$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa File: efd98a5d-9b9d-3b51-9343-444044ca2470.roa (raw, json) Hash identifier: GJpYT8V0dxwu5IHToWTtCnmM9/C4ZBg4sjh5VE0dt6k= Subject key identifier: 86:D5:F5:EF:0C:F7:51:83:20:E4:49:EC:72:12:55:E7:DC:CF:D1:48 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285849E2253630495294111D9BB3A0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 11426 IP address blocks: 168.91.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:36:30:49:52:94:11:1d:9b:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=2b467e25-96ce-454e-a160-688f28b4171e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:8a:16:a7:0d:5c:e3:23:5c:13:6b:10:c0: 53:bd:ed:87:fe:3e:44:3a:cd:a8:24:d8:22:27:23: aa:75:8c:87:cd:4c:73:5c:1d:f8:6e:58:b7:d8:a0: 44:8e:f3:e7:a5:94:f5:47:03:0d:72:73:f9:e0:1e: a6:e7:2f:75:c4:e5:9e:98:42:86:81:a2:9b:c5:8f: 3c:71:a4:54:02:d5:bc:ff:2f:1f:54:a4:f6:93:07: 06:52:21:ea:22:50:be:48:86:b2:09:84:3c:d3:7b: 94:55:29:b0:a9:68:81:fc:93:3a:0a:fd:f0:2e:5c: ec:f1:96:af:1a:b6:f9:89:7a:b1:b4:a9:f4:b9:6d: f2:15:df:64:ee:f7:bb:13:7e:7e:30:cf:99:6b:77: 80:69:85:56:cc:82:5a:56:78:33:ac:2a:ca:25:ea: 4e:e2:f4:1c:f4:7f:5f:6a:a5:02:fc:0f:d5:5c:6b: c3:ab:e3:1f:2d:ce:95:9f:de:0e:e3:6b:8f:90:8b: a6:10:f5:f7:65:77:4b:95:0b:7a:e7:32:46:c3:47: 10:4c:fb:8d:b2:41:86:cd:fd:b9:30:93:0f:a4:6b: 92:02:54:2b:a1:c6:60:17:dd:fb:a8:3b:77:0d:79: 66:8e:ac:a1:12:ca:62:d7:ba:e7:4a:51:3c:23:d1: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:F5:EF:0C:F7:51:83:20:E4:49:EC:72:12:55:E7:DC:CF:D1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/efd98a5d-9b9d-3b51-9343-444044ca2470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e2:5f:ee:54:df:22:62:1e:01:70:7d:22:81:19:16:a8:c6: 16:15:75:9c:4b:04:c7:91:8d:87:fa:89:7a:cb:99:21:d3:8d: ad:75:52:fb:55:3e:38:8e:e1:9d:56:a5:05:0b:e7:83:2b:a2: 88:17:5e:3c:88:5f:34:12:47:b9:3d:26:49:35:3f:f3:af:22: b9:bc:26:bb:84:66:57:75:36:de:e4:fd:fa:15:2c:b9:fe:38: 84:45:15:b4:a7:ec:75:3d:9e:60:23:bc:30:e8:a7:96:bc:8a: c5:53:37:51:90:10:6c:d2:65:90:1e:1e:03:f2:e8:ad:e2:38: 15:74:eb:59:e0:d9:b0:46:34:cf:3e:ac:da:fb:57:1b:4b:4e: 3b:7a:f7:a1:94:6e:c2:99:3a:26:ce:4d:90:f1:dd:56:05:9b: 39:1d:8f:90:f4:06:f7:78:3d:fb:03:20:6e:03:66:32:da:ac: 81:d6:57:8e:32:e6:77:e4:d0:6f:e5:a5:bc:24:b0:3f:4e:70: a2:d5:34:c9:50:e5:ce:8d:d0:be:81:8e:b6:e1:78:ba:c4:4c: 9e:f3:da:cf:15:89:61:5d:d9:bc:f6:18:c7:c4:0a:f7:45:71: b7:9b:59:9a:74:f4:de:fb:59:97:be:73:0a:2a:31:03:40:db: 40:2f:ee:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTYwSVKUER2bs6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MmI0NjdlMjUtOTZjZS00NTRlLWExNjAtNjg4ZjI4YjQxNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsneKFqcNXOMjXBNrEMBTve2H/j5EOs2oJNgi JyOqdYyHzUxzXB34bli32KBEjvPnpZT1RwMNcnP54B6m5y91xOWemEKGgaKbxY88 caRUAtW8/y8fVKT2kwcGUiHqIlC+SIayCYQ803uUVSmwqWiB/JM6Cv3wLlzs8Zav Grb5iXqxtKn0uW3yFd9k7ve7E35+MM+Za3eAaYVWzIJaVngzrCrKJepO4vQc9H9f aqUC/A/VXGvDq+MfLc6Vn94O42uPkIumEPX3ZXdLlQt65zJGw0cQTPuNskGGzf25 MJMPpGuSAlQrocZgF937qDt3DXlmjqyhEspi17rnSlE8I9Gn2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbV9e8M91GDIORJ7HISVefcz9FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZWZkOThhNWQtOWI5ZC0z YjUxLTkzNDMtNDQ0MDQ0Y2EyNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPiX+5U3yJiHgFwfSKBGRaoxhYVdZxLBMeRjYf6iXrLmSHTja11UvtV PjiO4Z1WpQUL54MroogXXjyIXzQSR7k9Jkk1P/OvIrm8JruEZld1Nt7k/foVLLn+ OIRFFbSn7HU9nmAjvDDop5a8isVTN1GQEGzSZZAeHgPy6K3iOBV061ng2bBGNM8+ rNr7VxtLTjt696GUbsKZOibOTZDx3VYFmzkdj5D0Bvd4PfsDIG4DZjLarIHWV44y 5nfk0G/lpbwksD9OcKLVNMlQ5c6N0L6BjrbheLrETJ7z2s8ViWFd2bz2GMfECvdF cbebWZp09N77WZe+cwoqMQNA20Av7g0= -----END CERTIFICATE-----Generated at Sun Jun 15 14:11:34 2025 by rpki-client