$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/44296b22-bf5b-3791-853c-cfb1119ab608.roa File: 44296b22-bf5b-3791-853c-cfb1119ab608.roa (raw, json) Hash identifier: cqDVvhdc8ToAPz9EYFUsjOvdHmhc8zoyRzJYvK9pyzk= Subject key identifier: 74:B8:A3:DA:D1:95:CE:AA:D2:7B:9C:79:23:FE:27:8D:DD:25:9E:92 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584981D4504737B52A5906766740 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/44296b22-bf5b-3791-853c-cfb1119ab608.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 15164 IP address blocks: 64.251.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:50:47:37:b5:2a:59:06:76:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=72d136c5-1185-4473-bb52-70a8bd5557da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:ad:c4:24:38:44:b5:6f:bf:6a:9e:bc:8a: 9e:c7:87:c3:7f:39:6b:52:1b:f0:19:5c:90:a6:88: 9e:9f:b6:72:eb:7c:41:11:f8:1b:f7:30:51:52:8e: 77:ff:3d:66:50:bb:03:c3:62:9b:82:c4:ff:8c:cb: d8:6b:9f:77:89:73:65:ee:9f:f3:c8:85:35:3f:0d: 06:ff:b7:e7:31:b7:00:9e:d6:ef:e3:ff:1f:ae:5c: e4:9f:09:70:cf:42:b6:33:0b:be:34:c8:f6:f0:0e: 18:bb:ec:b3:ee:ad:48:4a:fb:9e:4d:3c:b7:91:ce: a8:37:e1:4e:28:a6:5c:8c:b4:7d:9c:9a:69:47:2d: da:7a:87:f7:30:9b:65:3a:23:21:da:58:4e:74:ac: 68:bc:ea:fd:dd:d0:fa:d5:6a:32:99:a6:50:62:9b: 64:c8:f9:64:d5:e3:bc:53:51:5f:32:0b:bc:1a:be: 9e:a9:4e:ee:43:af:cc:19:32:94:56:2e:5e:ab:32: 68:25:88:e3:63:3f:1e:d9:15:5a:7c:23:6f:ff:cb: 4d:b0:74:90:25:f8:06:a4:35:05:f3:ac:8a:63:ec: 3f:0c:09:70:8a:46:d7:38:78:85:d3:b3:a1:a1:9f: b0:ae:f3:6b:74:44:19:ac:62:b4:88:73:b0:37:b4: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:A3:DA:D1:95:CE:AA:D2:7B:9C:79:23:FE:27:8D:DD:25:9E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/44296b22-bf5b-3791-853c-cfb1119ab608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 64.251.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7b:24:14:6e:23:b2:9f:e4:d0:b2:92:26:99:ec:57:a2:c7: 94:0e:91:eb:fd:67:1b:ab:14:68:5e:cd:cf:49:30:11:da:63: 36:41:9a:1c:a2:5c:2d:d4:d7:f8:06:3f:ba:36:6d:ef:d0:ef: 16:12:6a:d1:06:13:2d:68:19:2d:ea:81:43:e4:99:f4:ce:2a: 09:8f:85:4c:84:c9:a0:3f:2c:3b:62:dc:07:fb:53:3a:75:f6: ab:d5:5f:4f:4d:e5:29:76:dc:9e:92:19:09:d2:93:68:d7:7f: 3a:bb:6e:29:58:78:54:ac:eb:0a:91:ee:75:e1:f6:d2:f1:55: 1d:a3:ca:89:f3:15:54:df:be:23:73:55:69:16:ba:70:a7:9a: 6d:56:e2:5a:90:13:f9:3e:fb:66:48:76:d3:73:7a:51:18:94: 7f:87:4d:74:66:08:93:fa:cb:46:14:0d:61:ca:d9:ea:16:c3: 6f:be:2e:38:c6:2d:24:27:42:3f:9f:07:d1:1b:dc:7c:76:02: ba:20:e8:c0:b1:65:42:69:cc:f0:c2:40:6d:7b:98:21:5f:72: 88:ab:f2:f0:a4:83:a7:6c:b6:60:79:ab:66:a4:28:15:4f:7b: be:68:4a:96:3a:ce:53:95:85:7e:4d:4a:5d:bc:ff:be:fd:7b: ab:24:ff:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FBHN7UqWQZ2Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NzJkMTM2YzUtMTE4NS00NDczLWJiNTItNzBhOGJkNTU1N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklKtxCQ4RLVvv2qevIqex4fDfzlrUhvwGVyQ poien7Zy63xBEfgb9zBRUo53/z1mULsDw2KbgsT/jMvYa593iXNl7p/zyIU1Pw0G /7fnMbcAntbv4/8frlzknwlwz0K2Mwu+NMj28A4Yu+yz7q1ISvueTTy3kc6oN+FO KKZcjLR9nJppRy3aeof3MJtlOiMh2lhOdKxovOr93dD61WoymaZQYptkyPlk1eO8 U1FfMgu8Gr6eqU7uQ6/MGTKUVi5eqzJoJYjjYz8e2RVafCNv/8tNsHSQJfgGpDUF 86yKY+w/DAlwikbXOHiF07OhoZ+wrvNrdEQZrGK0iHOwN7RkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS4o9rRlc6q0nuceSP+J43dJZ6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNDQyOTZiMjItYmY1Yi0z NzkxLTg1M2MtY2ZiMTExOWFiNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQPveMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB7JBRuI7Kf5NCykiaZ7Feix5QOkev9ZxurFGhezc9JMBHaYzZBmhyi XC3U1/gGP7o2be/Q7xYSatEGEy1oGS3qgUPkmfTOKgmPhUyEyaA/LDti3Af7Uzp1 9qvVX09N5Sl23J6SGQnSk2jXfzq7bilYeFSs6wqR7nXh9tLxVR2jyonzFVTfviNz VWkWunCnmm1W4lqQE/k++2ZIdtNzelEYlH+HTXRmCJP6y0YUDWHK2eoWw2++LjjG LSQnQj+fB9Eb3Hx2Arog6MCxZUJpzPDCQG17mCFfcoir8vCkg6dstmB5q2akKBVP e75oSpY6zlOVhX5NSl28/779e6sk/+A= -----END CERTIFICATE-----Generated at Wed Apr 30 11:50:22 2025 by rpki-client