$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/831cf7ba-56aa-3807-b6ef-872d00f6a1f0.roa File: 831cf7ba-56aa-3807-b6ef-872d00f6a1f0.roa (raw, json) Hash identifier: kpaN+vq+SoC6Q6WbPwAEgtotO1V8wC2HGmxAEtmv5Po= Subject key identifier: 3A:FE:22:6F:91:B5:14:BF:D7:F7:7F:42:A2:00:22:33:8C:1D:F7:03 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285848C6E637592FD294F545E8A200 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/831cf7ba-56aa-3807-b6ef-872d00f6a1f0.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 28753 IP address blocks: 168.91.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:59:2f:d2:94:f5:45:e8:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=81999684-ae42-4139-994e-e150b7032518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:aa:76:e3:83:2c:b7:a7:f2:0a:93:0d:ff: b5:0c:63:20:72:26:91:f2:ff:f5:48:d4:b5:a8:e9: 0d:0b:43:0a:a7:42:d7:81:65:14:cc:53:fa:13:05: a2:3d:01:0b:29:1c:56:f5:67:28:d4:8b:a1:52:17: 3c:bf:b4:69:f9:07:7e:78:1d:ab:a4:e7:8e:51:82: 9f:38:c1:64:f6:3c:e9:f3:b3:c1:ff:44:7a:be:91: 88:99:67:d6:c3:b9:a9:38:57:4f:1c:8f:ae:4c:ea: 09:08:34:80:38:87:37:65:6e:92:8d:18:4d:a2:06: 6c:ce:4a:11:d2:73:ea:5a:90:a6:81:34:37:11:e2: 7c:9a:96:fb:e9:0e:26:18:f1:44:6c:11:d1:2c:7b: 5c:dc:59:56:39:66:0d:fb:ae:48:f4:9e:42:42:93: d7:17:88:cc:f1:22:35:fb:49:2d:70:9b:98:6c:ef: 30:4d:e0:e9:ae:e4:35:ff:ec:2b:52:60:80:5e:f3: 7c:0b:06:16:71:54:58:01:2f:ac:a9:1a:ad:cc:6e: 18:d6:5b:d9:19:e5:04:a0:da:98:3d:bc:12:11:f7: f7:df:88:a1:d3:72:57:26:3e:0d:87:a9:56:0e:39: ed:40:f8:5b:d4:8b:17:d6:e9:36:5d:9d:0e:2c:a4: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:22:6F:91:B5:14:BF:D7:F7:7F:42:A2:00:22:33:8C:1D:F7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/831cf7ba-56aa-3807-b6ef-872d00f6a1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6c:53:08:49:c6:fa:b1:10:92:aa:2b:c1:9b:72:55:e7:a7: 43:58:db:bb:6c:42:b6:2b:f1:c0:8b:26:fa:57:3f:8e:ca:3c: 73:b2:9a:32:40:c9:9d:4f:3b:64:b2:4d:1b:51:a7:28:52:d6: 89:c2:00:48:1a:7a:b9:5e:6c:8a:a8:35:dc:54:a8:b2:04:ed: 8f:2c:37:63:57:4e:c7:61:52:34:07:02:2b:7e:78:23:99:fb: bc:ba:85:ca:13:94:e7:69:74:17:7f:72:4a:f7:33:5b:7e:51: 3e:d1:b2:dd:8a:4c:bd:3f:ce:3f:de:94:31:c7:88:fa:8c:fd: e6:3b:c4:c9:ae:c5:cb:3c:01:b3:a8:34:ee:d8:02:56:19:3a: 99:ac:cb:15:5f:e7:ab:1f:55:20:7b:e9:ce:03:9e:fe:ac:a4: fc:90:d3:c7:aa:78:4c:32:93:88:f7:68:65:e6:57:e3:be:8d: f9:86:c5:b9:f7:4a:01:7a:1c:7a:3a:65:c4:b3:75:76:a8:2a: ff:c1:17:f5:7b:23:98:ac:52:0a:b7:28:88:47:02:5c:71:0f: 3e:6b:b7:45:05:dd:3b:4e:dd:2d:37:04:a5:a5:1a:bd:33:8e: 93:9e:17:37:83:86:4e:c0:3d:e8:cc:ea:e3:18:28:11:38:73: 3a:93:cf:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jdZL9KU9UXoogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODE5OTk2ODQtYWU0Mi00MTM5LTk5NGUtZTE1MGI3MDMyNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5SqduODLLen8gqTDf+1DGMgciaR8v/1SNS1 qOkNC0MKp0LXgWUUzFP6EwWiPQELKRxW9Wco1IuhUhc8v7Rp+Qd+eB2rpOeOUYKf OMFk9jzp87PB/0R6vpGImWfWw7mpOFdPHI+uTOoJCDSAOIc3ZW6SjRhNogZszkoR 0nPqWpCmgTQ3EeJ8mpb76Q4mGPFEbBHRLHtc3FlWOWYN+65I9J5CQpPXF4jM8SI1 +0ktcJuYbO8wTeDpruQ1/+wrUmCAXvN8CwYWcVRYAS+sqRqtzG4Y1lvZGeUEoNqY PbwSEff334ih03JXJj4Nh6lWDjntQPhb1IsX1uk2XZ0OLKSrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr+Im+RtRS/1/d/QqIAIjOMHfcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvODMxY2Y3YmEtNTZhYS0z ODA3LWI2ZWYtODcyZDAwZjZhMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9sUwhJxvqxEJKqK8GbclXnp0NY27tsQrYr8cCLJvpXP47KPHOymjJA yZ1PO2SyTRtRpyhS1onCAEgaerlebIqoNdxUqLIE7Y8sN2NXTsdhUjQHAit+eCOZ +7y6hcoTlOdpdBd/ckr3M1t+UT7Rst2KTL0/zj/elDHHiPqM/eY7xMmuxcs8AbOo NO7YAlYZOpmsyxVf56sfVSB76c4Dnv6spPyQ08eqeEwyk4j3aGXmV+O+jfmGxbn3 SgF6HHo6ZcSzdXaoKv/BF/V7I5isUgq3KIhHAlxxDz5rt0UF3TtO3S03BKWlGr0z jpOeFzeDhk7APejM6uMYKBE4czqTz/k= -----END CERTIFICATE-----Generated at Sun Apr 6 08:25:41 2025 by rpki-client