$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa File: 1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa (raw, json) Hash identifier: HgqZqgzlgoxGsSlVWytc0y12Vcw5qyUYbvaKrWMf1DY= Subject key identifier: DF:6D:D2:E5:E2:CF:36:35:67:66:FB:98:8B:79:23:DC:9D:B1:83:6E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B6C6E00F7A76FCAEF0C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 173.244.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b6:c6:e0:0f:7a:76:fc:ae:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=81f0cdd2-7d49-49be-bef0-cd69cbf98859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:ec:97:0a:9f:37:ad:ea:6a:09:82:7c:ba: 55:5a:37:fa:e2:b0:c7:30:d0:76:11:68:3d:dd:9a: db:fd:fb:a3:d6:7a:f7:fe:f1:2c:c4:0a:20:2b:3e: ad:15:8d:ef:e0:5f:c4:4a:f3:23:c8:eb:17:7d:b5: f0:be:3f:99:da:0e:68:e7:b5:45:2e:48:48:e5:0e: b9:8c:a7:e2:ed:49:a4:ec:c0:7d:74:63:ee:7f:50: 92:b6:85:54:e4:d5:ee:b5:31:5f:bc:d3:b1:b2:09: f9:fd:7e:39:df:a5:88:68:8e:64:5a:0c:fb:f7:2f: c1:c0:df:c4:53:eb:b0:39:83:84:86:d5:4b:0e:46: 5e:5b:ac:12:37:57:42:a9:40:45:b6:ef:ef:8c:d2: 79:cf:73:a7:d1:be:1c:d9:83:61:14:77:c9:ec:6f: fd:1d:1a:a3:c8:dd:cd:36:d6:d4:7b:5e:36:b2:8b: 91:5c:c5:b4:e3:64:a8:11:df:6c:ac:b1:b2:96:b0: 36:52:31:64:0d:71:a7:39:c2:cf:66:5a:b8:0d:45: 77:d8:1a:b2:c4:22:fd:4e:5c:74:a0:d4:15:e7:76: 0f:c3:fb:a2:c7:1d:9d:da:22:87:93:7c:c3:6c:cd: d2:2e:d5:b3:4d:fe:92:8d:c9:60:a1:2b:f1:81:4b: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6D:D2:E5:E2:CF:36:35:67:66:FB:98:8B:79:23:DC:9D:B1:83:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8e:24:51:2c:68:6c:f2:bd:26:8a:0d:93:51:b0:a9:c5:33: 14:ac:69:93:a1:6b:e7:65:71:50:cf:14:0f:85:eb:59:52:a7: ab:93:2b:09:00:0b:00:29:90:59:fb:88:2f:17:f7:d6:c0:b9: 37:fc:0a:74:1d:91:bd:7a:7c:19:7d:05:6b:18:99:3d:a7:65: 9e:53:5c:70:6a:b7:6f:99:49:06:6c:1b:a7:7a:2f:9d:03:23: 28:7c:80:09:37:f5:a2:48:b5:6a:ec:f0:b2:09:6e:62:3b:14: 60:bb:ff:96:44:ef:75:4f:df:e7:a2:2d:6c:f7:36:2b:c7:02: e2:7a:4d:00:93:e3:bc:18:7e:3d:0e:21:d2:08:d6:19:5b:3d: a7:bb:74:62:1c:ee:38:a8:31:03:0e:4e:7a:16:fd:ac:1e:34: 73:6b:5b:0d:d7:ec:55:85:d0:db:c8:6f:c7:f9:f8:e7:93:2b: f3:18:90:b7:3a:04:9a:25:89:7c:82:67:46:7e:d2:f6:27:bd: db:32:97:7a:78:73:5b:be:2b:ec:5d:3f:05:ee:4b:b5:62:c5: 93:09:04:b4:2d:de:0a:0e:8c:ff:4f:f6:46:8c:1c:0b:f3:6a: ac:c7:8a:3e:b5:a4:a5:bd:e6:37:b9:2d:dc:c2:9d:02:b7:84: d5:0f:4d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybbG4A96dvyu8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ODFmMGNkZDItN2Q0OS00OWJlLWJlZjAtY2Q2OWNiZjk4ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfjslwqfN63qagmCfLpVWjf64rDHMNB2EWg9 3Zrb/fuj1nr3/vEsxAogKz6tFY3v4F/ESvMjyOsXfbXwvj+Z2g5o57VFLkhI5Q65 jKfi7Umk7MB9dGPuf1CStoVU5NXutTFfvNOxsgn5/X4536WIaI5kWgz79y/BwN/E U+uwOYOEhtVLDkZeW6wSN1dCqUBFtu/vjNJ5z3On0b4c2YNhFHfJ7G/9HRqjyN3N NtbUe142souRXMW042SoEd9srLGylrA2UjFkDXGnOcLPZlq4DUV32BqyxCL9Tlx0 oNQV53YPw/uixx2d2iKHk3zDbM3SLtWzTf6SjclgoSvxgUtOowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9t0uXizzY1Z2b7mIt5I9ydsYNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWZjZTVjNTgtOTcwMS0z MzdhLWJhMWItOGY3N2ZmMTdkMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOOJFEsaGzyvSaKDZNRsKnFMxSsaZOha+dlcVDPFA+F61lSp6uTKwkA CwApkFn7iC8X99bAuTf8CnQdkb16fBl9BWsYmT2nZZ5TXHBqt2+ZSQZsG6d6L50D Iyh8gAk39aJItWrs8LIJbmI7FGC7/5ZE73VP3+eiLWz3NivHAuJ6TQCT47wYfj0O IdII1hlbPae7dGIc7jioMQMOTnoW/aweNHNrWw3X7FWF0NvIb8f5+OeTK/MYkLc6 BJoliXyCZ0Z+0vYnvdsyl3p4c1u+K+xdPwXuS7VixZMJBLQt3goOjP9P9kaMHAvz aqzHij61pKW95je5LdzCnQK3hNUPTSU= -----END CERTIFICATE-----Generated at Tue Jun 17 01:12:39 2025 by rpki-client