$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53abcb3e-1645-3bac-b04a-8ccffffe9ac9.roa File: 53abcb3e-1645-3bac-b04a-8ccffffe9ac9.roa (raw, json) Hash identifier: 4mZ2CeF74VLV6h+wF2A+4n4yZb79ecpF9aMMRquvqSo= Subject key identifier: 66:A6:5B:DE:E8:73:03:7C:48:18:B3:4F:FA:DA:A9:9B:DA:2D:6F:CC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B80DC535669BC14FE580 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53abcb3e-1645-3bac-b04a-8ccffffe9ac9.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:0d:c5:35:66:9b:c1:4f:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=e8d50702-4244-456c-bec6-e59ab86a7306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:f1:40:a9:b6:e1:31:da:04:0e:7a:c1:3b: ef:46:59:76:33:15:a3:1c:cb:c7:c7:6c:ad:12:eb: 60:03:e1:1f:e4:99:14:ee:54:13:f4:bd:65:e0:22: 11:cc:d8:be:55:b5:f6:74:2a:8c:f3:28:e5:cd:1d: 11:e6:2e:16:9a:2e:c7:08:3e:c0:18:c2:de:2b:8e: 0f:f0:c3:f0:ef:33:d2:e7:a0:9c:00:6c:af:61:98: 2a:c6:06:e0:92:a3:b2:94:ac:6e:58:7e:dd:bd:ad: 8e:68:f0:b0:f1:c3:08:70:cc:a4:cf:ba:4d:2f:0b: 01:ed:e7:ed:88:bf:8b:85:41:58:34:fb:24:e3:c2: 76:91:84:05:fd:a1:a3:fa:ff:f3:8e:40:0b:ea:7f: 4a:50:e2:0d:29:19:9a:79:27:43:8d:08:ba:c7:44: eb:69:07:c8:8e:cf:17:d7:16:4d:05:f4:e4:6f:d4: 94:60:77:cb:43:b5:18:6d:73:52:47:2c:43:4d:07: ba:ea:5b:da:da:4e:7a:2d:5c:2d:a3:76:db:05:b1: bd:a5:4c:0c:a6:4c:6b:e5:fe:e6:b7:16:0e:0b:01: 13:e2:50:7a:2c:ac:34:82:f9:cb:3b:92:b5:ba:22: cf:aa:90:af:04:53:e3:c8:e6:ec:f5:87:05:46:54: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:5B:DE:E8:73:03:7C:48:18:B3:4F:FA:DA:A9:9B:DA:2D:6F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/53abcb3e-1645-3bac-b04a-8ccffffe9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:90:21:4d:85:d1:ba:14:7e:96:50:11:8b:96:42:b6:9c:a1: 81:f8:aa:87:29:21:01:29:d3:77:49:78:88:78:da:f5:c0:31: f5:fb:47:cb:6a:60:6e:da:26:3c:67:06:66:57:3f:0c:78:58: 96:e9:de:4a:5c:fd:37:69:00:39:07:b9:11:41:d6:70:70:7c: 2d:ec:ed:5a:7a:ee:49:3e:79:de:81:7d:15:9d:8c:6b:b5:86: 00:81:96:8e:f0:f3:ef:19:9a:e5:90:29:fd:b2:aa:e0:07:ce: ee:dc:1d:16:e9:da:b3:f4:dd:f7:83:29:3d:45:e9:8b:1d:37: fa:97:9d:0c:09:5e:81:38:5f:8b:66:ab:e3:e2:3d:3e:7d:cb: d2:41:51:5a:23:fc:55:3c:92:55:f3:a5:43:8b:c5:c3:b6:b7: af:97:5e:5d:63:2c:9a:d9:7f:e9:6d:a1:5e:49:b3:53:ae:23: aa:2a:b4:c1:2d:17:3c:58:d9:30:44:6f:e0:87:43:3e:8e:2b: 75:98:ef:65:05:2b:6f:71:c4:ce:58:14:78:8d:e9:a1:c8:42: 49:e1:38:b0:cb:21:55:f9:1a:fa:c4:08:a7:eb:ff:8d:15:73: 4b:09:c7:5c:9a:5e:e8:d8:d1:a2:c8:33:93:ae:30:fb:7e:70: 90:8b:eb:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybgNxTVmm8FP5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZThkNTA3MDItNDI0NC00NTZjLWJlYzYtZTU5YWI4NmE3MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcnxQKm24THaBA56wTvvRll2MxWjHMvHx2yt EutgA+Ef5JkU7lQT9L1l4CIRzNi+VbX2dCqM8yjlzR0R5i4Wmi7HCD7AGMLeK44P 8MPw7zPS56CcAGyvYZgqxgbgkqOylKxuWH7dva2OaPCw8cMIcMykz7pNLwsB7eft iL+LhUFYNPsk48J2kYQF/aGj+v/zjkAL6n9KUOINKRmaeSdDjQi6x0TraQfIjs8X 1xZNBfTkb9SUYHfLQ7UYbXNSRyxDTQe66lva2k56LVwto3bbBbG9pUwMpkxr5f7m txYOCwET4lB6LKw0gvnLO5K1uiLPqpCvBFPjyObs9YcFRlQHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGamW97ocwN8SBizT/raqZvaLW/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTNhYmNiM2UtMTY0NS0z YmFjLWIwNGEtOGNjZmZmZmU5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWQIU2F0boUfpZQEYuWQracoYH4qocpIQEp03dJeIh42vXAMfX7R8tq YG7aJjxnBmZXPwx4WJbp3kpc/TdpADkHuRFB1nBwfC3s7Vp67kk+ed6BfRWdjGu1 hgCBlo7w8+8ZmuWQKf2yquAHzu7cHRbp2rP03feDKT1F6YsdN/qXnQwJXoE4X4tm q+PiPT59y9JBUVoj/FU8klXzpUOLxcO2t6+XXl1jLJrZf+ltoV5Js1OuI6oqtMEt FzxY2TBEb+CHQz6OK3WY72UFK29xxM5YFHiN6aHIQknhOLDLIVX5GvrECKfr/40V c0sJx1yaXujY0aLIM5OuMPt+cJCL63o= -----END CERTIFICATE-----Generated at Tue Apr 29 12:25:49 2025 by rpki-client