$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: fBxtyNyqtCWVPLe4qF4zpeMERiTxjQaNxwCd54jbDpA= Subject key identifier: 7E:C9:BB:67:B7:0C:C9:55:EF:D6:17:60:1B:7D:DD:7A:77:47:13:86 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F432858489340ACFBC750BF11D19A0CC0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ac:fb:c7:50:bf:11:d1:9a:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=8f60c6b6-65b5-4b85-bc84-b38755e04785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:12:dc:ba:60:e2:97:a6:a3:07:16:ea:46: dc:83:a0:93:14:94:d2:7e:99:85:5f:91:76:ed:a6: 40:06:d8:55:eb:65:50:ab:41:fb:34:62:de:b6:4a: 22:3a:9d:58:98:de:aa:f2:26:df:f9:60:dc:dd:70: 9d:06:b4:f7:1e:c9:f5:25:dd:61:1c:b2:7c:47:6e: fe:10:55:37:62:63:6b:b6:71:66:6a:e7:5c:5c:e8: f6:21:6c:46:65:64:c3:89:50:81:7b:ca:b4:ec:09: f8:3c:68:7d:98:80:bc:4b:32:93:7f:21:4d:94:57: a5:1a:f5:68:db:97:73:d2:fe:4d:93:a2:6d:b6:f3: a9:33:37:c0:34:c8:d5:83:b9:80:bd:a7:31:ed:4a: 0e:10:db:11:ec:9c:a4:07:2c:e4:59:37:52:9e:62: ec:42:ee:04:2d:d8:76:df:0d:2d:ac:24:f2:f6:9d: 82:a9:4e:e1:5f:d3:4c:f1:83:41:af:2b:a7:d2:21: 66:14:f9:62:a7:e0:e1:0d:3f:be:39:3c:b4:f0:b4: 1a:f4:43:d6:9f:16:db:6d:73:76:b1:d8:9b:16:8e: 5e:89:16:fe:8d:14:8e:3c:42:ee:af:77:98:fc:27: 5f:9e:1a:50:6f:d8:a1:7b:12:c7:9b:94:fc:14:8e: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:BB:67:B7:0C:C9:55:EF:D6:17:60:1B:7D:DD:7A:77:47:13:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b1:e3:3a:9f:a6:20:a1:b2:0a:4b:43:cf:78:d2:d1:fa:dc: ef:93:1e:5b:9e:52:b2:3d:57:2e:b0:3f:9a:22:85:a5:b8:b4: 44:da:96:44:d8:bb:f6:ba:ee:34:04:93:7e:fe:2e:4e:c1:b8: 8b:9c:66:48:84:ac:e5:b0:69:a1:db:dc:30:64:a3:e7:ed:11: 36:c7:d8:c9:fc:80:2e:23:12:35:00:a1:35:bb:a8:e7:ee:8f: af:0e:e0:c4:e1:6f:4f:ba:21:b0:fc:41:92:c0:6e:18:98:27: 2b:be:5c:e4:f0:86:fa:47:29:f3:07:d5:ad:ae:91:39:60:54: a3:6e:04:fb:c7:65:b9:4f:99:5e:3f:5c:8c:56:be:ec:74:b5: 20:6c:37:33:95:ba:95:09:e2:61:1f:80:35:cb:b6:4f:9d:63: ab:39:9f:43:ff:f9:a1:f0:cf:3c:0a:79:ef:35:97:74:b4:9c: 9c:3a:39:ba:60:1a:31:6e:82:7e:ec:b2:e4:b9:ed:93:07:4d: b1:af:99:ac:6f:12:ee:78:e1:28:dd:17:34:b5:4c:bd:7d:29: f0:64:26:1e:4b:c8:9f:8b:87:83:6d:ed:8d:9e:2a:aa:2c:42: 97:5b:64:de:73:0a:f6:f0:60:a9:b4:dc:04:fe:69:b1:1d:dd: 58:16:64:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKz7x1C/EdGaDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk OGY2MGM2YjYtNjViNS00Yjg1LWJjODQtYjM4NzU1ZTA0Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCwS3Lpg4pemowcW6kbcg6CTFJTSfpmFX5F2 7aZABthV62VQq0H7NGLetkoiOp1YmN6q8ibf+WDc3XCdBrT3Hsn1Jd1hHLJ8R27+ EFU3YmNrtnFmaudcXOj2IWxGZWTDiVCBe8q07An4PGh9mIC8SzKTfyFNlFelGvVo 25dz0v5Nk6JttvOpMzfANMjVg7mAvacx7UoOENsR7JykByzkWTdSnmLsQu4ELdh2 3w0trCTy9p2CqU7hX9NM8YNBryun0iFmFPlip+DhDT++OTy08LQa9EPWnxbbbXN2 sdibFo5eiRb+jRSOPELur3eY/CdfnhpQb9ihexLHm5T8FI4+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7Ju2e3DMlV79YXYBt93Xp3RxOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFex4zqfpiChsgpLQ8940tH63O+THlueUrI9Vy6wP5oihaW4tETalkTY u/a67jQEk37+Lk7BuIucZkiErOWwaaHb3DBko+ftETbH2Mn8gC4jEjUAoTW7qOfu j68O4MThb0+6IbD8QZLAbhiYJyu+XOTwhvpHKfMH1a2ukTlgVKNuBPvHZblPmV4/ XIxWvux0tSBsNzOVupUJ4mEfgDXLtk+dY6s5n0P/+aHwzzwKee81l3S0nJw6Obpg GjFugn7ssuS57ZMHTbGvmaxvEu544SjdFzS1TL19KfBkJh5LyJ+Lh4Nt7Y2eKqos QpdbZN5zCvbwYKm03AT+abEd3VgWZNk= -----END CERTIFICATE-----Generated at Wed Mar 26 14:17:48 2025 by rpki-client