$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa File: 400e6027-1418-38f3-8d41-13b0faa52044.roa (raw, json) Hash identifier: TNNdqCToUwVfL03BrtsjTKvU5277AhGrLhMk8zvIXg0= Subject key identifier: DF:87:52:1A:DC:F3:EE:96:A9:43:CF:A4:8A:DE:7E:B0:92:2C:7B:87 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285849806F1E6D7CB603ED2C8BFC00 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 149428 IP address blocks: 168.91.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1e:6d:7c:b6:03:ed:2c:8b:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=f18d477b-5ac9-47f9-9da0-095a20183f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:59:b8:67:e1:03:9b:0a:f6:ab:63:59:8b: 80:5e:2b:0c:1d:5c:8f:39:5e:02:12:50:55:a5:7e: 23:61:e0:ac:94:4b:de:1a:56:6f:b6:77:ad:04:be: a8:97:54:c6:66:4e:36:f6:c4:e6:43:55:c7:bb:0e: fd:85:2d:fd:3b:36:c9:6f:ff:1a:b7:2c:da:bd:4e: 0f:24:39:2f:e5:35:41:86:cd:12:e8:2f:a6:90:b4: d0:54:17:a2:76:2e:5c:eb:b5:2e:bb:5b:b6:00:4d: 1f:23:c4:76:e5:c2:15:e2:06:7b:4c:58:9f:2e:e7: 2b:8f:1e:a7:93:ad:30:de:f4:3b:16:48:00:a4:00: cc:db:a7:60:7c:56:8a:9d:59:31:7f:9a:49:6b:bd: 5d:f1:4d:e0:03:29:a3:10:c9:0f:fa:3b:48:67:7c: 6b:42:b8:24:c8:f2:9e:8d:14:98:17:40:c9:32:06: f7:34:41:b8:ce:e6:20:40:ed:9f:b9:4e:ea:15:b7: 5d:d8:61:e5:cd:06:1a:61:89:fe:52:ee:48:3a:9d: ef:f6:30:57:54:35:67:e3:68:19:f1:8e:5a:5c:be: 6b:e7:db:ef:d5:d6:2d:f3:6f:25:a2:10:a1:9f:f5: b1:36:90:78:1f:47:3e:a1:cc:16:0d:b8:70:4d:b7: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:52:1A:DC:F3:EE:96:A9:43:CF:A4:8A:DE:7E:B0:92:2C:7B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/400e6027-1418-38f3-8d41-13b0faa52044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:32:29:9a:fb:00:10:a9:21:39:1a:e6:13:f6:71:33:eb:ae: 44:ae:19:05:35:3b:cf:43:6a:67:ff:f3:d6:eb:01:bb:24:7b: 04:c7:7a:72:61:da:68:dd:24:c7:92:bd:3d:cc:d0:a8:d5:b5: 18:a1:2d:99:7d:ad:e7:05:11:7f:37:49:ea:63:a8:fa:ca:4c: 38:5a:66:3a:36:94:f1:31:83:e3:d0:ca:49:1e:b9:6b:7c:e2: a2:a1:74:d6:d7:e1:e7:49:10:33:3a:a1:e8:90:c0:79:6a:27: 07:80:18:ef:c3:80:94:07:cf:65:00:8e:88:db:af:fa:bc:4d: 0f:9b:ab:96:8f:d8:50:78:27:75:11:68:68:bd:48:50:2a:9c: 88:f6:09:7f:8e:b5:90:97:6d:38:c4:94:f1:94:f2:f3:7a:8d: 2f:a5:54:2d:80:f2:d1:85:f8:28:0c:2c:c4:58:18:27:92:35: c8:79:3b:73:f2:ba:44:93:d6:ad:79:91:64:84:96:e8:01:e5: 53:18:af:a3:4a:66:4f:ae:22:03:47:1e:5a:3b:f1:8c:25:f2: 02:8a:67:df:5a:6c:7b:41:fa:0a:7d:c8:ad:77:58:e6:d6:ba: 75:a7:11:8c:f1:4e:05:08:88:20:dc:82:41:fb:09:db:f9:bf: 63:2f:86:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbx5tfLYD7SyL/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZjE4ZDQ3N2ItNWFjOS00N2Y5LTlkYTAtMDk1YTIwMTgzZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpZuGfhA5sK9qtjWYuAXisMHVyPOV4CElBV pX4jYeCslEveGlZvtnetBL6ol1TGZk429sTmQ1XHuw79hS39OzbJb/8atyzavU4P JDkv5TVBhs0S6C+mkLTQVBeidi5c67Uuu1u2AE0fI8R25cIV4gZ7TFifLucrjx6n k60w3vQ7FkgApADM26dgfFaKnVkxf5pJa71d8U3gAymjEMkP+jtIZ3xrQrgkyPKe jRSYF0DJMgb3NEG4zuYgQO2fuU7qFbdd2GHlzQYaYYn+Uu5IOp3v9jBXVDVn42gZ 8Y5aXL5r59vv1dYt828lohChn/WxNpB4H0c+ocwWDbhwTbfEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+HUhrc8+6WqUPPpIrefrCSLHuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNDAwZTYwMjctMTQxOC0z OGYzLThkNDEtMTNiMGZhYTUyMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4yKZr7ABCpITka5hP2cTPrrkSuGQU1O89Damf/89brAbskewTHenJh 2mjdJMeSvT3M0KjVtRihLZl9recFEX83SepjqPrKTDhaZjo2lPExg+PQykkeuWt8 4qKhdNbX4edJEDM6oeiQwHlqJweAGO/DgJQHz2UAjojbr/q8TQ+bq5aP2FB4J3UR aGi9SFAqnIj2CX+OtZCXbTjElPGU8vN6jS+lVC2A8tGF+CgMLMRYGCeSNch5O3Py ukST1q15kWSElugB5VMYr6NKZk+uIgNHHlo78Ywl8gKKZ99abHtB+gp9yK13WObW unWnEYzxTgUIiCDcgkH7Cdv5v2Mvhqc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:28 2025 by rpki-client