$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa File: 8238436f-d3b9-38c8-99b7-34251e69ac0a.roa (raw, json) Hash identifier: VRUUm3KzKvs1hTrQDL15aC1Y4Fzx0MWBvRQllB76NdQ= Subject key identifier: EF:4C:A0:7E:2C:52:52:F0:24:9F:BB:D4:D9:A5:A5:84:88:F1:63:AE Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B873AC5776B4ABB7FFA0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:73:ac:57:76:b4:ab:b7:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=bd6efd86-4702-4964-81a5-b376226e1bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:70:f9:13:13:48:a7:d6:fe:a4:04:21:06: 97:72:56:73:51:6f:5c:15:3a:02:3d:95:4f:bb:a4: f6:31:f6:82:59:f4:5c:c3:10:33:bc:19:c7:cf:97: 61:b2:3a:f3:32:23:0f:ae:1f:b8:73:4c:f2:73:42: 10:02:22:c3:22:f6:24:7f:01:d3:20:d6:18:38:59: ea:08:70:31:51:6a:d0:33:c2:f7:9c:a5:46:a4:50: d7:bf:b7:37:a3:84:4e:a6:2d:82:8d:1b:63:42:03: a5:41:35:92:d1:da:84:32:78:f2:30:e3:56:a9:e6: bc:f1:ca:c1:b3:6d:a5:c5:7c:9c:b4:fd:d8:8d:af: 5f:34:0d:6e:78:45:7b:b8:49:24:89:14:72:07:a3: f9:a5:16:25:e1:d3:7a:b3:e6:99:11:1d:7a:6a:09: 22:fa:f9:a3:a0:fb:d2:2e:2f:24:f7:5a:85:5c:9f: 82:54:c9:64:4f:10:3d:30:f9:9a:9a:78:41:2f:ee: be:23:e9:40:e3:23:e5:10:23:a5:bf:9d:d0:9b:e4: 7c:02:e9:9b:64:53:4b:9d:f3:bb:38:db:d8:8b:c0: bf:8f:a0:ef:eb:40:ea:09:00:b7:fc:cb:57:d4:db: 1c:2a:9d:f5:02:3f:77:a8:57:ee:81:d3:13:b2:09: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:A0:7E:2C:52:52:F0:24:9F:BB:D4:D9:A5:A5:84:88:F1:63:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:85:78:e8:9f:ec:72:d4:bc:0a:7f:bf:11:7b:ba:ce:de:28: 48:a1:b9:1d:b2:fb:ed:b2:42:fa:00:be:33:80:d5:89:da:00: 18:ac:08:ec:10:fc:35:70:57:d2:f8:aa:77:2f:81:35:11:fe: 44:16:96:07:2f:15:97:19:2f:8d:1e:8d:02:dd:2d:95:72:97: 4a:85:a5:2f:6e:9d:b0:9b:12:47:5c:d5:e2:c9:f7:16:4a:8a: e6:60:45:c9:55:14:e8:73:5e:3b:42:f3:e3:b5:92:de:5a:80: 0c:f9:b3:4c:ae:2d:a1:02:58:ac:7e:4b:f2:1d:c7:81:74:fa: cd:bf:a6:ec:33:c9:3e:4e:ce:a7:af:99:43:10:69:2e:78:e2: 8d:ce:35:7c:dd:21:d8:89:8c:94:2c:f2:8f:7e:6c:d9:7d:d9: 4c:a7:4d:29:18:b1:f1:a4:db:a7:e5:b3:4b:5c:bd:88:32:4f: 90:0d:94:0f:de:a8:21:d6:a7:4e:f7:02:ba:dc:ca:d2:f7:ff: b4:9c:45:f5:26:62:bc:ac:51:db:6c:3c:95:be:b0:8c:3c:45: 43:b9:d8:d9:4c:2b:c9:23:34:a5:fe:53:94:67:18:6c:ba:41: da:f5:b4:ca:5d:3e:39:2c:d0:76:94:87:58:dc:67:69:4b:ee: 66:df:2b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybhzrFd2tKu3/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk YmQ2ZWZkODYtNDcwMi00OTY0LTgxYTUtYjM3NjIyNmUxYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUdw+RMTSKfW/qQEIQaXclZzUW9cFToCPZVP u6T2MfaCWfRcwxAzvBnHz5dhsjrzMiMPrh+4c0zyc0IQAiLDIvYkfwHTINYYOFnq CHAxUWrQM8L3nKVGpFDXv7c3o4ROpi2CjRtjQgOlQTWS0dqEMnjyMONWqea88crB s22lxXyctP3Yja9fNA1ueEV7uEkkiRRyB6P5pRYl4dN6s+aZER16agki+vmjoPvS Li8k91qFXJ+CVMlkTxA9MPmamnhBL+6+I+lA4yPlECOlv53Qm+R8AumbZFNLnfO7 ONvYi8C/j6Dv60DqCQC3/MtX1NscKp31Aj93qFfugdMTsgmhmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9MoH4sUlLwJJ+71NmlpYSI8WOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODIzODQzNmYtZDNiOS0z OGM4LTk5YjctMzQyNTFlNjlhYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+FeOif7HLUvAp/vxF7us7eKEihuR2y++2yQvoAvjOA1YnaABisCOwQ /DVwV9L4qncvgTUR/kQWlgcvFZcZL40ejQLdLZVyl0qFpS9unbCbEkdc1eLJ9xZK iuZgRclVFOhzXjtC8+O1kt5agAz5s0yuLaECWKx+S/Idx4F0+s2/puwzyT5Ozqev mUMQaS544o3ONXzdIdiJjJQs8o9+bNl92UynTSkYsfGk26fls0tcvYgyT5ANlA/e qCHWp073ArrcytL3/7ScRfUmYrysUdtsPJW+sIw8RUO52NlMK8kjNKX+U5RnGGy6 Qdr1tMpdPjks0HaUh1jcZ2lL7mbfK2w= -----END CERTIFICATE-----Generated at Tue Apr 29 13:48:47 2025 by rpki-client