$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa File: 91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa (raw, json) Hash identifier: S8BhgDwj54pKLY5dVT96dNjMt/scw+OQW1XkXixBjfs= Subject key identifier: 06:31:48:88:FB:14:5E:E5:42:30:C1:3A:C1:0E:3C:81:3E:19:1C:15 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F432858494B63FEFAFD32B2432E8577C0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fe:fa:fd:32:b2:43:2e:85:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8d530f0e-85a9-46b8-9fc0-2f400fec586b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:15:bb:aa:98:70:c3:d6:7c:dd:a7:4f:5a: c5:35:f6:ff:46:b7:76:a9:69:91:15:db:18:a4:20: e5:75:d5:cb:31:26:31:8f:4c:c0:bc:cc:17:e0:21: ea:02:fd:82:36:8e:77:de:5f:15:c4:12:64:54:46: fc:9c:e3:68:df:4c:ac:60:54:16:30:2b:0d:d5:7a: 9f:15:90:58:36:2e:0a:e2:9f:cf:fa:d7:72:a3:93: 9e:c6:0c:54:ac:64:57:bb:b2:af:e7:93:f8:c5:5c: f2:11:e2:4e:6c:87:18:9e:0f:fc:f1:d0:64:d2:8b: f0:c8:64:be:cb:53:f1:37:d2:13:c5:08:61:fa:3e: 6e:2d:ca:33:ba:86:ed:d1:92:37:af:83:3a:da:e8: fc:a8:e9:3e:08:ef:62:72:33:90:0e:c4:84:e4:60: 35:ed:62:a0:83:19:f6:0d:c2:d0:9e:3c:3c:85:63: 66:a4:7c:49:ec:34:36:57:1d:43:4a:ea:2e:ef:7d: 2f:b4:ff:53:1a:68:1e:c0:bc:68:31:44:5f:e4:6c: c5:0a:1c:97:20:57:61:4c:fa:cb:c0:7e:d4:16:99: 20:21:c0:3c:54:a2:ac:12:99:2e:06:d7:d0:55:fb: 53:90:65:2a:c5:8c:0d:c6:58:6b:7c:9b:65:66:2a: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:31:48:88:FB:14:5E:E5:42:30:C1:3A:C1:0E:3C:81:3E:19:1C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b6:0f:a6:2b:50:b6:95:2a:9e:4b:ae:e1:2e:fa:8f:f4:0d: 20:15:21:cf:1f:f0:91:76:aa:02:a4:30:59:61:cb:eb:62:23: 41:6a:57:df:c4:a3:14:f6:dd:78:80:81:97:56:df:25:6b:5d: 16:7c:b7:46:b3:94:9f:cf:05:92:91:65:05:47:4c:7d:2f:df: 1f:26:67:81:19:89:71:5c:f8:6a:9d:2b:ed:ff:6d:3f:2b:f6: ad:67:bc:f3:6c:b7:89:95:60:bd:5b:1f:dc:ca:8f:c9:89:9e: a7:22:6b:db:42:d9:59:17:f5:7e:f0:ef:c0:96:ba:29:e0:6e: 39:18:86:6f:11:ee:90:61:9f:cc:22:6c:39:e9:30:f4:f5:f0: fe:08:f3:5e:7c:49:55:38:d7:9a:f9:1c:9b:2b:ec:14:82:42: 68:c4:6f:a7:23:e9:7b:b4:8f:0d:a7:5c:43:8f:52:0f:82:c7: bb:7e:18:4a:07:f2:2b:a9:27:0c:f2:af:58:42:92:b7:69:2d: 78:61:d7:03:bf:f0:b1:25:29:39:3f:47:31:6f:49:66:2b:02: 47:9d:d6:b1:6a:2a:d6:50:d1:b9:47:13:3d:9b:22:32:37:ba: d4:96:3d:51:7b:d8:63:3e:3c:64:c4:e3:ff:fa:0a:f5:42:0c: 59:cc:82:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/76/TKyQy6Fd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OGQ1MzBmMGUtODVhOS00NmI4LTlmYzAtMmY0MDBmZWM1ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhgVu6qYcMPWfN2nT1rFNfb/Rrd2qWmRFdsY pCDlddXLMSYxj0zAvMwX4CHqAv2CNo533l8VxBJkVEb8nONo30ysYFQWMCsN1Xqf FZBYNi4K4p/P+tdyo5OexgxUrGRXu7Kv55P4xVzyEeJObIcYng/88dBk0ovwyGS+ y1PxN9ITxQhh+j5uLcozuobt0ZI3r4M62uj8qOk+CO9icjOQDsSE5GA17WKggxn2 DcLQnjw8hWNmpHxJ7DQ2Vx1DSuou730vtP9TGmgewLxoMURf5GzFChyXIFdhTPrL wH7UFpkgIcA8VKKsEpkuBtfQVftTkGUqxYwNxlhrfJtlZioJUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYxSIj7FF7lQjDBOsEOPIE+GRwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTFmYmFjYzctNDFhNC0z YjViLTgzOWItNDRhMGM1ZTAzM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu2D6YrULaVKp5LruEu+o/0DSAVIc8f8JF2qgKkMFlhy+tiI0FqV9/E oxT23XiAgZdW3yVrXRZ8t0azlJ/PBZKRZQVHTH0v3x8mZ4EZiXFc+GqdK+3/bT8r 9q1nvPNst4mVYL1bH9zKj8mJnqcia9tC2VkX9X7w78CWuingbjkYhm8R7pBhn8wi bDnpMPT18P4I8158SVU415r5HJsr7BSCQmjEb6cj6Xu0jw2nXEOPUg+Cx7t+GEoH 8iupJwzyr1hCkrdpLXhh1wO/8LElKTk/RzFvSWYrAked1rFqKtZQ0blHEz2bIjI3 utSWPVF72GM+PGTE4//6CvVCDFnMgro= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:19 2025 by rpki-client