVYbZvRCSyVdFeCMizvHUTRWKEOwIzz FfrgfsxZWJZZiXlEz3VhaoKnwNbKHdwXam/cZHeFVUP27ysXTt4JAW9RlhbZG+a0 7MMRLwFykXWYyyZkG0deHDdy02VYt5ubl3aFXrO8cPaHdxLDwI/Hqa5JOCR5Vrg1 Ds4JkW0iLWvHvFvyVTOsFq6U/99rYnMpCDEFeatkbIHXq6F2WKUxjlEZFGb5YyeD F+K5M7WHYYKZ33/A/gHoGkfZra3U9jo= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:52 2025 by rpki-client