$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa File: 2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa (raw, json) Hash identifier: 1wVcKe+W5nQH+J2IWbYO72GtOJuTw5qF2yetf40aeS4= Subject key identifier: 5B:A9:F3:96:71:3F:87:90:CD:F6:58:09:73:73:86:1C:58:E0:C4:C5 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285848C2B6491169B423268383CD80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 168.91.72.0/24 maxlen: 24 168.91.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:49:11:69:b4:23:26:83:83:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=fe165499-d441-4373-808a-5b024a6dc656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:4e:ee:2c:57:d0:77:8b:b5:d4:52:7b:42: 9c:d0:a2:49:85:cb:b7:3f:2d:f5:63:ee:46:9e:01: 54:09:4d:b7:72:f5:c8:db:4e:05:7c:ba:4e:4e:1c: 05:f9:b9:92:63:44:f9:cb:32:12:06:41:b0:4f:99: b7:0a:ee:b3:3b:21:f5:8d:78:3e:5c:06:f6:1e:2e: 34:ff:b4:fd:fc:4d:e8:93:c8:fb:44:4d:22:29:2e: cf:79:ba:2f:14:34:33:79:7f:a0:77:bc:2b:9c:39: 09:a0:f9:78:e8:e9:a7:f0:90:fd:36:19:80:1f:45: 27:ee:c1:e5:5b:81:0f:ac:f7:5f:f7:c9:07:26:a0: ab:da:91:10:dc:f3:0e:32:90:30:9b:b2:f5:cc:51: a5:f8:7e:23:3f:7a:5d:b7:84:5e:81:6b:20:99:20: e0:92:26:77:bd:1e:cf:14:71:0b:35:f5:92:d4:ea: 52:85:53:f9:bb:55:ae:0d:a5:43:6b:42:7c:2b:a3: 8b:15:1c:55:a5:37:5d:15:35:be:ad:d7:27:ef:a5: ac:2b:2e:0d:32:33:f5:e4:ad:d7:00:e9:35:a4:9e: d9:ed:10:ee:59:8b:c3:ff:6d:32:36:4f:a2:54:5a: cc:df:ed:e8:69:18:8c:24:dc:d7:53:e8:1d:01:8b: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:F3:96:71:3F:87:90:CD:F6:58:09:73:73:86:1C:58:E0:C4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:12:e5:7f:f1:a2:72:7c:c9:df:92:0e:2f:6f:ea:cc:5e:aa: 96:0a:d6:85:3e:a7:fb:b3:8a:70:48:80:39:5d:42:59:4d:31: 5b:9f:a0:52:f0:31:4d:81:f4:82:9b:69:57:d4:ad:a2:99:3d: 19:fc:09:38:ce:03:a0:94:8c:e5:4c:e5:ee:f3:ee:38:75:55: bc:85:57:35:5f:1c:38:2e:62:89:f9:ad:df:c6:a4:b0:27:e3: 1d:77:3c:6d:05:a0:cc:07:6e:b3:12:c8:c5:1c:d7:a5:38:4d: 09:7e:59:a6:bd:33:2c:a5:ff:b1:5c:a4:2a:ee:cf:7c:48:4f: 7e:6e:c0:1f:ae:28:c7:d5:32:6b:a5:1a:05:d8:19:64:8e:22: 1e:d9:92:71:bd:92:ba:a2:65:ed:96:77:b1:63:c1:95:d4:ae: b1:b5:ae:ab:08:4d:de:0d:c0:22:92:40:ea:bc:3e:5d:d0:9e: d0:f0:b7:6a:52:dc:89:4f:53:b6:97:86:e4:10:b1:dc:3a:54: 3a:21:8a:f1:68:e4:d6:8f:64:23:31:7d:13:d4:0b:4b:f4:17: 2a:c8:6c:ff:83:20:3a:f4:4f:08:69:98:c6:ec:d2:b7:9a:8b: 4d:18:ad:ac:e2:90:10:76:b6:6e:5a:f8:bf:8b:1f:e0:73:d7: 45:2e:72:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkkRabQjJoODzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmUxNjU0OTktZDQ0MS00MzczLTgwOGEtNWIwMjRhNmRjNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cZO7ixX0HeLtdRSe0Kc0KJJhcu3Py31Y+5G ngFUCU23cvXI204FfLpOThwF+bmSY0T5yzISBkGwT5m3Cu6zOyH1jXg+XAb2Hi40 /7T9/E3ok8j7RE0iKS7PebovFDQzeX+gd7wrnDkJoPl46Omn8JD9NhmAH0Un7sHl W4EPrPdf98kHJqCr2pEQ3PMOMpAwm7L1zFGl+H4jP3pdt4RegWsgmSDgkiZ3vR7P FHELNfWS1OpShVP5u1WuDaVDa0J8K6OLFRxVpTddFTW+rdcn76WsKy4NMjP15K3X AOk1pJ7Z7RDuWYvD/20yNk+iVFrM3+3oaRiMJNzXU+gdAYvtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFup85ZxP4eQzfZYCXNzhhxY4MTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMmVlZjRlNDMtYTdlNC0z OGMzLTlhNDEtN2Q4OTZjOWY2OGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8S5X/xonJ8yd+SDi9v6sxeqpYK1oU+p/uzinBIgDldQllNMVufoFLw MU2B9IKbaVfUraKZPRn8CTjOA6CUjOVM5e7z7jh1VbyFVzVfHDguYon5rd/GpLAn 4x13PG0FoMwHbrMSyMUc16U4TQl+Waa9Myyl/7FcpCruz3xIT35uwB+uKMfVMmul GgXYGWSOIh7ZknG9krqiZe2Wd7FjwZXUrrG1rqsITd4NwCKSQOq8Pl3QntDwt2pS 3IlPU7aXhuQQsdw6VDohivFo5NaPZCMxfRPUC0v0FyrIbP+DIDr0TwhpmMbs0rea i00YrazikBB2tm5a+L+LH+Bz10UucvA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:26 2025 by rpki-client