$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa File: 827107c2-556d-3daf-ac8f-65dbeda65b85.roa (raw, json) Hash identifier: 2XGv5JrdmfIECWmT1OcTKjvNnGR5RlBK+74rCQqEkyI= Subject key identifier: C1:5D:11:A8:97:85:9E:86:40:39:06:4F:C0:69:45:0F:BF:83:3A:21 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B8CA6F93A27D69CAB700 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:ca:6f:93:a2:7d:69:ca:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=b552ea2a-ec75-479d-abc3-9f26e922d856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:31:b3:1e:fd:e0:62:9f:2b:d8:a4:6f:bf: 8b:7b:a0:6e:76:64:bc:cc:29:16:7a:07:0b:c8:79: 26:f5:76:41:be:22:64:f3:53:9e:6f:61:74:33:83: 27:16:d4:16:4e:45:3c:6a:57:63:00:8e:2a:f4:c9: 2c:07:fa:52:2c:c9:02:2f:b6:c2:44:c9:e1:5a:84: 11:21:7d:32:6a:be:d9:41:ca:d1:1e:8e:0c:c5:10: b8:65:b7:ad:28:5f:7f:ef:02:92:c7:d0:e9:aa:65: ec:55:8e:1f:31:d8:e2:23:ad:7b:53:5c:6f:59:2d: 34:ee:90:16:0f:74:63:57:96:5b:80:64:55:50:5e: c9:f7:29:d8:b7:ba:40:16:fb:94:30:e9:74:77:ae: 08:c5:19:29:10:f2:be:52:6a:6f:1e:bd:b0:1d:29: 70:8d:c1:9b:17:a0:24:1b:a9:6a:34:03:be:48:14: f7:84:6b:74:d5:0c:cf:34:d4:83:91:e4:2c:85:11: 4e:98:47:67:f4:c0:a7:71:2f:c0:ee:26:0b:57:2a: f6:fe:20:3a:df:6a:d8:8f:36:6d:cb:7d:47:22:15: 25:d2:5c:e3:11:af:e3:5b:4e:f7:32:1d:2b:34:4f: 6f:a7:75:41:d1:68:1a:90:c5:3f:1a:b5:0a:5f:37: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5D:11:A8:97:85:9E:86:40:39:06:4F:C0:69:45:0F:BF:83:3A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/827107c2-556d-3daf-ac8f-65dbeda65b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b0:86:be:a9:31:ef:41:e2:59:88:6f:4f:82:54:7f:6c:f7: b2:c2:11:41:93:2b:71:93:74:f2:6b:4b:49:e7:e9:5b:ae:19: 9a:f6:5d:48:13:2c:de:d9:f3:e7:bb:37:ba:82:5d:fb:ba:80: 94:e2:10:ca:08:e9:61:1c:2c:c1:33:24:ef:15:83:cb:1d:59: c9:65:7e:97:fe:8f:24:24:cb:88:9a:4e:5a:b0:8e:26:23:0e: ef:1f:8f:a1:46:e7:9e:56:be:b4:58:2f:47:41:45:68:ad:a7: 5c:f4:88:f8:73:b2:94:86:92:62:42:3f:92:31:24:3d:04:b0: d7:58:97:94:a1:b3:41:ce:b8:70:1d:e7:09:c5:9f:78:6f:58: e4:f3:b6:7e:7a:9c:5c:1f:6b:39:fb:29:a8:37:90:0b:db:5a: 21:eb:86:ba:d6:b3:23:95:19:fc:f4:c7:7c:a5:09:b6:0c:71: 2a:57:ae:e5:1c:2f:4e:32:0a:b8:e8:20:ee:9f:f4:bf:12:80: bd:18:68:32:02:35:c1:f6:bd:65:65:82:50:3b:0d:3d:0d:f6: e3:50:02:a4:db:e4:57:06:63:aa:5a:87:c8:ea:23:a6:e5:95: 96:0a:a9:8d:71:c2:89:d9:48:cc:a6:01:a0:f5:3d:af:33:94: a0:7c:73:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybjKb5OifWnKtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk YjU1MmVhMmEtZWM3NS00NzlkLWFiYzMtOWYyNmU5MjJkODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69cxsx794GKfK9ikb7+Le6BudmS8zCkWegcL yHkm9XZBviJk81Oeb2F0M4MnFtQWTkU8aldjAI4q9MksB/pSLMkCL7bCRMnhWoQR IX0yar7ZQcrRHo4MxRC4ZbetKF9/7wKSx9DpqmXsVY4fMdjiI617U1xvWS007pAW D3RjV5ZbgGRVUF7J9ynYt7pAFvuUMOl0d64IxRkpEPK+UmpvHr2wHSlwjcGbF6Ak G6lqNAO+SBT3hGt01QzPNNSDkeQshRFOmEdn9MCncS/A7iYLVyr2/iA632rYjzZt y31HIhUl0lzjEa/jW073Mh0rNE9vp3VB0WgakMU/GrUKXzcTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFdEaiXhZ6GQDkGT8BpRQ+/gzohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODI3MTA3YzItNTU2ZC0z ZGFmLWFjOGYtNjVkYmVkYTY1Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+whr6pMe9B4lmIb0+CVH9s97LCEUGTK3GTdPJrS0nn6VuuGZr2XUgT LN7Z8+e7N7qCXfu6gJTiEMoI6WEcLMEzJO8Vg8sdWcllfpf+jyQky4iaTlqwjiYj Du8fj6FG555WvrRYL0dBRWitp1z0iPhzspSGkmJCP5IxJD0EsNdYl5Shs0HOuHAd 5wnFn3hvWOTztn56nFwfazn7Kag3kAvbWiHrhrrWsyOVGfz0x3ylCbYMcSpXruUc L04yCrjoIO6f9L8SgL0YaDICNcH2vWVlglA7DT0N9uNQAqTb5FcGY6pah8jqI6bl lZYKqY1xwonZSMymAaD1Pa8zlKB8cww= -----END CERTIFICATE-----Generated at Wed Apr 30 14:48:12 2025 by rpki-client