$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa File: 29b0a77c-0492-339d-aa9c-b106f0acf458.roa (raw, json) Hash identifier: 6I48qmIdX5x59TNqknZFtRsLa7T7FQEvRCRwQ9/C64c= Subject key identifier: 03:80:26:45:8A:93:FB:62:E7:74:A9:87:AA:F3:16:60:89:C5:C1:BF Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285849849EF3905A0D0D7FAFE74840 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 15164 IP address blocks: 138.199.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f3:90:5a:0d:0d:7f:af:e7:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=32b4e0c5-8ec6-4e4f-9976-f2ab03e53b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1c:4e:f3:5b:de:0c:af:6b:ce:56:9c:b0:3d: d5:b7:20:e4:b8:13:a0:8a:87:e4:7a:64:32:3e:ee: e2:e2:ea:1f:fd:73:c5:d7:cf:19:4e:e0:ef:4f:58: b2:f6:ee:f0:7d:a2:52:3b:42:a2:2c:e9:7f:b0:a5: 39:fe:e2:61:f1:21:6a:1e:6b:71:b9:6a:dc:46:af: cc:fa:f1:c2:ef:c3:2e:e3:64:84:79:1c:ee:aa:c1: 90:c3:05:68:e9:19:d5:bf:ca:c7:95:ea:15:0b:5a: 5e:c5:c9:cd:b7:00:9d:4b:16:aa:40:40:50:5f:ea: 44:06:d5:94:12:10:a3:12:22:88:5d:99:a0:f2:3c: ef:f2:a2:22:9f:07:2e:b0:eb:83:2b:c3:20:5f:0c: a2:b2:84:76:d9:d2:6f:8c:34:83:8c:26:9c:0d:90: b7:6f:7a:b7:6e:8b:5a:84:e5:0f:6f:72:35:ae:f0: e9:60:20:da:8f:f2:08:d8:6c:73:aa:7a:0e:96:d1: 9e:4e:94:ee:97:6f:7a:59:0b:56:1b:ab:07:6b:aa: f4:83:32:8d:0f:e7:da:b4:67:e6:73:0e:36:87:35: 3b:bd:8f:c5:92:08:1b:e0:62:4c:21:5d:7e:c3:56: b3:8c:3a:3c:ce:2f:ae:ea:35:de:ea:1e:aa:aa:47: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:80:26:45:8A:93:FB:62:E7:74:A9:87:AA:F3:16:60:89:C5:C1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fd:55:d9:15:73:14:3d:78:6d:5a:84:c0:36:4d:a7:9a:48: b5:9a:7f:54:54:38:36:1b:92:94:2e:b5:5c:f5:86:74:f4:9e: 68:59:da:13:28:b4:b0:09:31:f2:d8:6d:98:b5:cb:ab:45:56: 1e:0a:5a:0b:63:3a:ee:73:75:a7:1f:f3:cf:64:57:a2:31:d9: 65:33:18:8d:07:6c:b5:6d:ce:74:57:41:e3:90:6a:08:01:a9: ed:99:6a:68:56:5c:ff:07:53:dc:80:5e:13:4e:70:7c:a2:85: 73:0f:88:d4:66:e9:ea:c4:04:6f:0a:12:9f:8c:45:7b:1e:ff: ee:9c:d7:4a:a4:61:95:b9:fb:4a:7c:01:70:f7:b7:6a:1b:21: 94:65:ec:45:a7:27:39:3a:82:e7:21:85:11:9d:6d:67:28:c3: 5f:ca:22:09:d9:2b:01:c2:f0:e3:7a:a1:3a:fc:6f:b8:dd:cb: 27:a8:bb:68:41:5e:e2:43:30:b9:a3:89:e0:2a:f2:39:eb:61: d1:8f:2f:f4:a0:b7:23:7a:15:d4:89:b4:f1:94:6b:77:c7:ed: d0:4a:14:1f:3d:38:75:c9:6f:0b:e9:ae:ca:ed:ae:be:77:60: 2a:8b:d7:3e:5b:59:5d:62:27:c6:9e:99:a1:df:1c:18:54:3f: c0:ef:14:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvOQWg0Nf6/nSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MzJiNGUwYzUtOGVjNi00ZTRmLTk5NzYtZjJhYjAzZTUzYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBxO81veDK9rzlacsD3VtyDkuBOgiofkemQy Pu7i4uof/XPF188ZTuDvT1iy9u7wfaJSO0KiLOl/sKU5/uJh8SFqHmtxuWrcRq/M +vHC78Mu42SEeRzuqsGQwwVo6RnVv8rHleoVC1pexcnNtwCdSxaqQEBQX+pEBtWU EhCjEiKIXZmg8jzv8qIinwcusOuDK8MgXwyisoR22dJvjDSDjCacDZC3b3q3bota hOUPb3I1rvDpYCDaj/II2GxzqnoOltGeTpTul296WQtWG6sHa6r0gzKND+fatGfm cw42hzU7vY/Fkggb4GJMIV1+w1azjDo8zi+u6jXe6h6qqkemWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOAJkWKk/ti53Sph6rzFmCJxcG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjliMGE3N2MtMDQ5Mi0z MzlkLWFhOWMtYjEwNmYwYWNmNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE39VdkVcxQ9eG1ahMA2TaeaSLWaf1RUODYbkpQutVz1hnT0nmhZ2hMo tLAJMfLYbZi1y6tFVh4KWgtjOu5zdacf889kV6Ix2WUzGI0HbLVtznRXQeOQaggB qe2ZamhWXP8HU9yAXhNOcHyihXMPiNRm6erEBG8KEp+MRXse/+6c10qkYZW5+0p8 AXD3t2obIZRl7EWnJzk6guchhRGdbWcow1/KIgnZKwHC8ON6oTr8b7jdyyeou2hB XuJDMLmjieAq8jnrYdGPL/SgtyN6FdSJtPGUa3fH7dBKFB89OHXJbwvprsrtrr53 YCqL1z5bWV1iJ8aemaHfHBhUP8DvFPw= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:51 2025 by rpki-client