$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa File: 91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa (raw, json) Hash identifier: dnEcEdwf4HFbgw0htnMXcXygGtADySauKYj/YzMgQBk= Subject key identifier: 14:71:30:80:8E:54:69:CC:26:97:D7:A9:F6:0B:2F:7B:52:9E:9C:D0 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A2ABADEF0ABA57F0DC6D49180 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:de:f0:ab:a5:7f:0d:c6:d4:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=8344c373-9783-4cdf-acd5-56d23d8c253c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:cc:94:04:bb:0d:44:97:04:29:a1:25:01: b3:d6:5c:e2:ae:c0:01:c7:2e:a2:d4:ed:9d:65:7d: 59:8d:cd:7a:5e:52:cd:85:93:62:b2:ac:68:e5:df: 45:81:4e:30:40:68:63:10:d0:c4:ff:10:b3:e2:53: 87:fa:bb:dd:19:f9:af:7c:b9:57:9d:43:63:28:7f: d4:8d:bf:f0:b4:33:95:3d:47:28:a7:4b:56:c7:73: 2a:81:6e:c9:3b:ac:0c:4b:f0:d9:9e:68:f1:40:46: 9b:9c:31:2e:9a:dc:45:ad:0f:eb:4b:fa:93:3c:1a: 3f:70:1d:41:16:c6:ec:68:ef:ce:60:22:da:73:1b: 81:c4:1b:ec:bd:da:71:a3:1c:be:3f:1e:1d:1c:ed: f4:12:cf:8b:e5:ca:bd:2e:04:1c:12:e4:3c:3f:25: 61:4f:18:e1:fe:9a:ed:0b:34:31:c0:99:2c:86:ff: 00:73:53:a8:16:b9:31:14:2c:47:38:5e:68:dc:80: 7b:e3:de:7e:d2:74:a3:e0:8e:5d:92:8e:2a:41:05: d6:ae:f7:a5:95:fc:06:62:71:65:37:bd:6d:03:bf: 0f:5f:89:39:9a:25:86:aa:03:a8:33:22:12:03:26: 41:ae:87:d6:6a:e5:60:39:85:fb:cd:ab:55:9d:68: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:71:30:80:8E:54:69:CC:26:97:D7:A9:F6:0B:2F:7B:52:9E:9C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1b:b0:c7:3e:66:8a:e9:7a:ac:f2:08:f2:25:ea:d6:37:93: 02:c0:a6:03:98:dc:77:fb:26:1c:bd:a0:1b:e0:06:ae:59:88: 2a:77:22:1a:92:0b:2e:ef:15:e1:eb:4d:9d:27:18:81:25:ea: f1:64:cc:ca:04:9e:9b:4d:e4:13:c4:10:2e:b8:dd:bf:17:f4: b3:0b:77:0b:ca:8c:ec:9d:a9:02:67:15:49:84:18:72:90:32: 33:b5:7b:e6:91:4d:2e:ad:4b:3a:f5:7d:e0:41:0f:8d:db:dc: 2a:e5:72:2a:3a:b0:11:6c:97:05:73:4e:90:d1:66:d8:c5:62: fb:e4:0a:7b:53:d2:82:06:9a:92:02:a4:bd:9d:35:9e:62:c1: f3:40:ca:07:d4:7a:e9:f9:fd:5c:2d:30:82:b3:c5:0a:74:32: b8:cd:2c:8b:e0:a0:63:71:9f:63:2d:f9:79:77:52:08:70:01: b1:da:8c:45:3c:4f:eb:37:04:3c:a9:25:ca:99:38:31:d7:d9: 35:b5:33:93:19:6e:8d:56:4a:7e:3f:fc:89:55:2e:4d:22:74: 71:e3:ae:c3:08:d8:ff:84:82:36:7c:c6:c7:73:7c:84:a3:29: 91:28:b5:a7:ad:d7:2b:e4:19:cc:c0:a7:ce:15:ce:5e:56:92: 01:a3:25:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut7wq6V/DcbUkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ODM0NGMzNzMtOTc4My00Y2RmLWFjZDUtNTZkMjNkOGMyNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72vMlAS7DUSXBCmhJQGz1lzirsABxy6i1O2d ZX1Zjc16XlLNhZNisqxo5d9FgU4wQGhjENDE/xCz4lOH+rvdGfmvfLlXnUNjKH/U jb/wtDOVPUcop0tWx3MqgW7JO6wMS/DZnmjxQEabnDEumtxFrQ/rS/qTPBo/cB1B FsbsaO/OYCLacxuBxBvsvdpxoxy+Px4dHO30Es+L5cq9LgQcEuQ8PyVhTxjh/prt CzQxwJkshv8Ac1OoFrkxFCxHOF5o3IB7495+0nSj4I5dko4qQQXWrvellfwGYnFl N71tA78PX4k5miWGqgOoMyISAyZBrofWauVgOYX7zatVnWhBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRxMICOVGnMJpfXqfYLL3tSnpzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTFmYmFjYzctNDFhNC0z YjViLTgzOWItNDRhMGM1ZTAzM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4bsMc+ZorpeqzyCPIl6tY3kwLApgOY3Hf7Jhy9oBvgBq5ZiCp3IhqS Cy7vFeHrTZ0nGIEl6vFkzMoEnptN5BPEEC643b8X9LMLdwvKjOydqQJnFUmEGHKQ MjO1e+aRTS6tSzr1feBBD43b3Crlcio6sBFslwVzTpDRZtjFYvvkCntT0oIGmpIC pL2dNZ5iwfNAygfUeun5/VwtMIKzxQp0MrjNLIvgoGNxn2Mt+Xl3UghwAbHajEU8 T+s3BDypJcqZODHX2TW1M5MZbo1WSn4//IlVLk0idHHjrsMI2P+EgjZ8xsdzfISj KZEotaet1yvkGczAp84Vzl5WkgGjJZI= -----END CERTIFICATE-----Generated at Sun Jun 15 09:16:21 2025 by rpki-client