$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa File: 585ca79e-ea47-30c0-8c71-3e388273bb4f.roa (raw, json) Hash identifier: obYmjv+80SSrnsKZ6XLl+i8h78ota43gnGuqzrsVueE= Subject key identifier: D1:B2:73:B4:CB:A7:D9:E9:55:CC:5A:0B:61:D0:F9:7F:5E:D5:D1:65 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B98D0725730832B4D1A0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 208.82.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b9:8d:07:25:73:08:32:b4:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=e7760777-c5d3-4bb4-b6f9-7e2503c93c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:24:b1:0d:31:7d:6a:d2:04:28:88:9e:a9: 72:d5:2b:d9:7e:82:37:0e:8a:0d:44:89:fd:15:46: 32:4f:ed:ba:d7:36:05:83:12:1d:d2:9a:13:01:5c: 31:1a:aa:08:d0:8d:4a:a4:39:19:f2:f6:dd:d7:39: 35:30:ce:1b:46:a2:97:49:5f:17:65:4b:3b:22:0e: f7:98:82:9e:1b:63:bf:95:5a:1a:98:02:a9:9c:54: 42:17:12:25:41:8e:5c:98:4f:97:51:e0:b8:0b:4c: 19:ae:8e:ae:21:cd:83:88:39:c5:d3:6f:a1:8b:94: 36:4a:94:68:2c:3a:dd:91:4f:91:cb:75:31:d1:35: c6:19:cd:ab:72:bc:ab:71:8e:45:48:3d:53:8d:e5: 72:d9:02:42:80:4b:8e:28:a1:98:7f:55:2c:b0:98: 36:f5:ac:c9:19:43:28:50:0d:ea:91:68:69:99:63: 59:59:58:65:ad:fc:d3:c6:b8:4e:46:21:ef:60:4c: 18:38:cb:be:16:a3:72:1c:39:1b:d7:86:f9:01:3e: 60:83:c5:a3:66:7b:46:c3:9d:32:44:c6:fa:47:dd: e5:b6:b4:e7:90:41:29:92:ae:ab:70:9d:81:73:94: 84:79:57:2c:8a:17:c7:56:ba:18:23:ac:3f:c8:a1: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B2:73:B4:CB:A7:D9:E9:55:CC:5A:0B:61:D0:F9:7F:5E:D5:D1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 208.82.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:81:7b:00:2c:27:b0:92:ac:5e:a3:dc:61:bc:de:19:0a:de: c1:5d:1c:20:85:cd:65:57:12:71:f2:06:10:0c:a9:3d:67:d1: a2:a9:e4:c3:4b:dd:09:2c:60:1a:6b:f6:7e:72:bd:b2:2e:83: b1:15:c0:63:ee:56:79:30:9a:b2:70:45:24:35:bf:33:92:20: 61:6f:86:fe:6d:09:30:1d:6c:9c:c7:63:d8:86:7a:67:1a:4e: dc:3e:68:c0:47:17:89:35:eb:65:eb:8a:fa:a0:54:32:2b:7e: 81:aa:b4:05:15:d7:85:fa:dc:cd:4d:e9:52:16:7e:70:70:a2: 61:37:dc:36:67:86:b8:a5:9c:23:37:e9:8a:c9:4e:4b:6d:ab: 69:8f:f9:db:9f:f3:38:5f:62:bb:a0:d6:49:f6:cb:76:1f:f7: 4c:0c:aa:f2:cc:0a:54:81:c0:6a:65:04:92:cb:84:c2:55:40: d4:46:b0:f0:45:86:3b:62:db:1b:73:15:b8:78:5b:d0:4a:55: 4c:55:d2:0a:cc:5e:f8:d4:53:e6:8c:55:74:50:3b:2e:f8:d2: 97:ca:c0:36:5b:0c:97:45:3f:3b:db:ff:9d:14:32:dc:e8:43: 31:c1:e2:b3:6d:42:e9:39:14:29:bb:d1:16:98:60:44:dc:a1: 05:25:5d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybmNByVzCDK00aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZTc3NjA3NzctYzVkMy00YmI0LWI2ZjktN2UyNTAzYzkzYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltQksQ0xfWrSBCiInqly1SvZfoI3DooNRIn9 FUYyT+261zYFgxId0poTAVwxGqoI0I1KpDkZ8vbd1zk1MM4bRqKXSV8XZUs7Ig73 mIKeG2O/lVoamAKpnFRCFxIlQY5cmE+XUeC4C0wZro6uIc2DiDnF02+hi5Q2SpRo LDrdkU+Ry3Ux0TXGGc2rcryrcY5FSD1TjeVy2QJCgEuOKKGYf1UssJg29azJGUMo UA3qkWhpmWNZWVhlrfzTxrhORiHvYEwYOMu+FqNyHDkb14b5AT5gg8WjZntGw50y RMb6R93ltrTnkEEpkq6rcJ2Bc5SEeVcsihfHVroYI6w/yKF3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGyc7TLp9npVcxaC2HQ+X9e1dFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTg1Y2E3OWUtZWE0Ny0z MGMwLThjNzEtM2UzODgyNzNiYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FJqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqBewAsJ7CSrF6j3GG83hkK3sFdHCCFzWVXEnHyBhAMqT1n0aKp5MNL 3QksYBpr9n5yvbIug7EVwGPuVnkwmrJwRSQ1vzOSIGFvhv5tCTAdbJzHY9iGemca Ttw+aMBHF4k162XrivqgVDIrfoGqtAUV14X63M1N6VIWfnBwomE33DZnhrilnCM3 6YrJTkttq2mP+duf8zhfYrug1kn2y3Yf90wMqvLMClSBwGplBJLLhMJVQNRGsPBF hjti2xtzFbh4W9BKVUxV0grMXvjUU+aMVXRQOy740pfKwDZbDJdFPzvb/50UMtzo QzHB4rNtQuk5FCm70RaYYETcoQUlXX8= -----END CERTIFICATE-----Generated at Wed Apr 30 16:43:07 2025 by rpki-client