$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa File: c944d290-2cb7-3519-81ca-49e6c64203c5.roa (raw, json) Hash identifier: 8dGPg/VBZPwnD/oBI1tE3ULe+hZP7fTxlcPeY2OsNqw= Subject key identifier: 67:C9:93:A4:FD:8A:47:39:EF:3C:E0:74:60:AB:43:7B:9D:FF:15:C4 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285849806F1382F19E9966DA17D5A0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 834 IP address blocks: 216.180.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:13:82:f1:9e:99:66:da:17:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=33ef0da6-0b3f-4654-a852-83b96d21cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:7e:bf:64:08:1b:82:d0:8d:66:ba:f5:04: 69:d9:75:b3:f4:59:4d:e9:fe:82:f0:16:94:ba:1b: a9:66:87:54:50:7d:c7:f5:b6:10:f9:25:60:5d:49: 74:ed:87:29:bb:d8:85:0c:10:2c:a8:8a:14:4e:4b: d7:95:72:20:5f:aa:9e:c1:df:6b:20:43:5d:49:c7: a3:3e:a3:08:f1:1e:c5:1c:e8:fb:83:1d:a0:03:4c: 89:85:10:e4:14:06:77:e9:1d:4a:1e:62:cf:be:30: 54:f8:9c:0c:72:62:2f:46:ba:68:16:29:a0:38:87: 2c:54:c8:c3:cf:1a:ca:fc:e3:60:40:d8:26:72:36: a6:64:b1:dd:59:9d:82:89:00:f9:14:cc:76:c2:77: fa:f2:49:4c:f3:ba:89:ee:ed:84:1d:9e:25:8c:b5: a1:8f:f5:6d:02:7b:10:ba:2f:56:bc:2a:63:17:0b: 6e:3f:2e:8e:c0:e5:30:e4:0e:8f:5f:c3:17:f0:11: 2b:f1:83:77:1f:7a:51:81:8c:28:c5:11:b6:3d:5e: c0:84:24:7f:b3:60:a1:b3:b8:33:f6:87:0a:f2:27: 50:15:4c:f2:31:92:e7:a3:16:3c:36:0d:cf:52:c8: db:a4:75:f8:01:33:ae:cb:a1:c4:69:e3:1a:db:29: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C9:93:A4:FD:8A:47:39:EF:3C:E0:74:60:AB:43:7B:9D:FF:15:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:57:e0:aa:cd:7a:95:3c:92:9a:fc:9e:58:66:50:e6:1d:ee: 72:54:21:24:ba:c3:a7:0f:c6:82:81:40:d3:72:66:33:88:99: ed:91:3e:1c:bc:59:c9:ad:98:13:81:a2:bd:c8:cb:67:1a:c2: cb:2c:0c:8e:ec:82:35:db:f3:3a:90:46:81:ef:2b:60:62:ee: 54:87:27:16:83:39:bb:31:6c:58:2e:99:48:a1:29:0b:b8:f1: e8:15:db:f8:41:12:b7:4b:bf:a2:f8:2f:c0:7d:e2:17:e0:61: 39:73:7a:92:d8:2e:eb:93:bd:b5:2d:b8:45:3c:e0:d1:a4:b7: 90:86:97:92:99:8a:e2:d2:b1:76:94:2c:b0:6d:b3:51:5e:6e: c3:4a:11:b2:08:32:6f:cb:43:3f:75:98:c5:77:c7:0d:63:12: 9e:b6:2b:64:60:e3:34:e4:ed:e9:9e:f7:90:48:47:e4:2b:74: 51:e4:c8:24:a7:d8:04:f1:2b:c6:8b:da:a4:54:3e:14:47:b7: 9a:7c:91:c1:c4:54:7f:27:f3:e6:0b:ff:b7:08:ec:c8:5e:19: 54:32:29:05:eb:b3:34:7f:f1:bb:84:a0:4b:46:d1:ac:2e:2e: 84:be:10:3d:8d:28:98:06:6d:09:e3:a9:26:b6:1a:79:54:a6: 50:f7:ac:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxOC8Z6ZZtoX1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MzNlZjBkYTYtMGIzZi00NjU0LWE4NTItODNiOTZkMjFjZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIV+v2QIG4LQjWa69QRp2XWz9FlN6f6C8BaU uhupZodUUH3H9bYQ+SVgXUl07Ycpu9iFDBAsqIoUTkvXlXIgX6qewd9rIENdScej PqMI8R7FHOj7gx2gA0yJhRDkFAZ36R1KHmLPvjBU+JwMcmIvRrpoFimgOIcsVMjD zxrK/ONgQNgmcjamZLHdWZ2CiQD5FMx2wnf68klM87qJ7u2EHZ4ljLWhj/VtAnsQ ui9WvCpjFwtuPy6OwOUw5A6PX8MX8BEr8YN3H3pRgYwoxRG2PV7AhCR/s2Chs7gz 9ocK8idQFUzyMZLnoxY8Ng3PUsjbpHX4ATOuy6HEaeMa2ym5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfJk6T9ikc57zzgdGCrQ3ud/xXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYzk0NGQyOTAtMmNiNy0z NTE5LTgxY2EtNDllNmM2NDIwM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1X4KrNepU8kpr8nlhmUOYd7nJUISS6w6cPxoKBQNNyZjOIme2RPhy8 WcmtmBOBor3Iy2cawsssDI7sgjXb8zqQRoHvK2Bi7lSHJxaDObsxbFgumUihKQu4 8egV2/hBErdLv6L4L8B94hfgYTlzepLYLuuTvbUtuEU84NGkt5CGl5KZiuLSsXaU LLBts1FebsNKEbIIMm/LQz91mMV3xw1jEp62K2Rg4zTk7eme95BIR+QrdFHkyCSn 2ATxK8aL2qRUPhRHt5p8kcHEVH8n8+YL/7cI7MheGVQyKQXrszR/8buEoEtG0awu LoS+ED2NKJgGbQnjqSa2GnlUplD3rKc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:59 2025 by rpki-client