$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa File: 86af315a-812f-3f1f-a43f-8f50cbe24315.roa (raw, json) Hash identifier: wFCkRvjypTqLOrSNLAwzGE3ip5KAzpTW6EljN0z5h2Q= Subject key identifier: 2E:99:8B:5A:D9:72:45:F5:C0:E1:CC:AE:A0:7D:9C:B9:34:30:66:6F Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285849955F12F6ED9A08C7E2A7A440 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 29802 IP address blocks: 75.127.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:12:f6:ed:9a:08:c7:e2:a7:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3ad46390-fcc4-429e-88eb-cd545146bf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:11:ea:8b:95:2b:9d:52:5c:5b:3c:b2:cf: 46:53:e2:8c:b4:d5:f3:2e:92:57:74:61:cc:5a:2a: 43:a3:03:4d:08:b4:1f:0b:c5:cf:c1:be:c8:55:28: 80:8d:86:bb:d4:93:05:64:21:2d:77:c2:69:cb:06: 2c:7f:68:b3:e0:34:fa:54:66:ab:ea:8a:15:09:5b: 65:a2:e3:81:e0:a1:31:9b:95:9d:02:61:64:c2:cb: 58:bb:15:9c:6c:97:e4:f5:08:92:58:65:bf:26:84: 42:3a:a7:e6:14:95:05:69:af:d4:e5:15:e1:0d:6f: 16:21:20:ae:0d:ba:e3:0a:4a:a2:39:59:e3:dc:b9: e0:4c:b5:a2:b2:ca:25:d7:f8:2d:db:b3:13:a5:e7: 24:46:c5:91:d8:6d:6c:36:d9:23:ea:e1:57:a8:f6: 9c:d8:17:b4:72:f3:54:1b:2e:c4:d9:86:ae:c9:e1: 90:9b:1c:f1:a6:d8:71:44:13:24:5b:51:6c:c1:e9: c5:6a:15:a8:59:d8:c1:6e:82:41:59:89:17:cf:c4: bc:b0:a8:48:8d:f5:e6:82:61:ba:58:9c:03:7b:82: 7a:bc:8d:59:ea:36:38:fe:8a:4b:94:26:6f:9b:e0: 23:46:ce:7c:5a:e4:c0:0a:62:a2:6a:e0:6e:d7:34: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:8B:5A:D9:72:45:F5:C0:E1:CC:AE:A0:7D:9C:B9:34:30:66:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4a:62:b9:ca:80:c2:29:c7:e5:8a:49:d2:10:20:41:c8:ea: 08:0c:b1:5e:de:a3:79:33:ff:2e:87:44:eb:9c:bd:b6:89:59: 76:60:75:e3:4c:c2:05:52:61:a8:1c:d6:be:71:81:76:a2:ad: 88:4f:d4:7e:b8:35:ab:97:0a:cd:1d:50:ca:05:35:15:30:d0: c0:01:f8:d4:dc:d1:7a:43:00:d9:b4:ca:f6:88:d2:46:b1:ef: 86:66:ac:d2:6b:ba:1f:57:f8:e8:bd:c7:f7:03:75:58:56:ed: 27:8d:65:31:f8:1a:46:90:b8:8d:9b:46:02:44:24:c5:b7:f4: 27:bf:10:41:c1:fc:78:2a:36:ac:bb:5f:0f:ba:ff:37:15:62: 0c:58:e1:99:4b:d8:80:ba:a7:44:17:b5:2e:1e:70:b5:bb:6a: 4b:d4:4e:20:07:7e:10:ea:cd:09:06:59:a6:a2:57:04:24:3e: 2b:ea:b7:0d:c4:b8:84:47:b2:ef:74:0e:0f:53:6a:f4:d5:3c: cb:60:b2:1e:2f:49:d6:14:5b:41:ae:28:e5:1a:cb:8a:71:51: ac:23:9d:a6:50:69:89:d0:67:ac:a0:75:47:18:44:8e:68:c1: a0:39:5c:47:77:9a:b2:f0:8f:ee:51:8f:31:7c:17:7f:4e:d1: f6:73:7f:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxL27ZoIx+KnpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk M2FkNDYzOTAtZmNjNC00MjllLTg4ZWItY2Q1NDUxNDZiZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCcR6ouVK51SXFs8ss9GU+KMtNXzLpJXdGHM WipDowNNCLQfC8XPwb7IVSiAjYa71JMFZCEtd8JpywYsf2iz4DT6VGar6ooVCVtl ouOB4KExm5WdAmFkwstYuxWcbJfk9QiSWGW/JoRCOqfmFJUFaa/U5RXhDW8WISCu DbrjCkqiOVnj3LngTLWissol1/gt27MTpeckRsWR2G1sNtkj6uFXqPac2Be0cvNU Gy7E2YauyeGQmxzxpthxRBMkW1FswenFahWoWdjBboJBWYkXz8S8sKhIjfXmgmG6 WJwDe4J6vI1Z6jY4/opLlCZvm+AjRs58WuTACmKiauBu1zRXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6Zi1rZckX1wOHMrqB9nLk0MGZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODZhZjMxNWEtODEyZi0z ZjFmLWE0M2YtOGY1MGNiZTI0MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS395MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpKYrnKgMIpx+WKSdIQIEHI6ggMsV7eo3kz/y6HROucvbaJWXZgdeNM wgVSYagc1r5xgXairYhP1H64NauXCs0dUMoFNRUw0MAB+NTc0XpDANm0yvaI0kax 74ZmrNJruh9X+Oi9x/cDdVhW7SeNZTH4GkaQuI2bRgJEJMW39Ce/EEHB/HgqNqy7 Xw+6/zcVYgxY4ZlL2IC6p0QXtS4ecLW7akvUTiAHfhDqzQkGWaaiVwQkPivqtw3E uIRHsu90Dg9TavTVPMtgsh4vSdYUW0GuKOUay4pxUawjnaZQaYnQZ6ygdUcYRI5o waA5XEd3mrLwj+5RjzF8F39O0fZzf8U= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:40 2025 by rpki-client