$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa File: e9a245de-1653-3a97-af87-052a6faf738c.roa (raw, json) Hash identifier: YvQxnSYeqcs1fg+XNcARc1tkLIrc1Zq+K6K6+negf5w= Subject key identifier: 82:56:08:6B:53:2B:1B:8D:BD:FB:1F:AC:9E:96:71:C7:08:77:46:F9 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A1F852EAB9E1029024885080 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa Signing time: Wed 22 Jan 2025 20:32:22 +0000 ROA not before: Wed 22 Jan 2025 20:32:22 +0000 ROA not after: Tue 22 Apr 2025 19:32:22 +0000 asID: 15164 IP address blocks: 74.51.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:f8:52:ea:b9:e1:02:90:24:88:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 22 20:32:22 2025 GMT Not After : Apr 22 19:32:22 2025 GMT Subject: CN=3de26ac3-1718-4cb8-a088-2f04c7394015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:fa:2f:74:19:ac:36:10:f1:76:2c:5d:a0: 59:d7:21:6f:8a:7a:d5:13:07:03:2b:cf:4a:7d:c9: d6:1c:2a:d2:95:bb:66:61:2b:77:28:f7:8a:d6:65: 5d:9b:89:3e:56:1c:eb:a0:9f:1b:1d:a7:97:72:2b: 8f:c5:8c:25:e3:ab:9a:9b:f8:cf:91:31:45:e0:1d: c3:7c:72:e5:be:8b:60:1b:d7:75:8e:52:6d:8f:a2: 18:16:d6:d3:a5:fb:ce:8a:b2:b8:9b:5a:5c:15:78: 99:9d:b8:79:d3:e0:76:1c:12:21:34:17:cd:5a:f3: f2:52:73:59:5b:53:74:a7:7e:6b:c1:f4:56:ee:44: e9:be:e3:6f:b4:49:5a:7e:ea:ea:c7:4b:5a:cb:cb: 45:11:32:55:37:33:a8:9c:23:ef:53:cb:b7:ee:e7: e2:a4:50:97:db:4e:c0:f7:0f:5b:90:c5:11:dd:d6: bc:01:21:9d:0e:3e:bf:b4:7d:db:4b:40:ac:72:40: de:46:af:79:f4:51:82:9d:8a:49:58:aa:0c:d1:11: 5e:56:52:c1:b7:d2:65:01:6e:44:e4:bc:ed:09:a6: 9e:82:23:52:08:10:25:c6:57:5d:61:06:96:52:a8: 16:7c:62:aa:e0:e5:65:e6:ac:1f:2b:d5:bc:ee:c1: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:08:6B:53:2B:1B:8D:BD:FB:1F:AC:9E:96:71:C7:08:77:46:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 74.51.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:17:63:98:fd:e0:ce:1d:bf:b9:31:87:90:b7:6c:b4:5f:3e: b5:a6:71:70:27:69:d0:0c:e6:b8:af:e4:0c:2c:9c:4b:12:7d: ab:4a:95:4e:13:e1:e5:fd:85:65:c1:30:35:a7:33:8f:b6:05: f9:3f:96:c7:34:af:52:ab:31:5f:6c:b0:11:ef:34:c9:fe:a7: 2e:f2:a7:2e:b5:f3:3c:df:df:39:46:5f:5f:d7:d5:30:76:84: 0b:c1:e7:36:6b:b6:38:f4:44:5f:89:ae:06:c0:76:fa:28:55: 2d:29:6a:94:cf:bb:d8:8c:89:9a:15:f7:51:c6:21:71:dc:a2: 9c:8d:5a:c0:4a:34:10:18:78:cf:e1:58:55:57:8f:ff:b8:af: 62:6b:15:17:e0:80:63:1a:82:0a:50:82:0a:cc:9f:9e:0a:70: de:bb:0f:87:a3:0d:cf:83:53:c5:6b:c8:c6:d5:0b:76:2a:ff: 5f:fd:84:24:86:c1:40:aa:5d:bd:d4:79:aa:a0:6c:4f:4f:8d: c7:37:46:2f:aa:b1:b6:14:14:40:46:28:dc:81:61:34:06:8f: 7f:5d:a9:2e:20:5b:8d:f3:f3:09:07:9c:c5:11:bb:9e:37:81: 7a:d1:2f:50:be:83:d8:3e:b0:22:0f:f2:a0:6e:58:61:a8:c4: 9c:33:b7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEih+FLqueECkCSIUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMjIwMzIyMloXDTI1MDQyMjE5MzIyMlowLzEtMCsGA1UEAxMk M2RlMjZhYzMtMTcxOC00Y2I4LWEwODgtMmYwNGM3Mzk0MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/H6L3QZrDYQ8XYsXaBZ1yFvinrVEwcDK89K fcnWHCrSlbtmYSt3KPeK1mVdm4k+VhzroJ8bHaeXciuPxYwl46uam/jPkTFF4B3D fHLlvotgG9d1jlJtj6IYFtbTpfvOirK4m1pcFXiZnbh50+B2HBIhNBfNWvPyUnNZ W1N0p35rwfRW7kTpvuNvtElafurqx0tay8tFETJVNzOonCPvU8u37ufipFCX207A 9w9bkMUR3da8ASGdDj6/tH3bS0CsckDeRq959FGCnYpJWKoM0RFeVlLBt9JlAW5E 5LztCaaegiNSCBAlxlddYQaWUqgWfGKq4OVl5qwfK9W87sH/8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJWCGtTKxuNvfsfrJ6WcccId0b5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTlhMjQ1ZGUtMTY1My0z YTk3LWFmODctMDUyYTZmYWY3MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYXY5j94M4dv7kxh5C3bLRfPrWmcXAnadAM5riv5AwsnEsSfatKlU4T 4eX9hWXBMDWnM4+2Bfk/lsc0r1KrMV9ssBHvNMn+py7ypy618zzf3zlGX1/X1TB2 hAvB5zZrtjj0RF+JrgbAdvooVS0papTPu9iMiZoV91HGIXHcopyNWsBKNBAYeM/h WFVXj/+4r2JrFRfggGMaggpQggrMn54KcN67D4ejDc+DU8VryMbVC3Yq/1/9hCSG wUCqXb3UeaqgbE9Pjcc3Ri+qsbYUFEBGKNyBYTQGj39dqS4gW43z8wkHnMURu543 gXrRL1C+g9g+sCIP8qBuWGGoxJwzt/M= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:02 2025 by rpki-client