$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa File: 91aaccaf-f050-3f69-9e66-2f8cb643c659.roa (raw, json) Hash identifier: 67uOWmj9kuG/IaOJP+NnA+JxccYbA9xpHN711sd+FMU= Subject key identifier: B9:44:30:13:C1:38:7B:69:EB:B5:C8:BA:67:CD:43:6A:77:18:0E:C0 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285849A61F42E63EF914CDCD8C3480 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 3561 IP address blocks: 208.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:e6:3e:f9:14:cd:cd:8c:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=d58a5f17-147f-43b6-b9f7-1af9854b4475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:76:9e:6b:fb:99:4b:60:63:52:c9:5c:e8: a7:44:3d:dd:60:63:73:e1:7c:d5:fe:6c:c5:68:f5: 15:46:2c:55:74:51:5b:b1:76:1f:64:c2:f0:5f:c5: 1e:41:db:b1:28:24:a4:51:de:aa:d8:29:5c:21:69: 38:b7:ca:78:aa:81:71:65:83:bb:9c:c7:58:c2:5c: c4:0d:c7:1e:df:5d:ad:a6:65:bc:e3:5d:34:4a:ae: 13:7a:36:21:e0:b0:74:a9:72:93:b1:37:cd:23:ea: ba:7c:84:a8:53:cb:03:c1:ea:51:4e:fe:37:7e:79: 99:ea:1b:c6:29:53:39:91:b7:0d:a7:f2:e6:3e:ee: 3b:23:70:6d:4b:14:32:f3:c7:bd:53:7e:62:32:c2: c3:db:27:c8:89:f9:25:3e:be:a1:1f:c6:d0:9d:25: f1:04:03:c5:a6:0d:4e:a7:2c:0f:c5:70:3b:bf:a0: 14:eb:e1:61:8d:57:53:98:ca:72:3c:c5:34:7a:cb: 19:fc:d6:51:b6:6a:91:0c:2c:95:92:6c:37:50:9a: a1:6b:4f:8b:21:1f:77:c1:14:bd:95:21:ac:9d:d6: 8d:c6:cf:5e:cb:a3:30:4c:34:86:2d:ad:45:04:1f: 3d:32:f9:09:81:67:d2:46:4c:5b:cb:93:8e:9e:62: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:44:30:13:C1:38:7B:69:EB:B5:C8:BA:67:CD:43:6A:77:18:0E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d2:cf:a4:65:3d:c5:5e:de:47:73:c6:df:e0:ae:3f:8f:b9: 39:c9:cc:ed:d7:c0:57:14:46:1b:53:b2:01:88:04:f6:a8:6f: d4:6a:09:7e:df:4c:83:1f:6e:25:7a:7a:b1:cd:ff:23:2f:26: 21:3f:27:07:f0:b6:93:69:42:c3:f8:c9:60:9e:fd:68:ad:69: cb:43:c3:ca:51:5b:ff:45:e4:e5:b8:ee:a7:3a:47:f7:03:eb: 6b:22:09:74:d0:17:58:b0:03:4f:fd:17:7b:4d:6a:78:08:50: 41:38:06:1f:05:2e:77:62:7b:e9:7b:b9:6c:90:f1:e3:e5:b6: cb:a3:d3:4e:01:8b:52:b5:69:fd:7e:54:e3:c3:93:35:1c:6d: c9:20:d6:7f:fa:fd:b9:4d:af:1a:e8:3e:f4:b5:f9:5e:c0:79: 5a:0a:52:63:ed:24:43:ac:f2:cb:10:ca:c2:2e:e3:88:c5:36: a7:e8:e3:16:8a:07:1a:2f:eb:c1:0f:ee:10:49:2e:02:01:fd: 52:9b:01:c6:a1:3f:b6:47:51:7f:92:91:eb:96:14:7c:86:a5: 40:87:eb:4a:6d:f5:80:7c:13:bc:64:9a:e3:8c:69:78:b1:5c: 83:a2:a7:13:3e:df:35:81:e3:67:b3:aa:4e:ed:c8:a1:68:4b: 64:ac:07:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0LmPvkUzc2MNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZDU4YTVmMTctMTQ3Zi00M2I2LWI5ZjctMWFmOTg1NGI0NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlch2nmv7mUtgY1LJXOinRD3dYGNz4XzV/mzF aPUVRixVdFFbsXYfZMLwX8UeQduxKCSkUd6q2ClcIWk4t8p4qoFxZYO7nMdYwlzE Dcce312tpmW84100Sq4TejYh4LB0qXKTsTfNI+q6fISoU8sDwepRTv43fnmZ6hvG KVM5kbcNp/LmPu47I3BtSxQy88e9U35iMsLD2yfIifklPr6hH8bQnSXxBAPFpg1O pywPxXA7v6AU6+FhjVdTmMpyPMU0essZ/NZRtmqRDCyVkmw3UJqha0+LIR93wRS9 lSGsndaNxs9ey6MwTDSGLa1FBB89MvkJgWfSRkxby5OOnmI7pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlEMBPBOHtp67XIumfNQ2p3GA7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTFhYWNjYWYtZjA1MC0z ZjY5LTllNjYtMmY4Y2I2NDNjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0J/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjSz6RlPcVe3kdzxt/grj+PuTnJzO3XwFcURhtTsgGIBPaob9RqCX7f TIMfbiV6erHN/yMvJiE/JwfwtpNpQsP4yWCe/WitactDw8pRW/9F5OW47qc6R/cD 62siCXTQF1iwA0/9F3tNangIUEE4Bh8FLndie+l7uWyQ8ePltsuj004Bi1K1af1+ VOPDkzUcbckg1n/6/blNrxroPvS1+V7AeVoKUmPtJEOs8ssQysIu44jFNqfo4xaK Bxov68EP7hBJLgIB/VKbAcahP7ZHUX+SkeuWFHyGpUCH60pt9YB8E7xkmuOMaXix XIOipxM+3zWB42ezqk7tyKFoS2SsB+c= -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:26 2025 by rpki-client