$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa File: ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa (raw, json) Hash identifier: EPCKZtu3xnAWGj0ZIJoDRAZx00LEpkd5/GE43+sUDLA= Subject key identifier: 43:6A:60:BC:CE:3A:24:44:C8:6B:3D:79:40:4C:0D:7D:C6:9F:7E:77 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B71C0580D17661F0E300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 173.244.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b7:1c:05:80:d1:76:61:f0:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=d470cccb-eee2-49f5-a4d4-58fe56492075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:a4:6a:66:39:bc:3e:d4:55:f3:ab:e7:93: 0d:33:b5:ee:85:77:ab:19:cf:38:35:87:6f:76:7c: 98:36:66:8d:fd:83:2a:4b:b7:8f:b5:8f:e6:cb:d5: 4c:00:d1:2b:87:c7:be:d5:d9:b1:c7:16:58:10:a0: c4:ab:15:b3:5b:3a:a7:c6:46:38:92:cb:7b:3b:3e: b7:48:5b:4a:f5:9d:72:54:d8:c6:d2:96:61:2e:61: 04:11:9e:d4:78:f3:1e:30:e4:b0:86:fc:55:cf:f9: 91:d6:7d:92:7b:88:c3:0e:53:79:7f:79:ae:d8:03: 5a:27:4f:5c:59:a0:d4:4b:9e:9d:47:ca:3a:11:0d: 98:8c:1d:b4:61:e0:89:bf:bc:e1:27:e2:91:17:f1: 58:47:b3:a4:98:e8:fc:47:a9:19:02:f4:f1:9b:9b: 15:7e:30:93:55:ef:cd:9c:8c:8d:ff:54:c9:d8:33: c2:b3:9d:88:ef:21:6b:b8:7d:dc:07:b0:66:c8:a8: 45:70:64:b7:9a:43:99:40:55:29:83:7b:5f:49:6f: c3:59:11:6b:61:ba:ad:39:7c:08:62:a2:c4:60:c0: 20:30:a4:89:4a:82:a7:29:18:dd:fc:e1:92:bd:b7: c5:5e:d4:12:a0:6a:42:2d:ae:e8:8a:17:9a:71:cf: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:60:BC:CE:3A:24:44:C8:6B:3D:79:40:4C:0D:7D:C6:9F:7E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9c:a8:13:58:8f:b8:bf:38:e3:9f:2c:70:17:40:d0:99:35: 15:4e:05:08:8c:5b:80:49:c4:e4:ff:dd:cf:5d:05:21:96:69: 61:66:d1:67:61:6d:b0:6a:8d:50:f7:3e:7b:db:08:e6:36:69: 8c:b6:bd:54:b0:47:a2:94:26:d5:10:27:83:75:d7:c1:e3:7e: 7f:af:8b:f4:b1:c0:eb:4b:cd:73:93:0d:e5:49:0a:51:ed:cf: e8:72:00:79:2a:49:35:fc:42:a3:30:a5:cb:74:e8:62:8a:ff: 79:40:bf:de:44:56:de:7a:72:1f:f5:4e:f7:64:49:63:72:74: 99:73:60:23:69:73:2a:eb:7a:de:0c:e2:47:11:3d:4a:46:d1: 9a:a3:5b:38:b3:e1:ea:d7:58:9b:ab:1e:8b:b3:06:1f:54:9c: 0a:6f:9f:c5:94:a4:e3:ff:af:07:fd:14:8c:87:99:8f:31:99: 1e:09:83:79:87:23:9a:c7:63:d1:e8:e5:69:ce:4c:62:a8:85: f8:96:cf:77:75:84:21:f8:91:7b:93:dd:8b:3d:c7:fb:28:71: 50:9c:8b:f9:06:99:a4:17:e4:0c:9f:6b:c1:62:ae:fb:11:91: 14:08:be:0d:d8:28:08:f8:3b:fa:7d:54:9e:55:c7:61:17:5a: 72:f8:b1:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybccBYDRdmHw4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZDQ3MGNjY2ItZWVlMi00OWY1LWE0ZDQtNThmZTU2NDkyMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinGkamY5vD7UVfOr55MNM7XuhXerGc84NYdv dnyYNmaN/YMqS7ePtY/my9VMANErh8e+1dmxxxZYEKDEqxWzWzqnxkY4kst7Oz63 SFtK9Z1yVNjG0pZhLmEEEZ7UePMeMOSwhvxVz/mR1n2Se4jDDlN5f3mu2ANaJ09c WaDUS56dR8o6EQ2YjB20YeCJv7zhJ+KRF/FYR7OkmOj8R6kZAvTxm5sVfjCTVe/N nIyN/1TJ2DPCs52I7yFruH3cB7BmyKhFcGS3mkOZQFUpg3tfSW/DWRFrYbqtOXwI YqLEYMAgMKSJSoKnKRjd/OGSvbfFXtQSoGpCLa7oiheacc9edQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENqYLzOOiREyGs9eUBMDX3Gn353MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZWUxYjMyZTAtMGJhOC0z MjAwLTk0YzItYTEzNWUyYzZmNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKacqBNYj7i/OOOfLHAXQNCZNRVOBQiMW4BJxOT/3c9dBSGWaWFm0Wdh bbBqjVD3PnvbCOY2aYy2vVSwR6KUJtUQJ4N118Hjfn+vi/SxwOtLzXOTDeVJClHt z+hyAHkqSTX8QqMwpct06GKK/3lAv95EVt56ch/1TvdkSWNydJlzYCNpcyrret4M 4kcRPUpG0ZqjWziz4erXWJurHouzBh9UnApvn8WUpOP/rwf9FIyHmY8xmR4Jg3mH I5rHY9Ho5WnOTGKohfiWz3d1hCH4kXuT3Ys9x/socVCci/kGmaQX5Ayfa8FirvsR kRQIvg3YKAj4O/p9VJ5Vx2EXWnL4sRo= -----END CERTIFICATE-----Generated at Wed Apr 30 00:58:35 2025 by rpki-client