$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa File: efd98a5d-9b9d-3b51-9343-444044ca2470.roa (raw, json) Hash identifier: Y7/gtsctL/gBSHmLB0PfEXgC7IrJGMvUlDtoEenazD4= Subject key identifier: 47:2C:9C:68:65:18:D1:AE:03:0F:0B:34:29:62:AB:67:CF:21:53:95 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584902EC2E353E5B6D54B1694180 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 11426 IP address blocks: 168.91.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2e:35:3e:5b:6d:54:b1:69:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=94e1d2eb-39a3-4fad-bfce-88ac4bc98ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:12:26:f2:0e:2a:ce:a5:bd:36:c9:c0:25: 5f:3d:ea:a4:fa:21:a6:20:26:cc:34:a9:18:63:8e: 25:71:d8:38:ef:74:9d:3a:02:21:80:4f:20:1f:d1: d4:0d:e3:82:5e:f3:0a:3a:3c:d5:87:7c:68:7a:46: a5:03:df:51:3e:33:ea:ee:7f:2d:72:50:c1:cf:0d: 82:68:e3:07:35:55:76:bc:8c:a6:6d:96:bf:de:80: c2:0a:a7:14:63:e0:34:8a:f2:44:d3:8d:47:8b:a9: da:97:34:af:9a:2f:3b:fd:b1:60:18:dc:b5:4b:dc: 74:31:06:70:66:0d:2e:dc:54:cf:8c:16:c2:6d:cc: 02:5b:ea:a0:27:54:d8:80:d7:2c:86:38:03:5c:64: 23:c0:e9:a1:78:5e:7f:3a:c5:e5:bf:8f:5f:07:d9: 60:46:d1:f9:4b:02:be:8a:be:6d:48:5a:d9:f6:8f: f7:36:90:aa:9b:84:02:3d:46:3a:ef:17:c2:27:3a: a3:f9:bf:be:78:37:12:64:bf:b5:de:b3:39:aa:d4: a2:80:7c:18:35:1c:6b:3c:96:bf:37:60:41:cb:fe: a7:f9:ba:1d:19:7e:cd:64:7b:45:d6:4f:13:06:2d: b9:0f:f9:1c:83:9f:44:ce:ce:80:f7:67:ce:4e:21: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:9C:68:65:18:D1:AE:03:0F:0B:34:29:62:AB:67:CF:21:53:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:de:0e:c7:c0:a9:34:44:87:04:c1:62:b9:f0:07:0d:a7:34: de:d2:ab:ab:92:12:44:16:ce:76:db:1b:55:22:33:46:3f:5c: 9c:1a:23:40:d7:1f:d8:e1:73:57:b6:a1:ab:59:b1:82:63:01: c0:d1:c0:84:40:cc:cc:23:73:4c:82:28:d0:69:84:25:83:2a: 50:cf:1b:9a:6e:4f:7b:1f:24:be:d5:57:61:f8:6c:5a:39:a8: bc:9c:06:31:b5:54:86:4b:9e:68:09:fd:3e:4e:1e:1a:31:cb: f4:fd:2f:38:69:d4:66:ca:c0:37:41:61:7b:33:20:96:93:11: db:8e:75:2e:cd:97:e1:8a:a5:0f:4e:1f:24:21:a0:ae:f2:e7: 42:c2:e3:b7:e6:fa:b2:8a:58:6f:7a:b7:43:5d:d9:7c:be:0a: 52:31:9e:31:1d:a9:fa:43:e2:06:15:79:58:85:4f:b7:4c:c3: ae:00:c5:61:06:fb:ec:a6:b9:a3:91:0b:33:2f:22:e8:66:bc: 2d:e0:36:6c:68:01:08:7a:c9:fc:96:8d:20:09:38:63:dd:22: 74:fe:ed:a5:20:db:7f:04:d0:4d:5a:98:9c:d8:91:fa:7b:f0: 78:ec:2a:c2:9a:19:2b:b9:94:d4:16:66:60:0e:37:21:42:0b: 02:00:5e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C41PlttVLFpQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk OTRlMWQyZWItMzlhMy00ZmFkLWJmY2UtODhhYzRiYzk4YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRYSJvIOKs6lvTbJwCVfPeqk+iGmICbMNKkY Y44lcdg473SdOgIhgE8gH9HUDeOCXvMKOjzVh3xoekalA99RPjPq7n8tclDBzw2C aOMHNVV2vIymbZa/3oDCCqcUY+A0ivJE041Hi6nalzSvmi87/bFgGNy1S9x0MQZw Zg0u3FTPjBbCbcwCW+qgJ1TYgNcshjgDXGQjwOmheF5/OsXlv49fB9lgRtH5SwK+ ir5tSFrZ9o/3NpCqm4QCPUY67xfCJzqj+b++eDcSZL+13rM5qtSigHwYNRxrPJa/ N2BBy/6n+bodGX7NZHtF1k8TBi25D/kcg59Ezs6A92fOTiGoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcsnGhlGNGuAw8LNCliq2fPIVOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZWZkOThhNWQtOWI5ZC0z YjUxLTkzNDMtNDQ0MDQ0Y2EyNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAneDsfAqTREhwTBYrnwBw2nNN7Sq6uSEkQWznbbG1UiM0Y/XJwaI0DX H9jhc1e2oatZsYJjAcDRwIRAzMwjc0yCKNBphCWDKlDPG5puT3sfJL7VV2H4bFo5 qLycBjG1VIZLnmgJ/T5OHhoxy/T9Lzhp1GbKwDdBYXszIJaTEduOdS7Nl+GKpQ9O HyQhoK7y50LC47fm+rKKWG96t0Nd2Xy+ClIxnjEdqfpD4gYVeViFT7dMw64AxWEG ++ymuaORCzMvIuhmvC3gNmxoAQh6yfyWjSAJOGPdInT+7aUg238E0E1amJzYkfp7 8HjsKsKaGSu5lNQWZmAONyFCCwIAXl4= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:28 2025 by rpki-client