$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa File: 400e6027-1418-38f3-8d41-13b0faa52044.roa (raw, json) Hash identifier: UdbrOCoK1z0xsSX9pn6EsnGIHKAQK4rG6qJ829zD66c= Subject key identifier: 9C:2F:7A:3F:25:01:9A:ED:BD:08:B4:08:66:36:D7:08:9F:D1:84:E5 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285848A136115BC2E952281BF66E80 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 149428 IP address blocks: 168.91.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:11:5b:c2:e9:52:28:1b:f6:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=6ab7bb6c-a229-461c-90b1-7bae61bf5356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:01:51:bf:21:48:4a:bb:92:06:6d:d7:43: f5:47:4f:e0:26:3e:77:eb:72:7c:1d:0e:0b:37:c2: 24:c1:89:58:13:a1:3d:48:ac:9f:86:2c:c1:fa:60: f8:73:ec:99:7c:0d:2f:7d:5a:04:0f:af:9c:12:3f: 31:7e:48:bb:1c:29:40:05:8b:d2:c9:f6:70:55:8e: 1b:e6:ce:10:97:c5:1a:07:71:3f:75:8e:2b:5d:ed: cc:f6:cd:cc:dc:b3:95:19:60:63:49:55:c8:a7:e3: ee:ad:31:05:9a:15:09:82:b0:5c:bb:69:e4:ed:8a: 9c:9d:8e:f7:0a:b1:95:fc:02:5c:5d:ed:54:15:f7: cd:dc:06:5d:22:85:e1:68:7b:8a:ee:70:83:cf:46: 54:fe:81:23:a9:26:ea:08:79:dc:c8:d8:a8:87:a8: 23:28:a0:6c:5b:e1:fc:58:51:11:e5:ad:2b:27:81: 94:22:2b:f8:24:0e:59:d1:e6:69:fa:43:0d:f7:47: 56:86:23:0d:70:6b:a3:8d:e9:af:2d:97:27:d8:22: d7:05:2f:4c:86:52:0a:39:b7:25:a6:a2:4a:7b:8a: 84:de:86:96:26:95:7d:c3:f7:ac:2b:43:ad:d8:05: 2e:52:22:3b:81:3a:99:ec:c2:29:de:e8:77:b8:cb: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:7A:3F:25:01:9A:ED:BD:08:B4:08:66:36:D7:08:9F:D1:84:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:04:73:11:c6:18:10:0a:68:01:10:24:e4:0e:17:27:9c:7c: 67:e5:33:a6:9d:cc:40:1c:2a:ce:eb:d9:10:04:0a:f1:6d:74: 86:fb:de:f2:18:f2:51:c2:ad:e9:6a:54:6e:a8:74:1b:07:49: 4e:2b:d7:e3:1a:df:4c:a2:6c:f3:2d:75:67:c3:7a:5b:2a:2b: 88:59:99:a6:ca:41:a3:3c:5f:bb:54:65:9a:af:10:dc:a4:9e: 50:e0:1e:5c:81:f5:b5:6c:35:ac:a0:25:16:12:41:e8:b0:82: 69:8f:4d:b3:36:27:26:36:9a:0f:a2:69:7a:ef:81:b9:4c:6d: 1d:37:21:7f:1a:71:c1:26:36:81:f7:c0:ea:c7:1c:31:7e:3a: 60:66:de:ae:61:04:f0:b3:c2:f1:49:4b:0c:e6:bb:bd:cf:7b: ba:cf:9d:22:11:5f:fd:24:35:90:1c:3e:df:1e:ca:45:2d:4e: 0d:c7:12:ba:52:b9:69:68:c1:48:55:e7:f1:73:b4:8e:34:81: 29:90:36:2d:63:8a:1e:96:dc:db:87:7d:15:c0:7d:cb:9f:96: 49:8b:d5:f5:18:aa:79:69:dc:bb:00:32:57:2d:8d:90:88:df: c5:f4:c9:ac:3d:0c:2e:25:c2:04:9d:4e:f9:fd:26:bd:55:a0: fd:a8:45:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhFbwulSKBv2boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NmFiN2JiNmMtYTIyOS00NjFjLTkwYjEtN2JhZTYxYmY1MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQBUb8hSEq7kgZt10P1R0/gJj5363J8HQ4L N8IkwYlYE6E9SKyfhizB+mD4c+yZfA0vfVoED6+cEj8xfki7HClABYvSyfZwVY4b 5s4Ql8UaB3E/dY4rXe3M9s3M3LOVGWBjSVXIp+PurTEFmhUJgrBcu2nk7YqcnY73 CrGV/AJcXe1UFffN3AZdIoXhaHuK7nCDz0ZU/oEjqSbqCHncyNioh6gjKKBsW+H8 WFER5a0rJ4GUIiv4JA5Z0eZp+kMN90dWhiMNcGujjemvLZcn2CLXBS9MhlIKObcl pqJKe4qE3oaWJpV9w/esK0Ot2AUuUiI7gTqZ7MIp3uh3uMtCDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwvej8lAZrtvQi0CGY21wif0YTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNDAwZTYwMjctMTQxOC0z OGYzLThkNDEtMTNiMGZhYTUyMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEEcxHGGBAKaAEQJOQOFyecfGflM6adzEAcKs7r2RAECvFtdIb73vIY 8lHCrelqVG6odBsHSU4r1+Ma30yibPMtdWfDelsqK4hZmabKQaM8X7tUZZqvENyk nlDgHlyB9bVsNaygJRYSQeiwgmmPTbM2JyY2mg+iaXrvgblMbR03IX8accEmNoH3 wOrHHDF+OmBm3q5hBPCzwvFJSwzmu73Pe7rPnSIRX/0kNZAcPt8eykUtTg3HErpS uWlowUhV5/FztI40gSmQNi1jih6W3NuHfRXAfcuflkmL1fUYqnlp3LsAMlctjZCI 38X0yaw9DC4lwgSdTvn9Jr1VoP2oRQg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:03 2025 by rpki-client