$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa File: ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa (raw, json) Hash identifier: QNcOzGEJ7RmKda8FEDW3ehxSfCQXD1CZcnlVvW0MxNo= Subject key identifier: FC:05:9D:28:A5:6F:78:93:DA:10:0E:02:D4:BE:96:21:57:B6:41:53 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285849849EF4644F12E7816235C080 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 15164 IP address blocks: 138.199.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f4:64:4f:12:e7:81:62:35:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=5244c37b-86c8-41c6-b1b7-3bbd235cdf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:0f:b0:99:53:c8:55:e2:73:c7:0a:e1:f1: a8:23:8f:e7:8d:aa:1a:84:29:f8:d6:61:4b:bc:5a: 7d:9c:af:6c:e4:5d:14:63:08:94:ea:9f:ba:ec:dd: d5:df:99:4b:6b:1e:9c:78:17:4d:4a:4e:ee:a9:a3: 3d:44:f1:30:fa:f7:b6:d6:e8:58:e0:fa:7c:57:60: 56:7b:09:78:de:7e:84:89:26:40:6c:d8:52:64:bd: 00:3f:42:07:b0:73:48:47:8c:09:82:a9:b5:b4:19: 28:e8:27:7a:cd:3a:29:3d:b5:4e:68:f4:73:b9:09: dc:56:76:4c:ba:1b:eb:9e:43:1c:de:ef:44:c4:45: 10:3d:10:47:47:57:7a:42:e2:55:95:f7:12:20:06: 53:70:a8:b8:20:7f:b5:8c:0b:c5:5c:cb:44:bb:9e: da:b4:f2:d6:72:34:34:cc:7e:67:fe:3d:51:7a:c6: 82:9a:0a:6b:b7:6b:6e:50:12:ff:18:f2:7c:18:e4: 54:9d:c1:57:bb:70:90:39:9b:19:ff:d7:b3:38:47: c6:4a:3d:08:1e:a1:8d:87:86:4e:8d:3f:a2:38:e5: 97:07:d8:46:9a:58:66:8d:f0:ae:2f:f4:88:84:de: dc:2d:31:01:90:b9:05:39:da:71:39:96:4d:f8:70: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:05:9D:28:A5:6F:78:93:DA:10:0E:02:D4:BE:96:21:57:B6:41:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:76:14:8c:43:8b:79:ab:f0:f5:84:6b:e7:28:d7:57:2b:b5: cd:79:7e:7d:62:e6:9c:a6:95:5e:aa:c8:d6:c2:95:3a:d3:53: a1:97:2f:e1:a6:eb:7d:43:a2:8f:d6:c3:83:86:a3:5a:54:27: e4:20:29:2e:f0:97:b2:ee:31:40:8d:9a:d6:62:9e:b0:c4:fe: d2:8e:2b:5e:4a:4e:dc:dc:83:6b:75:1b:db:f3:34:11:25:39: 39:b6:ba:1f:98:e5:2d:1a:ef:a5:78:e6:25:54:87:34:e3:41: 02:b9:8b:0e:0e:ca:6c:71:22:be:0e:4c:16:f3:f5:68:13:40: e2:8d:51:e8:5b:0f:fc:62:61:2e:90:9d:14:65:05:c6:87:fc: 0c:4f:6a:4e:d8:4d:88:68:e7:72:23:8b:82:16:c4:42:61:35: fb:69:df:6f:79:d6:20:67:48:11:10:42:05:23:03:44:1c:10: e7:82:27:fc:cf:dd:b3:33:a1:73:b6:47:49:9b:7f:5e:05:8f: 32:8f:fa:bf:86:78:a3:62:f2:38:ff:9e:4f:46:74:58:36:9b: 5d:6f:65:20:d3:00:59:0f:8a:54:b6:a4:5e:81:1b:83:89:fe: eb:aa:be:f7:c1:15:a2:ca:00:7c:34:35:3f:77:6e:08:6d:e5: 5d:af:5c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvRkTxLngWI1wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk NTI0NGMzN2ItODZjOC00MWM2LWIxYjctM2JiZDIzNWNkZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRwPsJlTyFXic8cK4fGoI4/njaoahCn41mFL vFp9nK9s5F0UYwiU6p+67N3V35lLax6ceBdNSk7uqaM9RPEw+ve21uhY4Pp8V2BW ewl43n6EiSZAbNhSZL0AP0IHsHNIR4wJgqm1tBko6Cd6zTopPbVOaPRzuQncVnZM uhvrnkMc3u9ExEUQPRBHR1d6QuJVlfcSIAZTcKi4IH+1jAvFXMtEu57atPLWcjQ0 zH5n/j1ResaCmgprt2tuUBL/GPJ8GORUncFXu3CQOZsZ/9ezOEfGSj0IHqGNh4ZO jT+iOOWXB9hGmlhmjfCuL/SIhN7cLTEBkLkFOdpxOZZN+HAN4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwFnSilb3iT2hAOAtS+liFXtkFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWU1ZDdiODMtNGI0OC0z M2IyLWEwYzItYWIwMzBiMzQ3M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN2FIxDi3mr8PWEa+co11crtc15fn1i5pymlV6qyNbClTrTU6GXL+Gm 631Doo/Ww4OGo1pUJ+QgKS7wl7LuMUCNmtZinrDE/tKOK15KTtzcg2t1G9vzNBEl OTm2uh+Y5S0a76V45iVUhzTjQQK5iw4OymxxIr4OTBbz9WgTQOKNUehbD/xiYS6Q nRRlBcaH/AxPak7YTYho53Iji4IWxEJhNftp32951iBnSBEQQgUjA0QcEOeCJ/zP 3bMzoXO2R0mbf14FjzKP+r+GeKNi8jj/nk9GdFg2m11vZSDTAFkPilS2pF6BG4OJ /uuqvvfBFaLKAHw0NT93bght5V2vXKs= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:20 2025 by rpki-client