$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa File: c9b75257-3222-3571-8c3f-8375e5c50eb2.roa (raw, json) Hash identifier: 7dNOwUkeKs6OXYzxs/r4EeILkpYDzzTTC4r50Ewg03Q= Subject key identifier: 84:32:A1:DE:02:03:B8:4D:FF:8E:CF:F4:22:41:1A:CF:AF:E0:C2:CF Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B8DE79A99AF419397320 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:de:79:a9:9a:f4:19:39:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=5ce84e5c-b7b9-49bb-81f6-094ea0f1d43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:39:e5:6d:3e:25:9e:2b:4a:be:78:6f:f2: 20:08:27:b4:ec:2a:05:36:e7:12:8d:6c:9c:58:96: ba:e5:06:6e:47:e1:43:f2:15:b5:eb:ea:00:f1:7d: e1:01:7a:86:e2:93:1d:56:bc:83:c3:6a:bf:67:80: 53:62:26:c9:8e:33:15:48:8a:d7:94:67:92:6f:ea: e7:92:1a:43:b1:39:c8:56:b0:90:b2:7d:f9:ec:cb: 0d:04:91:74:7b:75:17:dd:76:ed:0d:4c:94:5d:8b: 6c:d0:38:65:30:4e:d4:0a:b4:34:4a:b2:01:1c:d0: e4:c9:d5:ee:5a:fa:c8:ef:e0:a0:31:7b:0b:ae:de: d1:60:1e:8d:15:a4:ab:f3:e0:06:c4:d4:0a:36:60: f8:1f:b6:05:69:5b:9a:0b:6f:d5:7a:56:70:45:71: f1:17:2e:90:dd:77:be:13:ab:e7:35:88:d1:9b:8e: 17:96:1d:72:9c:48:c9:d7:81:0e:13:99:ee:6a:42: be:55:29:da:c5:7d:a0:b9:56:72:a9:69:0c:ea:a7: 77:a3:54:a4:f5:e6:21:d7:e4:b8:46:53:12:d1:8e: 17:48:c3:4a:6e:cf:c0:5a:ca:c0:a2:7e:a1:91:97: af:ed:b9:04:32:f0:db:9e:f1:32:00:ec:69:86:af: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:A1:DE:02:03:B8:4D:FF:8E:CF:F4:22:41:1A:CF:AF:E0:C2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f6:66:1b:a5:a5:6b:6b:bd:68:b1:ec:d4:90:e4:82:86:1c: bf:02:56:19:25:15:bb:d9:22:d6:e8:ea:6b:5b:a7:4c:6b:59: 4f:7e:af:89:5c:6d:04:10:40:a1:a4:15:6c:ed:bc:20:65:fa: e2:94:c6:dc:a7:bd:ec:07:8e:f9:a1:a1:9f:95:34:d7:71:f5: 80:01:40:85:9e:df:66:a1:82:0c:c7:32:a1:77:59:b6:9d:6d: fe:2d:9f:c7:4c:6c:49:5e:4e:82:de:8a:c8:24:c2:31:6b:0b: 42:06:59:b0:28:66:8d:6f:0e:9d:8b:03:99:f2:d9:8f:7e:b5: b9:45:3e:08:6b:4e:a1:33:51:4b:2b:5d:0f:8c:d8:cf:1a:1c: 97:3c:7b:bb:bf:9c:60:f2:1f:bd:55:20:26:df:3e:e7:ce:f0: 2f:61:80:6b:c3:3b:e5:5d:70:a8:de:7b:6c:d3:d7:c1:9b:aa: c7:e7:83:bc:1f:cc:3f:1e:6e:4a:75:9a:bc:3a:f5:4a:03:68: 53:34:16:4b:72:fc:70:a5:61:b9:33:7e:bd:63:07:e0:43:2d: c3:e0:33:60:ef:5c:39:71:14:14:61:c4:13:7d:ca:9e:2c:a1: 2c:f2:5d:17:8b:e0:df:61:19:85:ed:de:52:28:ad:eb:8e:87: fa:88:39:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybjeeama9Bk5cyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NWNlODRlNWMtYjdiOS00OWJiLTgxZjYtMDk0ZWEwZjFkNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd055W0+JZ4rSr54b/IgCCe07CoFNucSjWyc WJa65QZuR+FD8hW16+oA8X3hAXqG4pMdVryDw2q/Z4BTYibJjjMVSIrXlGeSb+rn khpDsTnIVrCQsn357MsNBJF0e3UX3XbtDUyUXYts0DhlME7UCrQ0SrIBHNDkydXu WvrI7+CgMXsLrt7RYB6NFaSr8+AGxNQKNmD4H7YFaVuaC2/VelZwRXHxFy6Q3Xe+ E6vnNYjRm44Xlh1ynEjJ14EOE5nuakK+VSnaxX2guVZyqWkM6qd3o1Sk9eYh1+S4 RlMS0Y4XSMNKbs/AWsrAon6hkZev7bkEMvDbnvEyAOxphq8ktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQyod4CA7hN/47P9CJBGs+v4MLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzliNzUyNTctMzIyMi0z NTcxLThjM2YtODM3NWU1YzUwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP2ZhulpWtrvWix7NSQ5IKGHL8CVhklFbvZItbo6mtbp0xrWU9+r4lc bQQQQKGkFWztvCBl+uKUxtynvewHjvmhoZ+VNNdx9YABQIWe32ahggzHMqF3Wbad bf4tn8dMbEleToLeisgkwjFrC0IGWbAoZo1vDp2LA5ny2Y9+tblFPghrTqEzUUsr XQ+M2M8aHJc8e7u/nGDyH71VICbfPufO8C9hgGvDO+VdcKjee2zT18Gbqsfng7wf zD8ebkp1mrw69UoDaFM0Fkty/HClYbkzfr1jB+BDLcPgM2DvXDlxFBRhxBN9yp4s oSzyXReL4N9hGYXt3lIoreuOh/qIOVI= -----END CERTIFICATE-----Generated at Wed Apr 30 10:20:04 2025 by rpki-client