$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa File: 7125b790-7228-3b2f-91fe-5b1dd486ea42.roa (raw, json) Hash identifier: YymWXASxFmwGBi0BV6CE1+KMaf+zDfk9xCrNiQrZqTA= Subject key identifier: 64:55:57:6A:49:3C:2B:91:83:F0:0D:86:92:20:28:40:0A:99:A3:E4 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584957F40EF330903840B5948680 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 168.91.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0e:f3:30:90:38:40:b5:94:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=b858a7df-31be-4b4d-9aad-9648e46dd043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f1:d8:41:fc:bb:ff:e3:22:be:9d:a3:b1:40: 8c:46:2e:66:15:57:6a:2d:83:6a:bd:a0:61:7c:f1: 27:5b:4e:dc:b0:7f:9a:55:3c:ff:36:a5:f8:be:f6: 3c:44:90:ff:1c:98:2c:0d:9d:f9:19:f0:25:64:50: 44:84:ca:6c:ee:9b:2f:b7:ce:fb:b0:c4:96:20:2d: 39:83:53:d8:b6:64:80:62:b6:7f:4a:f1:fb:71:24: 59:0d:59:33:41:83:f9:69:96:a4:84:8e:ff:0c:bd: 01:0d:62:73:53:3c:da:99:48:f5:06:3b:d8:cc:47: 3d:61:f3:14:f1:a7:d4:40:2c:5e:cb:43:9b:27:cc: 29:9d:45:d0:78:e9:c3:84:ea:e7:86:36:92:55:a5: f0:12:fc:d6:38:70:66:8a:58:06:be:89:77:34:c3: 97:dd:b4:a5:22:d8:07:42:f1:39:d4:fe:b3:e4:4a: 46:fe:13:be:7f:d1:13:15:76:87:93:cf:30:52:80: ae:64:3e:20:b5:89:81:47:3c:9e:e3:fd:5a:ab:93: 8a:3a:bc:d2:2c:54:83:a9:41:c0:01:8a:29:97:05: 4a:35:26:ee:71:10:d2:b2:b2:9c:2d:10:4c:96:7b: fa:b1:b1:03:8b:38:2f:22:a5:ab:47:2a:98:05:30: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:57:6A:49:3C:2B:91:83:F0:0D:86:92:20:28:40:0A:99:A3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:78:a0:56:01:d9:c1:c8:34:05:bf:89:06:04:f3:30:ca:b5: fd:e6:5e:dc:20:51:f1:1f:69:07:44:11:73:7c:63:a9:ad:14: 7e:18:b4:82:98:74:b9:98:3d:df:a8:22:c1:ec:d6:a3:99:a2: e2:da:ed:f9:cf:c4:bc:55:80:09:58:3f:13:5a:db:50:f2:99: c5:8b:93:49:44:51:37:41:76:b5:8a:a9:53:c1:fd:c7:0e:cd: 54:14:3c:8f:89:7f:9e:6f:47:bb:f8:03:a6:e4:c3:74:23:4d: 65:98:1e:95:3e:b2:98:f0:1f:9b:29:64:99:b3:76:b6:c7:e7: 77:c4:f9:19:10:1c:1b:2e:eb:ee:18:2c:d4:5a:6f:d4:b0:c8: 09:ff:91:99:57:e9:88:7b:d5:ab:ef:b3:60:c6:d2:c5:1f:48: 2b:ce:90:a0:e4:15:28:e7:1c:93:cd:79:e4:eb:71:44:e2:16: 8e:ff:75:fe:94:b3:96:d6:f8:78:1c:11:a8:07:e4:85:b8:5e: 1b:dc:ec:17:a4:7f:bf:25:67:b2:a8:58:ad:5e:f3:fe:c0:d0: f2:5c:03:53:60:24:ab:e3:f0:ef:75:0d:66:bc:92:8f:c0:c9: 3c:52:d5:90:25:cc:17:19:c3:5b:77:62:d4:62:a9:85:35:83: c2:61:e3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A7zMJA4QLWUhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk Yjg1OGE3ZGYtMzFiZS00YjRkLTlhYWQtOTY0OGU0NmRkMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PHYQfy7/+Mivp2jsUCMRi5mFVdqLYNqvaBh fPEnW07csH+aVTz/NqX4vvY8RJD/HJgsDZ35GfAlZFBEhMps7psvt877sMSWIC05 g1PYtmSAYrZ/SvH7cSRZDVkzQYP5aZakhI7/DL0BDWJzUzzamUj1BjvYzEc9YfMU 8afUQCxey0ObJ8wpnUXQeOnDhOrnhjaSVaXwEvzWOHBmilgGvol3NMOX3bSlItgH QvE51P6z5EpG/hO+f9ETFXaHk88wUoCuZD4gtYmBRzye4/1aq5OKOrzSLFSDqUHA AYoplwVKNSbucRDSsrKcLRBMlnv6sbEDizgvIqWrRyqYBTCJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRVV2pJPCuRg/ANhpIgKEAKmaPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzEyNWI3OTAtNzIyOC0z YjJmLTkxZmUtNWIxZGQ0ODZlYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl4oFYB2cHINAW/iQYE8zDKtf3mXtwgUfEfaQdEEXN8Y6mtFH4YtIKY dLmYPd+oIsHs1qOZouLa7fnPxLxVgAlYPxNa21DymcWLk0lEUTdBdrWKqVPB/ccO zVQUPI+Jf55vR7v4A6bkw3QjTWWYHpU+spjwH5spZJmzdrbH53fE+RkQHBsu6+4Y LNRab9SwyAn/kZlX6Yh71avvs2DG0sUfSCvOkKDkFSjnHJPNeeTrcUTiFo7/df6U s5bW+HgcEagH5IW4Xhvc7Bekf78lZ7KoWK1e8/7A0PJcA1NgJKvj8O91DWa8ko/A yTxS1ZAlzBcZw1t3YtRiqYU1g8Jh41k= -----END CERTIFICATE-----Generated at Mon Apr 7 06:13:38 2025 by rpki-client