$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa File: 5761e698-8303-343c-9d59-f2fd2c87dd63.roa (raw, json) Hash identifier: bwCSaTt15zqRerW5whBqt4VDaFYMSD+v+8UfK2Jlg4Y= Subject key identifier: 40:D0:36:99:AF:77:52:E6:FB:07:F2:28:79:97:57:0F:04:75:73:CE Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F432858494B63FBF686344AE4F0000000 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 168.91.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fb:f6:86:34:4a:e4:f0:00:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ae1f2c47-244e-40c0-abb0-5a069d0843b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:42:4f:9a:b7:dc:ff:f7:86:ee:c2:77:69: 91:8a:9e:4a:29:70:82:98:c0:22:c6:c1:6f:0c:90: 13:a5:5a:7e:92:48:f8:6b:36:3a:83:bf:25:f9:3c: 66:5c:fa:16:99:87:ef:1b:a4:16:81:a7:8d:45:2c: 4a:ab:b5:64:3f:7a:05:22:d7:65:db:6e:02:e9:6b: e1:79:03:22:e6:5e:f1:02:5a:39:0a:84:11:5d:19: d6:57:84:ac:e6:6e:70:c5:f7:ad:71:dc:26:2b:c4: f6:5f:72:78:af:aa:af:32:ce:14:44:0a:5c:3a:c2: ed:2f:0a:bf:aa:3a:ed:10:35:d0:7a:1e:02:b7:56: c6:3e:ca:4e:b7:e9:39:98:07:91:ae:3e:42:cb:1f: 17:64:cd:34:b9:2d:05:d4:b5:ca:9d:e9:0f:3f:05: 79:95:20:4c:31:92:59:e7:52:e1:8a:e6:ad:03:0e: c2:67:c2:6d:dd:fb:62:47:71:d8:dc:af:7f:86:80: 6a:1f:45:51:3c:12:ff:a1:63:90:df:64:2f:c4:05: e4:ea:60:fb:99:a7:a9:05:31:72:ff:ff:89:13:8d: 6f:fa:3e:8d:56:e6:97:98:b8:0b:e2:96:14:0e:4f: bb:7e:0c:ac:ba:d8:99:76:74:8e:9e:d3:5a:c8:b1: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:36:99:AF:77:52:E6:FB:07:F2:28:79:97:57:0F:04:75:73:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/5761e698-8303-343c-9d59-f2fd2c87dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ad:c8:60:53:bb:03:e8:76:67:3a:5d:53:35:5c:a1:af:4a: b7:12:f2:19:66:d3:1b:09:3c:33:5d:ce:32:da:1a:b8:3e:03: 8a:e1:3f:61:85:1a:e2:63:e9:8a:03:8f:03:40:ce:f0:f6:b1: d9:98:62:85:ed:96:8b:fc:12:0d:74:6c:95:06:9f:47:80:ac: fe:70:98:62:89:c9:6c:c3:2c:e6:fb:ee:20:b1:7c:a5:1c:1c: cc:6b:1f:d4:14:9e:11:19:13:42:5a:7f:6c:86:22:f2:57:6a: 02:43:b6:d6:06:f8:0f:f3:2c:85:e5:91:cd:1e:b0:85:d2:2b: 5b:22:ea:06:a1:2c:82:32:fd:75:02:53:3d:74:e4:fb:a0:de: 65:e8:d2:78:ae:93:35:25:38:0e:4f:5b:71:c8:bc:47:6b:29: 30:8c:6b:ae:32:9b:3c:10:c2:35:9c:dc:c8:59:f3:df:29:0d: 9c:ad:c9:82:cd:eb:97:7e:62:eb:49:f2:ae:8f:61:fa:9a:ab: 22:32:69:ac:de:f1:e6:05:02:31:1c:e9:b1:12:d0:4f:e4:5a: 8f:cc:61:e7:47:57:77:c5:c1:d7:a7:59:51:92:5e:f3:55:13: 9d:fe:11:70:84:2f:7e:1e:d7:59:17:13:f0:a4:07:22:a4:4e: c4:0c:f9:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/v2hjRK5PAAAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWUxZjJjNDctMjQ0ZS00MGMwLWFiYjAtNWEwNjlkMDg0M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVJCT5q33P/3hu7Cd2mRip5KKXCCmMAixsFv DJATpVp+kkj4azY6g78l+TxmXPoWmYfvG6QWgaeNRSxKq7VkP3oFItdl224C6Wvh eQMi5l7xAlo5CoQRXRnWV4Ss5m5wxfetcdwmK8T2X3J4r6qvMs4URApcOsLtLwq/ qjrtEDXQeh4Ct1bGPspOt+k5mAeRrj5Cyx8XZM00uS0F1LXKnekPPwV5lSBMMZJZ 51LhiuatAw7CZ8Jt3ftiR3HY3K9/hoBqH0VRPBL/oWOQ32QvxAXk6mD7maepBTFy //+JE41v+j6NVuaXmLgL4pYUDk+7fgysutiZdnSOntNayLFF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDQNpmvd1Lm+wfyKHmXVw8EdXPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNTc2MWU2OTgtODMwMy0z NDNjLTlkNTktZjJmZDJjODdkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHStyGBTuwPodmc6XVM1XKGvSrcS8hlm0xsJPDNdzjLaGrg+A4rhP2GF GuJj6YoDjwNAzvD2sdmYYoXtlov8Eg10bJUGn0eArP5wmGKJyWzDLOb77iCxfKUc HMxrH9QUnhEZE0Jaf2yGIvJXagJDttYG+A/zLIXlkc0esIXSK1si6gahLIIy/XUC Uz105Pug3mXo0niukzUlOA5PW3HIvEdrKTCMa64ymzwQwjWc3MhZ898pDZytyYLN 65d+YutJ8q6PYfqaqyIyaaze8eYFAjEc6bES0E/kWo/MYedHV3fFwdenWVGSXvNV E53+EXCEL34e11kXE/CkByKkTsQM+YI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:11:33 2025 by rpki-client