$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa File: e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa (raw, json) Hash identifier: jY+nndfeFZl4eJaaadpSZNoTl9ydNNGNBYWoxXOoAt0= Subject key identifier: 60:CF:4D:5F:BC:21:18:70:A9:D0:47:A0:D9:34:82:ED:90:17:A6:1A Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285848D6410B7A123E5234871C2640 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 28753 IP address blocks: 168.91.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:7a:12:3e:52:34:87:1c:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=fb2fafd8-bc90-47b6-a88f-559c97150bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:9d:15:f0:e9:a3:ba:aa:86:43:d5:e0:7b: 01:f0:4e:69:19:a7:09:a3:8c:09:d2:51:c6:0f:39: 9a:2c:5a:38:08:05:5a:9e:f2:3f:8f:0a:54:76:0d: cf:1d:ce:21:ab:c4:c2:4d:7a:d3:6c:6e:12:0c:4b: 3e:23:1d:32:ba:20:d8:47:61:98:79:4f:b8:50:1e: 74:4b:32:e6:78:17:44:58:78:f4:3b:38:8c:c4:5e: 28:52:15:7c:31:58:ff:9a:27:36:84:0d:36:76:71: 1a:e0:d3:a6:fa:72:62:3e:f0:17:20:46:c1:90:96: 9e:6c:4b:c2:9e:da:49:73:44:e1:0c:35:cf:13:da: c7:52:4f:36:a3:c2:ac:5e:2c:c4:90:5c:1d:f5:f0: 9d:28:10:2f:2a:f3:3b:c2:79:44:ad:96:10:0f:24: 14:19:57:09:a7:36:76:c8:82:93:3b:49:3c:46:83: ba:3a:82:89:5d:57:ec:c5:2e:7d:a0:ab:2e:81:74: 31:31:3e:21:ec:22:e1:50:62:e0:06:dc:60:97:0b: ae:84:1b:23:a1:5e:34:d0:65:7b:dc:4c:b0:6f:ca: 85:ce:3b:ca:c4:e6:2e:b2:2d:40:e2:be:10:22:0a: 21:8c:a5:34:0c:04:af:6f:6b:c5:a1:a4:3b:1a:71: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CF:4D:5F:BC:21:18:70:A9:D0:47:A0:D9:34:82:ED:90:17:A6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/e3175801-b86f-3e8a-b8d0-ca8c4c92c804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:85:6e:bc:17:c1:f4:df:86:89:4c:8d:03:31:ce:73:02:b7: 74:94:ff:01:08:90:00:0a:99:89:61:99:e8:ab:95:aa:1e:55: ac:a3:40:72:47:ad:e5:22:4b:45:bb:b8:4a:50:cb:d1:04:3c: 67:8d:09:cb:c3:5c:e3:cb:28:dc:bf:ba:d2:44:40:70:b1:26: 00:a4:51:63:09:9a:51:a3:57:c9:34:04:b5:64:0c:81:bd:39: 2a:8a:68:11:3c:ed:f6:c9:18:29:4e:7e:11:7b:8b:f5:f7:f3: fd:14:18:d6:e3:e6:80:de:51:52:96:cf:d7:b3:f3:be:94:d9: 66:65:a4:8d:87:93:70:e5:de:93:25:72:a2:e9:d9:b9:38:1b: 7b:65:e9:30:fe:54:51:ab:95:ed:72:df:ac:20:98:07:fc:3d: 69:d9:59:be:62:8b:1e:e3:c2:26:09:51:c7:47:84:7a:e8:75: 23:01:64:37:b4:b9:52:bf:26:0d:c7:fd:a9:ea:c9:01:24:31: 7f:73:09:db:ba:53:e9:ba:3b:62:ae:fe:34:ea:8e:c8:ae:07: 29:fc:bf:2e:2c:20:cc:7b:83:71:00:d2:ad:f3:22:c3:b0:04: 59:3c:51:c7:14:65:99:dc:90:89:78:a9:f6:6d:3c:ea:34:31: cb:85:01:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQt6Ej5SNIccJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmIyZmFmZDgtYmM5MC00N2I2LWE4OGYtNTU5Yzk3MTUwYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ydFfDpo7qqhkPV4HsB8E5pGacJo4wJ0lHG DzmaLFo4CAVanvI/jwpUdg3PHc4hq8TCTXrTbG4SDEs+Ix0yuiDYR2GYeU+4UB50 SzLmeBdEWHj0OziMxF4oUhV8MVj/mic2hA02dnEa4NOm+nJiPvAXIEbBkJaebEvC ntpJc0ThDDXPE9rHUk82o8KsXizEkFwd9fCdKBAvKvM7wnlErZYQDyQUGVcJpzZ2 yIKTO0k8RoO6OoKJXVfsxS59oKsugXQxMT4h7CLhUGLgBtxglwuuhBsjoV400GV7 3Eywb8qFzjvKxOYusi1A4r4QIgohjKU0DASvb2vFoaQ7GnHnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDPTV+8IRhwqdBHoNk0gu2QF6YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZTMxNzU4MDEtYjg2Zi0z ZThhLWI4ZDAtY2E4YzRjOTJjODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2FbrwXwfTfholMjQMxznMCt3SU/wEIkAAKmYlhmeirlaoeVayjQHJH reUiS0W7uEpQy9EEPGeNCcvDXOPLKNy/utJEQHCxJgCkUWMJmlGjV8k0BLVkDIG9 OSqKaBE87fbJGClOfhF7i/X38/0UGNbj5oDeUVKWz9ez876U2WZlpI2Hk3Dl3pMl cqLp2bk4G3tl6TD+VFGrle1y36wgmAf8PWnZWb5iix7jwiYJUcdHhHrodSMBZDe0 uVK/Jg3H/anqyQEkMX9zCdu6U+m6O2Ku/jTqjsiuByn8vy4sIMx7g3EA0q3zIsOw BFk8UccUZZnckIl4qfZtPOo0McuFAYw= -----END CERTIFICATE-----Generated at Sun Apr 6 08:24:40 2025 by rpki-client