$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa File: 91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (raw, json) Hash identifier: ogxn9yYxAi6oCmTfKEWFgYP46/VyJLnfTprJ4HHaLlg= Subject key identifier: 4B:CE:50:B0:0B:13:2D:43:3B:57:04:3B:2E:B8:1C:BB:5A:8B:5B:18 Certificate issuer: /CN=f3280fa0-3649-4902-978e-e7711edc5a33 Certificate serial: 010D0C9F43285848E0065BAAA4CC0F2CC576ED40 Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20473 IP address blocks: 141.195.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5b:aa:a4:cc:0f:2c:c5:76:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=0a282fa4-a20e-4b90-bfbc-8270db1301b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:60:ac:1d:fe:01:73:53:37:f4:97:fc:1a: 91:bd:e4:16:67:f3:6b:25:83:b7:27:36:83:2a:2d: 9e:ea:9b:bc:c7:90:d5:b5:2b:49:5a:85:63:c2:b3: 9b:10:3e:1e:02:3e:0b:4d:00:28:79:09:8d:3a:b6: 10:ec:27:7b:f4:36:93:06:e0:30:95:62:c0:e5:2d: 4e:31:6f:4d:16:44:72:ad:56:fd:64:d4:09:48:46: e0:e1:e9:e1:ac:9d:5a:c5:62:e2:35:01:b8:8e:19: e5:cf:40:59:16:8d:14:ad:b5:90:7b:55:50:f9:75: d0:61:76:e2:bf:ec:ea:f1:a8:65:d1:23:39:67:60: 70:32:d5:f7:2b:f9:ee:79:c5:d7:3d:31:b9:72:1c: d1:bb:8b:e9:9b:1f:0c:9c:c2:15:e2:48:79:d4:61: c7:28:70:fc:f5:36:17:4b:f6:e4:e9:3b:af:c8:e9: 01:4d:6d:dd:29:39:6d:89:60:e5:24:2f:05:5f:88: e6:d1:dc:e1:90:60:94:a2:23:79:2f:58:d6:d1:3e: 91:06:ce:4d:c3:7b:a1:86:03:c4:8d:b2:3b:c6:71: f3:49:08:53:25:96:76:ee:62:ef:ae:a7:fd:7a:eb: d6:56:96:fa:7b:a9:40:1c:ff:c2:79:90:76:e5:d8: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CE:50:B0:0B:13:2D:43:3B:57:04:3B:2E:B8:1C:BB:5A:8B:5B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl X509v3 Authority Key Identifier: keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer sbgp-ipAddrBlock: critical IPv4: 141.195.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:da:b8:fd:12:c2:dd:e7:c5:eb:2e:95:6c:57:cf:9e:47:bd: 0a:07:47:e4:e2:d2:1e:3a:18:d7:37:2a:aa:0c:83:ca:3c:29: 6c:ba:34:85:d5:01:de:ea:5a:fe:a1:90:71:9f:6b:2d:e3:20: fb:cb:2b:17:3f:cf:a0:18:49:50:ee:ba:93:56:e3:af:25:f4: 8c:2f:f9:80:51:87:38:59:b9:59:5f:11:20:86:04:32:6a:2c: 3d:ed:6a:de:f5:ec:92:11:3c:b6:14:36:17:f0:7b:53:52:1c: e5:61:6c:8a:f2:8c:a6:1e:12:86:c5:af:7f:c8:24:40:d4:ec: 4d:83:71:76:c0:32:e7:7f:71:f5:8d:af:35:f6:24:cf:54:e9: 2a:9f:7e:8e:dc:f0:ad:71:8d:19:5a:01:a9:71:35:ee:72:5d: 3f:46:ad:99:49:85:46:75:04:97:d1:d0:b7:d5:a2:61:9a:b4: a3:8f:4d:a1:b0:f2:b6:ff:dc:6c:d1:0a:ae:37:fc:74:7d:3c: 3f:33:ea:ef:18:d9:49:24:db:8e:4d:bd:3d:4d:fa:c7:fa:d5: 2e:f2:be:2c:ca:0f:66:43:57:de:c4:2b:a9:65:16:b4:8e:4e: 4d:7e:f2:81:5f:fa:4a:62:ea:e7:90:da:64:e8:0c:88:52:13: 48:43:c8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBluqpMwPLMV27UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1 YTMzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MGEyODJmYTQtYTIwZS00YjkwLWJmYmMtODI3MGRiMTMwMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdgrB3+AXNTN/SX/BqRveQWZ/NrJYO3JzaD Ki2e6pu8x5DVtStJWoVjwrObED4eAj4LTQAoeQmNOrYQ7Cd79DaTBuAwlWLA5S1O MW9NFkRyrVb9ZNQJSEbg4enhrJ1axWLiNQG4jhnlz0BZFo0UrbWQe1VQ+XXQYXbi v+zq8ahl0SM5Z2BwMtX3K/nuecXXPTG5chzRu4vpmx8MnMIV4kh51GHHKHD89TYX S/bk6TuvyOkBTW3dKTltiWDlJC8FX4jm0dzhkGCUoiN5L1jW0T6RBs5Nw3uhhgPE jbI7xnHzSQhTJZZ27mLvrqf9euvWVpb6e6lAHP/CeZB25dhS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvOULALEy1DO1cEOy64HLtai1sYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4 MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvOTFhN2JlMzItYmNlMi0z OWQwLWJjZjAtNmIyMTIyNTFlZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjMyODBmYTAtMzY0OS00OTAyLTk3 OGUtZTc3MTFlZGM1YTMzL2YzMjgwZmEwLTM2NDktNDkwMi05NzhlLWU3NzExZWRj NWEzMy5jcmwwHwYDVR0jBBgwFoAUKoBY+t2PgjtyqgMIsQtqvU/ScyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcx MWVkYzVhMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErauP0Swt3nxesulWxXz55HvQoHR+Ti0h46GNc3KqoMg8o8KWy6NIXV Ad7qWv6hkHGfay3jIPvLKxc/z6AYSVDuupNW468l9Iwv+YBRhzhZuVlfESCGBDJq LD3tat717JIRPLYUNhfwe1NSHOVhbIryjKYeEobFr3/IJEDU7E2DcXbAMud/cfWN rzX2JM9U6Sqffo7c8K1xjRlaAalxNe5yXT9GrZlJhUZ1BJfR0LfVomGatKOPTaGw 8rb/3GzRCq43/HR9PD8z6u8Y2Ukk245NvT1N+sf61S7yvizKD2ZDV97EK6llFrSO Tk1+8oFf+kpi6ueQ2mToDIhSE0hDyCQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:42 2025 by rpki-client