$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa File: a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json) Hash identifier: NgSrntDrAs54pFoJhbFROkiq/vQ3bubFcTgAnmzqXko= Subject key identifier: C5:31:A5:D1:72:86:96:63:DC:21:FD:52:60:F7:C8:04:30:D0:A3:94 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285849849EF4ACEFFAAC61217A0340 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 15164 IP address blocks: 138.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f4:ac:ef:fa:ac:61:21:7a:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=353699b0-2f9b-4c62-a71e-d39900d376f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:fd:7f:df:e5:d0:31:e6:84:58:58:19:f6: f3:14:33:77:e8:cb:44:b1:8a:7b:50:a2:10:a6:14: 33:97:1b:00:b1:dc:c9:6f:bc:78:54:1e:a7:86:5a: a5:25:5f:57:e9:70:a4:fa:04:20:9b:77:bd:8f:c1: ad:76:c3:70:a4:b4:39:d9:5f:41:af:ba:bd:75:c9: 04:3f:9c:aa:d8:5c:00:94:37:77:57:01:9d:f7:c2: 8b:fc:28:83:63:36:f4:db:44:89:1b:68:90:9e:03: 10:eb:c0:c0:86:d2:58:84:61:a1:5e:9c:77:9e:a2: dd:f0:8b:1d:7a:a3:bd:16:8b:14:cc:89:cf:b0:b4: 38:4a:73:57:5c:80:36:a0:6e:ce:2b:0c:9a:63:0e: 9d:7c:90:2e:29:23:de:2e:cd:c2:62:5d:0c:a4:57: 25:7e:a9:72:66:7f:54:cc:8d:99:42:30:82:85:aa: e7:79:00:54:f5:8a:3c:6b:83:ed:3c:95:d8:41:de: bb:5a:a7:e0:7e:8f:2a:85:aa:f1:fb:9f:6e:80:82: f4:fb:74:f0:d2:37:3b:ba:ae:be:5d:c9:1d:34:d4: ed:d5:9e:83:ae:15:00:f3:70:6d:92:74:f8:20:3d: 28:df:5a:51:71:f1:9f:71:fc:a1:fd:1f:b3:ab:20: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:31:A5:D1:72:86:96:63:DC:21:FD:52:60:F7:C8:04:30:D0:A3:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b9:79:d6:d6:86:59:d3:a7:33:53:d6:89:8b:27:28:ae:58: d6:19:c4:ae:41:d4:78:c9:0e:59:bf:3f:a4:c1:5c:f7:2f:7d: 04:c7:08:c4:cf:2e:d0:a8:88:9f:48:f7:71:2a:c6:5e:f5:36: aa:0d:27:43:68:71:e9:3a:92:d8:ba:36:52:a0:c9:17:10:b0: 09:7e:5e:f8:20:71:8e:84:19:df:de:89:92:02:e6:c9:7a:fd: c0:21:ff:85:5d:dd:ff:77:ff:15:1b:33:b5:71:3a:5a:09:e6: 7a:43:8e:0f:13:67:ec:9f:8a:ca:d9:5e:b6:c2:3d:cc:40:24: 84:22:6d:fb:60:50:c2:d0:78:5d:e9:4f:14:be:75:80:9b:e1: 2a:f0:10:79:4e:9d:57:bd:b8:56:e5:38:ce:57:18:62:54:17: 96:ac:c4:5b:0a:a8:bd:1a:67:b8:14:e6:78:67:ab:a7:ba:e3: c9:63:ea:0a:4a:68:2f:d1:67:c2:4f:0f:94:fe:e9:ee:8a:08: 10:d1:b0:b5:7e:44:6c:98:89:d2:ef:01:bc:37:ff:40:fd:9a: e3:95:60:7e:ac:c5:df:25:ec:8f:4c:5f:a3:58:a3:d2:89:07: 39:a4:32:86:6f:ae:c0:b4:4a:83:43:5e:be:69:07:b9:56:5f: fd:71:2e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvSs7/qsYSF6A0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MzUzNjk5YjAtMmY5Yi00YzYyLWE3MWUtZDM5OTAwZDM3NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GL9f9/l0DHmhFhYGfbzFDN36MtEsYp7UKIQ phQzlxsAsdzJb7x4VB6nhlqlJV9X6XCk+gQgm3e9j8GtdsNwpLQ52V9Br7q9dckE P5yq2FwAlDd3VwGd98KL/CiDYzb020SJG2iQngMQ68DAhtJYhGGhXpx3nqLd8Isd eqO9FosUzInPsLQ4SnNXXIA2oG7OKwyaYw6dfJAuKSPeLs3CYl0MpFclfqlyZn9U zI2ZQjCCharneQBU9Yo8a4PtPJXYQd67Wqfgfo8qharx+59ugIL0+3Tw0jc7uq6+ XckdNNTt1Z6DrhUA83BtknT4ID0o31pRcfGfcfyh/R+zqyCKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUxpdFyhpZj3CH9UmD3yAQw0KOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTMwZGI0MDctMTE2Zi0z ZWFlLTg1OGYtYTJhNGM4NDQ0NGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS5edbWhlnTpzNT1omLJyiuWNYZxK5B1HjJDlm/P6TBXPcvfQTHCMTP LtCoiJ9I93Eqxl71NqoNJ0Nocek6kti6NlKgyRcQsAl+XvggcY6EGd/eiZIC5sl6 /cAh/4Vd3f93/xUbM7VxOloJ5npDjg8TZ+yfisrZXrbCPcxAJIQibftgUMLQeF3p TxS+dYCb4SrwEHlOnVe9uFblOM5XGGJUF5asxFsKqL0aZ7gU5nhnq6e648lj6gpK aC/RZ8JPD5T+6e6KCBDRsLV+RGyYidLvAbw3/0D9muOVYH6sxd8l7I9MX6NYo9KJ BzmkMoZvrsC0SoNDXr5pB7lWX/1xLrY= -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:57 2025 by rpki-client