$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa File: daa142cf-1083-30ba-9ff1-e9033562e2b7.roa (raw, json) Hash identifier: OFxlJsosVbc5MTqSfn1umIyz4dVOVe/EwXYpYP/yQ+s= Subject key identifier: 7D:3F:3B:21:7B:3F:23:1E:E2:A8:B0:F4:CD:CD:81:EA:78:05:C2:68 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848AF7243AD55D438BEC061C300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa Signing time: Mon 27 Jan 2025 16:23:35 +0000 ROA not before: Mon 27 Jan 2025 16:23:35 +0000 ROA not after: Sun 27 Apr 2025 15:23:35 +0000 asID: 15164 IP address blocks: 140.82.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:72:43:ad:55:d4:38:be:c0:61:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 27 16:23:35 2025 GMT Not After : Apr 27 15:23:35 2025 GMT Subject: CN=c9fb454a-8ddc-4ff3-8ebb-79420b24286f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:c5:c7:f4:d0:84:86:c8:92:1b:2d:19:73: 5a:4a:bd:ce:86:f7:93:ac:b2:00:21:78:c6:80:c7: a0:58:50:41:b0:51:1d:aa:5b:04:bf:38:0f:c4:14: 16:8f:43:e3:ca:a8:8d:55:1c:95:1f:2a:4b:76:b6: fe:73:c2:4f:dd:0b:26:e9:2d:bf:3c:25:51:56:06: d8:46:55:27:32:3c:5c:a3:79:25:95:f9:20:8a:a1: 0a:32:c7:a9:02:eb:b0:89:19:dd:85:69:e8:00:a7: 20:c9:b8:45:6d:05:eb:ee:2b:76:92:ef:6a:08:ae: 8e:63:c6:78:f6:59:11:43:15:e9:32:d5:99:e8:21: 0f:8d:70:5b:e2:ab:18:84:3d:1f:8d:be:db:88:e1: 52:29:68:fc:3b:99:ee:49:d1:77:ae:b9:51:ee:05: ab:77:72:f6:ef:da:44:bd:54:6c:da:0c:39:5b:23: 67:b9:da:40:e4:76:2c:fc:1f:d8:24:46:0d:e8:e7: 0e:65:cf:4f:e4:c5:f9:89:2e:2a:a6:32:bf:94:52: 66:57:6c:8a:5c:c2:d8:2a:a6:9e:84:2d:3c:fb:d8: 11:40:81:b3:67:1a:9f:95:e0:19:d0:0b:8e:6c:3e: e2:76:6c:0f:50:b8:27:45:95:95:5c:27:01:11:df: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3F:3B:21:7B:3F:23:1E:E2:A8:B0:F4:CD:CD:81:EA:78:05:C2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e0:ce:e4:05:8a:21:e5:ce:d8:15:8a:7a:fd:15:7b:79:d9: 5d:c9:fa:76:ff:6c:13:54:24:c0:96:a2:6f:ec:c4:93:d2:b2: 5c:85:40:a5:c6:70:4a:12:4f:33:fd:80:7d:5a:21:20:86:eb: f9:0a:2a:30:85:9a:7c:6f:3b:e7:3f:a4:c3:12:f9:78:0d:57: e7:ad:d3:ab:7c:22:c8:cd:aa:00:31:d8:09:1a:16:8e:05:e0: 9c:14:f3:32:a2:9b:41:0c:d6:db:8e:18:63:ec:6b:1e:a5:a0: 2a:03:49:6e:b2:b3:c8:da:ce:18:2e:bb:01:29:cb:38:04:28: 8a:98:19:2e:cb:45:4e:98:8a:ae:30:f6:e4:6f:3b:01:d4:e5: 27:f2:ff:c7:2f:88:21:95:2a:0d:66:7c:12:16:cb:1b:a4:14: 3e:ce:88:d8:a5:46:3a:14:7c:d2:4e:65:fe:5b:23:34:5f:88: 02:9e:8e:9a:55:d1:bf:0a:b9:56:fd:28:4d:3e:f4:ed:da:3c: d7:c1:c5:54:8a:13:21:a7:e7:f7:c5:91:e3:a0:4b:21:fa:68: 59:1f:44:d7:ed:26:f4:e1:56:42:ea:3b:e7:dc:f6:49:e5:7d: 94:50:e6:d0:7a:f8:2d:8a:2a:c4:61:d6:d2:75:46:98:12:09: e5:12:5a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivckOtVdQ4vsBhwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyNzE2MjMzNVoXDTI1MDQyNzE1MjMzNVowLzEtMCsGA1UEAxMk YzlmYjQ1NGEtOGRkYy00ZmYzLThlYmItNzk0MjBiMjQyODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq3Fx/TQhIbIkhstGXNaSr3OhveTrLIAIXjG gMegWFBBsFEdqlsEvzgPxBQWj0PjyqiNVRyVHypLdrb+c8JP3Qsm6S2/PCVRVgbY RlUnMjxco3kllfkgiqEKMsepAuuwiRndhWnoAKcgybhFbQXr7it2ku9qCK6OY8Z4 9lkRQxXpMtWZ6CEPjXBb4qsYhD0fjb7biOFSKWj8O5nuSdF3rrlR7gWrd3L279pE vVRs2gw5WyNnudpA5HYs/B/YJEYN6OcOZc9P5MX5iS4qpjK/lFJmV2yKXMLYKqae hC08+9gRQIGzZxqfleAZ0AuObD7idmwPULgnRZWVXCcBEd//BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0/OyF7PyMe4qiw9M3Ngep4BcJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGFhMTQyY2YtMTA4My0z MGJhLTlmZjEtZTkwMzM1NjJlMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvgzuQFiiHlztgVinr9FXt52V3J+nb/bBNUJMCWom/sxJPSslyFQKXG cEoSTzP9gH1aISCG6/kKKjCFmnxvO+c/pMMS+XgNV+et06t8IsjNqgAx2AkaFo4F 4JwU8zKim0EM1tuOGGPsax6loCoDSW6ys8jazhguuwEpyzgEKIqYGS7LRU6Yiq4w 9uRvOwHU5Sfy/8cviCGVKg1mfBIWyxukFD7OiNilRjoUfNJOZf5bIzRfiAKejppV 0b8KuVb9KE0+9O3aPNfBxVSKEyGn5/fFkeOgSyH6aFkfRNftJvThVkLqO+fc9knl fZRQ5tB6+C2KKsRh1tJ1RpgSCeUSWtQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:35 2025 by rpki-client