$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa File: 6cddac52-a8dd-3b87-b490-18149b48f2a3.roa (raw, json) Hash identifier: tLfsiPGZ//MQZt9MpudplVmxGGHPtbD/GYo0Bk74tM4= Subject key identifier: 1C:5B:82:D1:D6:C4:55:9C:92:BB:77:2E:AC:20:81:65:47:12:50:BC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B72E6B078C3DA10A7BE0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 173.244.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b7:2e:6b:07:8c:3d:a1:0a:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=90bbf731-5bff-4a3d-a297-58e40eb7943a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:e9:87:c2:87:78:0e:38:2e:8d:78:64:c1: 94:2c:a8:18:df:c3:a7:bc:d6:7b:25:dc:09:d4:07: 00:66:7f:2f:5b:bf:5e:bf:4d:16:00:3c:5c:69:aa: 58:90:d1:98:f3:42:82:f9:bc:1f:1f:8f:ca:2b:8e: 0f:27:c6:71:ce:54:0b:80:9c:3f:1c:b5:e2:38:38: 3d:df:7d:12:a4:c2:4a:aa:6e:7c:e3:e6:ba:1a:9a: c8:bc:06:3f:a0:10:c2:d9:2a:2e:35:58:3a:ca:69: 18:48:4b:eb:ef:ba:0b:6b:18:d1:53:52:43:dc:6e: c5:a4:e2:78:df:5b:64:77:2c:58:5b:c0:57:a5:82: 67:79:62:fe:5e:65:71:0f:5c:47:30:5e:31:72:80: 16:42:a1:4c:bc:85:41:65:50:76:d7:bc:a5:68:d8: 7e:fe:28:01:61:83:44:62:c3:da:e3:41:2a:ff:d8: 9c:ab:52:34:be:cf:4d:a5:8d:ff:96:e2:32:a6:bc: 97:10:da:88:9c:94:06:23:56:f5:b6:5a:a8:f2:47: 0f:20:5b:be:fe:4d:a7:61:fd:70:85:a0:9b:1a:17: bc:95:0c:78:9b:4b:e6:15:57:af:ab:80:70:9a:d0: 8a:b3:e5:46:e5:a3:ca:dd:b8:8d:cd:b1:55:a4:93: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5B:82:D1:D6:C4:55:9C:92:BB:77:2E:AC:20:81:65:47:12:50:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ba:00:91:7f:5d:70:0f:8c:02:c9:fe:49:00:98:3a:0f:14: ca:78:e7:19:21:96:6f:ec:47:1b:1b:0d:82:57:da:62:1f:a2: 51:aa:b1:f0:35:a6:95:26:b7:54:3e:cb:2f:cb:1e:de:de:26: e1:e6:17:5e:5f:c6:2a:a6:50:8c:54:04:76:d1:05:10:84:21: cd:3c:f4:64:b9:7b:54:27:b6:bf:1f:37:1c:bd:ff:d8:e5:67: b3:9d:2c:1a:0f:37:83:08:27:91:26:98:18:6f:ae:7b:10:da: fe:f1:75:0f:3e:cc:de:10:a0:93:0d:2b:92:11:70:03:a4:39: 26:e7:cc:da:36:68:0b:2b:18:d4:8a:5a:d9:a0:74:6b:6e:78: 40:ef:d8:ea:1f:61:1d:81:33:d2:38:1a:d9:34:27:86:46:36: dc:3f:ff:f3:20:a7:b2:83:92:a7:6d:fe:b5:2b:bb:97:f1:f5: a8:8f:cd:ea:dd:70:6d:12:f9:a9:99:6f:5e:57:71:97:df:c8: 38:fe:b6:91:7d:c5:c8:13:f0:1c:24:7f:b5:11:7d:84:7c:2d: 2a:45:bb:9b:2b:95:05:43:ce:51:e8:d7:ad:b7:4a:d8:95:27: af:d6:0a:a2:8d:90:47:1a:11:51:d8:a0:a4:e9:6a:5d:1c:31: 24:27:89:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybcuaweMPaEKe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk OTBiYmY3MzEtNWJmZi00YTNkLWEyOTctNThlNDBlYjc5NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Dph8KHeA44Lo14ZMGULKgY38OnvNZ7JdwJ 1AcAZn8vW79ev00WADxcaapYkNGY80KC+bwfH4/KK44PJ8ZxzlQLgJw/HLXiODg9 330SpMJKqm584+a6GprIvAY/oBDC2SouNVg6ymkYSEvr77oLaxjRU1JD3G7FpOJ4 31tkdyxYW8BXpYJneWL+XmVxD1xHMF4xcoAWQqFMvIVBZVB217ylaNh+/igBYYNE YsPa40Eq/9icq1I0vs9NpY3/luIypryXENqInJQGI1b1tlqo8kcPIFu+/k2nYf1w haCbGhe8lQx4m0vmFVevq4BwmtCKs+VG5aPK3biNzbFVpJP/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxbgtHWxFWckrt3LqwggWVHElC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNmNkZGFjNTItYThkZC0z Yjg3LWI0OTAtMTgxNDliNDhmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG6AJF/XXAPjALJ/kkAmDoPFMp45xkhlm/sRxsbDYJX2mIfolGqsfA1 ppUmt1Q+yy/LHt7eJuHmF15fxiqmUIxUBHbRBRCEIc089GS5e1Qntr8fNxy9/9jl Z7OdLBoPN4MIJ5EmmBhvrnsQ2v7xdQ8+zN4QoJMNK5IRcAOkOSbnzNo2aAsrGNSK WtmgdGtueEDv2OofYR2BM9I4Gtk0J4ZGNtw///Mgp7KDkqdt/rUru5fx9aiPzerd cG0S+amZb15XcZffyDj+tpF9xcgT8Bwkf7URfYR8LSpFu5srlQVDzlHo1623StiV J6/WCqKNkEcaEVHYoKTpal0cMSQniTg= -----END CERTIFICATE-----Generated at Wed Apr 30 09:00:40 2025 by rpki-client