$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa File: defae92a-38aa-3188-8dfa-60a7fa4efaff.roa (raw, json) Hash identifier: dlZoLoQynIisRaB3Jgh1HyKHyViLAc4B8ROfLx3pnrs= Subject key identifier: 82:B7:63:39:28:23:BE:6F:35:2A:C6:91:1C:DF:31:86:1C:C7:FC:C2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B923E34695CF259D8980 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b9:23:e3:46:95:cf:25:9d:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=2abd3259-7e6c-4abb-ad9e-71b29906e27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:c3:58:cd:88:3d:15:f3:e3:ee:de:d7:59: 06:dd:63:9c:37:06:cf:10:f6:94:11:fa:6a:fb:06: ef:71:36:bf:47:ae:4e:00:54:a8:32:72:4b:37:97: 8b:1c:69:46:9f:03:a4:ff:4b:17:44:a0:74:f7:c8: f0:5b:20:0a:1b:e8:18:cb:70:33:2b:fd:87:4a:ef: a2:2c:f6:54:69:31:d4:44:41:45:35:d3:a7:fc:3b: 4f:6b:6d:92:4c:72:8f:b4:ab:cd:96:74:f7:f4:b9: 1d:17:4b:0b:52:ac:1c:6b:c2:d4:df:7f:8d:bd:b4: f7:64:73:8c:ab:62:fb:b6:90:ea:ea:0f:95:9e:2d: 0f:3f:a8:12:fb:11:8e:25:61:2d:7f:dd:08:ec:45: 80:03:27:5e:b9:19:1f:25:c8:ad:64:b0:c8:96:67: d4:61:64:b6:9a:64:4e:56:21:bf:16:b0:e4:11:8d: 27:67:73:e4:8d:14:99:e1:16:9f:0f:c3:e6:94:64: de:c3:b1:56:5c:50:8d:d8:b2:63:7d:3a:da:73:2c: c7:ab:69:fb:a9:4a:0c:09:58:76:bd:da:bd:6b:74: ca:a3:18:43:e4:29:e9:da:37:06:ae:16:09:42:5e: e0:7e:f6:1a:24:47:72:f8:94:e2:31:cb:05:53:ba: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B7:63:39:28:23:BE:6F:35:2A:C6:91:1C:DF:31:86:1C:C7:FC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d4:4e:b8:20:cb:96:a0:a6:9d:57:30:72:d8:64:aa:14:94: 82:9e:05:4f:89:8d:df:d2:1b:ff:f2:9e:04:d6:8e:0e:fc:9a: a0:8e:4a:48:40:fc:64:f0:5d:f5:55:b4:c6:6c:c7:ec:42:87: a6:75:d3:d3:b1:ea:7b:f2:8d:f5:f9:b0:c3:e9:a8:70:7e:2b: 0a:e4:23:ad:e3:54:55:ba:79:17:c4:dd:f0:f6:b6:9b:e7:c1: f1:1a:c5:0e:e4:2d:78:1f:39:e1:34:23:2e:b6:6f:91:84:be: a4:93:6f:f5:78:2f:21:be:00:d2:ae:f3:4e:2b:f0:9e:0f:c1: 4f:6b:b3:ad:dd:ea:d2:19:54:aa:a2:b4:c9:fa:d8:39:5d:89: b2:3e:f6:37:b6:9c:f3:eb:c7:94:2e:13:f3:23:0c:8c:51:d8: 5a:e0:19:36:15:54:14:1b:b3:a5:e2:b0:29:54:0a:2c:cb:87: 2a:7f:d9:ef:e5:d7:a1:64:1c:1d:99:b0:49:62:5d:0d:48:38: e5:57:eb:c6:b3:9d:bd:02:98:7f:35:75:c0:8e:87:04:b3:90: 94:2d:42:d6:52:91:0e:57:b6:bb:ac:71:4c:0a:ef:67:f1:a3: 87:eb:e1:4b:a3:46:fe:d3:b5:cd:64:46:49:30:dc:72:b7:3b: 8f:cc:69:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybkj40aVzyWdiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk MmFiZDMyNTktN2U2Yy00YWJiLWFkOWUtNzFiMjk5MDZlMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo3DWM2IPRXz4+7e11kG3WOcNwbPEPaUEfpq +wbvcTa/R65OAFSoMnJLN5eLHGlGnwOk/0sXRKB098jwWyAKG+gYy3AzK/2HSu+i LPZUaTHUREFFNdOn/DtPa22STHKPtKvNlnT39LkdF0sLUqwca8LU33+NvbT3ZHOM q2L7tpDq6g+Vni0PP6gS+xGOJWEtf90I7EWAAydeuRkfJcitZLDIlmfUYWS2mmRO ViG/FrDkEY0nZ3PkjRSZ4RafD8PmlGTew7FWXFCN2LJjfTracyzHq2n7qUoMCVh2 vdq9a3TKoxhD5Cnp2jcGrhYJQl7gfvYaJEdy+JTiMcsFU7rKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK3YzkoI75vNSrGkRzfMYYcx/zCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGVmYWU5MmEtMzhhYS0z MTg4LThkZmEtNjBhN2ZhNGVmYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8heMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTUTrggy5agpp1XMHLYZKoUlIKeBU+Jjd/SG//yngTWjg78mqCOSkhA /GTwXfVVtMZsx+xCh6Z109Ox6nvyjfX5sMPpqHB+KwrkI63jVFW6eRfE3fD2tpvn wfEaxQ7kLXgfOeE0Iy62b5GEvqSTb/V4LyG+ANKu804r8J4PwU9rs63d6tIZVKqi tMn62DldibI+9je2nPPrx5QuE/MjDIxR2FrgGTYVVBQbs6XisClUCizLhyp/2e/l 16FkHB2ZsEliXQ1IOOVX68aznb0CmH81dcCOhwSzkJQtQtZSkQ5XtruscUwK72fx o4fr4UujRv7Ttc1kRkkw3HK3O4/MafA= -----END CERTIFICATE-----Generated at Wed Apr 30 14:51:06 2025 by rpki-client