$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/61c0db7c-e0b8-3eda-8a8b-69d7e9f1c6c7.roa File: 61c0db7c-e0b8-3eda-8a8b-69d7e9f1c6c7.roa (raw, json) Hash identifier: mqnSFZ6Xai58iht+k90gMCJO+iJ3dfWCoa3tWapgnoc= Subject key identifier: 48:7B:04:DE:64:24:A4:8B:B7:3D:C8:6A:20:76:76:07:DE:83:A3:38 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858499C59E4F3A1854F0270ADED40 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/61c0db7c-e0b8-3eda-8a8b-69d7e9f1c6c7.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 834 IP address blocks: 75.127.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e4:f3:a1:85:4f:02:70:ad:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=8848c0f1-d1f2-491a-a15e-07599488cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:b0:9e:91:5c:39:6a:6c:ba:c5:a1:0b:54: 7c:e3:9d:44:bf:10:97:d6:d8:87:c2:04:92:6a:d0: 90:c6:6b:34:58:be:72:ae:4c:88:fe:bb:14:a8:08: 31:a2:54:76:34:92:22:9c:16:43:19:56:15:e4:fc: 1a:a8:91:a8:d0:17:c0:af:63:79:60:30:e3:69:3a: 91:52:e2:0e:16:fe:99:83:10:3e:a1:de:db:03:9c: f3:23:50:20:3d:0f:69:53:5e:05:cd:bf:03:47:24: 94:75:57:4b:2d:ea:b2:58:6d:b4:39:ac:cb:e1:63: 8c:bd:f7:78:6a:41:22:02:2c:ad:e9:86:75:33:ba: ea:fd:24:63:91:5a:70:c8:10:42:7c:00:ee:ec:93: 55:df:12:2a:c8:55:a5:a1:68:31:0d:fd:8f:ad:c2: 8e:cc:7c:cd:a2:da:da:ea:be:1f:17:08:a2:9e:5d: a1:46:ba:78:80:bb:6b:23:5a:e5:04:d6:e8:ba:ea: 60:24:a2:a4:05:90:26:a8:ef:04:f4:27:6b:55:36: 37:c6:7f:42:ec:46:ba:05:a1:19:02:63:33:ba:e2: cc:1d:0b:fc:fc:26:ba:39:0d:e3:f8:dd:71:01:49: c0:e4:9b:24:2e:ce:6b:d3:f8:6d:fe:f1:7a:cc:c7: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7B:04:DE:64:24:A4:8B:B7:3D:C8:6A:20:76:76:07:DE:83:A3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/61c0db7c-e0b8-3eda-8a8b-69d7e9f1c6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:53:a5:7c:be:80:f4:e5:7f:02:da:98:a7:45:b2:f2:bd:57: 61:1e:0d:59:cc:1a:08:cf:b1:02:67:73:b4:b3:89:60:6b:f6: 6d:ad:be:0c:33:c5:99:a3:ab:d1:0c:3d:8e:ae:7f:20:8c:b7: 30:67:9e:f2:80:17:73:06:55:2b:e8:bc:0c:33:1a:df:19:13: df:3a:d6:44:90:8d:19:36:ce:71:9d:46:e3:1e:1e:b8:b3:29: 3c:0e:5c:e7:d5:5b:fd:b1:48:da:60:45:b1:52:0d:b4:6e:19: 42:02:3f:b8:b4:22:5e:3f:93:34:d6:f1:a6:20:ee:ba:31:86: f4:03:07:c0:15:e8:dc:c6:f2:cc:a6:4f:8b:73:9f:0b:67:f4: 13:cb:61:06:71:39:5a:e5:2a:a6:4a:04:c1:29:93:5f:61:3a: 07:29:33:7c:32:17:fa:3d:72:68:9f:18:49:2f:11:b9:3e:f2: a2:f6:b8:b1:6c:79:a1:5b:cf:41:79:76:a3:03:3b:f9:7d:1f: a5:06:9e:17:32:ad:49:fe:00:31:8f:e2:da:28:8f:e8:da:46: e4:63:8e:a7:21:69:b2:a1:76:74:43:29:1b:e6:c2:52:fa:cf: b1:8f:a1:c1:09:5f:50:64:71:38:70:23:42:ff:4e:e6:f3:c7: 8f:35:1e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeTzoYVPAnCt7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ODg0OGMwZjEtZDFmMi00OTFhLWExNWUtMDc1OTk0ODhjYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleSwnpFcOWpsusWhC1R8451EvxCX1tiHwgSS atCQxms0WL5yrkyI/rsUqAgxolR2NJIinBZDGVYV5PwaqJGo0BfAr2N5YDDjaTqR UuIOFv6ZgxA+od7bA5zzI1AgPQ9pU14Fzb8DRySUdVdLLeqyWG20OazL4WOMvfd4 akEiAiyt6YZ1M7rq/SRjkVpwyBBCfADu7JNV3xIqyFWloWgxDf2PrcKOzHzNotra 6r4fFwiinl2hRrp4gLtrI1rlBNbouupgJKKkBZAmqO8E9CdrVTY3xn9C7Ea6BaEZ AmMzuuLMHQv8/Ca6OQ3j+N1xAUnA5JskLs5r0/ht/vF6zMcu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh7BN5kJKSLtz3IaiB2dgfeg6M4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNjFjMGRiN2MtZTBiOC0z ZWRhLThhOGItNjlkN2U5ZjFjNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS39kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1TpXy+gPTlfwLamKdFsvK9V2EeDVnMGgjPsQJnc7SziWBr9m2tvgwz xZmjq9EMPY6ufyCMtzBnnvKAF3MGVSvovAwzGt8ZE9861kSQjRk2znGdRuMeHriz KTwOXOfVW/2xSNpgRbFSDbRuGUICP7i0Il4/kzTW8aYg7roxhvQDB8AV6NzG8sym T4tznwtn9BPLYQZxOVrlKqZKBMEpk19hOgcpM3wyF/o9cmifGEkvEbk+8qL2uLFs eaFbz0F5dqMDO/l9H6UGnhcyrUn+ADGP4tooj+jaRuRjjqchabKhdnRDKRvmwlL6 z7GPocEJX1BkcThwI0L/Tubzx481Hs8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:58 2025 by rpki-client