$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa File: cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa (raw, json) Hash identifier: rAzkY+LOHoF1bEewjYS0Nnzv08S1OGTMOO0Cq8ZKmcY= Subject key identifier: 2A:97:13:BB:CA:1D:8A:A9:D7:25:89:A6:CD:69:91:CE:48:60:D5:AC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B89893CF2652D467CC00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:98:93:cf:26:52:d4:67:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=1b3b9402-3fcf-4fe3-bc0d-691547888fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:4d:5f:c9:66:73:5a:eb:77:33:78:3e:d9: f0:e9:55:d8:14:e6:b3:d1:2e:b0:d0:62:5d:cb:15: 11:93:02:b7:5c:7e:24:fe:b7:7a:a2:bf:82:6d:3d: 88:d9:59:bd:9a:de:96:f0:9c:15:0b:d4:40:10:aa: d3:da:e6:5f:d6:44:1d:d2:76:a9:14:22:c4:b0:79: b1:bb:c5:0f:bd:fb:b9:92:68:51:bf:7e:1f:2a:d3: 40:39:6b:e9:be:b2:01:f9:cb:82:78:ac:f9:23:63: c4:a6:f0:64:7c:6a:9e:ea:47:e5:25:cc:51:b3:3c: d7:56:36:ed:25:c0:b6:dc:4f:d3:b3:0d:7f:ad:40: 00:dc:46:70:3b:4b:11:e4:8b:81:08:d7:69:4f:41: e5:23:c6:f4:6c:12:a9:f2:a6:ce:25:17:12:36:da: cd:17:2d:05:39:2b:77:88:8a:5f:b1:d2:30:cb:dc: 4e:c6:9a:00:10:c3:99:9f:fa:cd:7a:69:63:a3:1e: 88:1d:67:99:76:6a:20:0c:eb:23:ec:d0:e3:43:81: b0:06:c1:4d:d6:17:a3:ca:fc:a4:39:b6:ab:43:62: 5a:8b:4b:04:4a:1a:52:85:7c:23:25:99:27:ce:5b: bd:57:82:b8:ef:73:df:67:1c:af:59:c3:ab:8e:a9: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:13:BB:CA:1D:8A:A9:D7:25:89:A6:CD:69:91:CE:48:60:D5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d4:d4:08:6d:d7:58:76:94:61:1c:2b:07:c0:9f:4a:1b:db: f0:50:91:6c:d2:be:20:9d:f4:46:78:1e:af:64:15:5c:3e:8e: 15:93:f4:f2:15:22:2a:97:40:29:c1:d9:0c:d9:52:a3:e2:cd: d9:55:16:89:e2:14:cf:70:18:96:d8:f2:6e:31:0c:ab:78:4e: e0:7e:8f:6a:4b:eb:78:95:25:c9:f8:ff:d8:ac:14:c1:52:2f: 91:44:be:0a:ad:5f:58:45:bf:c5:e6:ef:23:63:6e:ad:5d:22: b3:30:ef:86:d4:d5:2e:1a:ed:5c:35:3d:46:86:38:28:e5:9b: 35:41:1d:f2:38:53:a5:4e:c0:7e:35:76:15:2b:25:c1:0f:9f: 6e:13:41:cb:e5:7c:22:d1:fa:da:e2:76:d0:d8:8d:3a:13:65: e8:28:a7:f4:4b:b0:f3:a2:2c:40:0f:40:22:8f:02:92:ce:a4: 3b:75:c5:1a:fe:3d:2d:59:bc:71:ae:18:6a:e0:bd:1b:27:f4: 21:31:a0:a2:ec:bc:94:d1:a4:b1:28:cc:b3:a0:67:7c:7f:cf: 93:ee:6b:fc:50:77:ba:6c:fa:86:e9:1a:79:07:28:e5:ab:c5: 28:1a:79:ad:e9:0f:f7:3d:08:70:ef:a1:ac:58:c9:a9:9d:f9: b8:cf:ad:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybiYk88mUtRnzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk MWIzYjk0MDItM2ZjZi00ZmUzLWJjMGQtNjkxNTQ3ODg4ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9NX8lmc1rrdzN4Ptnw6VXYFOaz0S6w0GJd yxURkwK3XH4k/rd6or+CbT2I2Vm9mt6W8JwVC9RAEKrT2uZf1kQd0napFCLEsHmx u8UPvfu5kmhRv34fKtNAOWvpvrIB+cuCeKz5I2PEpvBkfGqe6kflJcxRszzXVjbt JcC23E/Tsw1/rUAA3EZwO0sR5IuBCNdpT0HlI8b0bBKp8qbOJRcSNtrNFy0FOSt3 iIpfsdIwy9xOxpoAEMOZn/rNemljox6IHWeZdmogDOsj7NDjQ4GwBsFN1hejyvyk ObarQ2Jai0sEShpShXwjJZknzlu9V4K473PfZxyvWcOrjqkQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqXE7vKHYqp1yWJps1pkc5IYNWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvY2ZmMWFiZGMtZmFkYS0z YTFlLWE5NjItMDA0M2MyZGQ3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTU1Aht11h2lGEcKwfAn0ob2/BQkWzSviCd9EZ4Hq9kFVw+jhWT9PIV IiqXQCnB2QzZUqPizdlVFoniFM9wGJbY8m4xDKt4TuB+j2pL63iVJcn4/9isFMFS L5FEvgqtX1hFv8Xm7yNjbq1dIrMw74bU1S4a7Vw1PUaGOCjlmzVBHfI4U6VOwH41 dhUrJcEPn24TQcvlfCLR+tridtDYjToTZegop/RLsPOiLEAPQCKPApLOpDt1xRr+ PS1ZvHGuGGrgvRsn9CExoKLsvJTRpLEozLOgZ3x/z5Pua/xQd7ps+obpGnkHKOWr xSgaea3pD/c9CHDvoaxYyamd+bjPrdU= -----END CERTIFICATE-----Generated at Wed Apr 30 09:39:58 2025 by rpki-client