$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa File: 7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json) Hash identifier: +GbIkfZ37cJVKyTCLhQUpZj2zYX7XRTFcsnUWm+q1U8= Subject key identifier: 59:C5:CB:AC:45:BB:D9:0F:DB:AC:0F:46:4D:E8:54:6D:21:1E:49:E1 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F43285849C904F473F9CF1557C9B71400 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 55 IP address blocks: 128.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f4:73:f9:cf:15:57:c9:b7:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=cc967535-fd34-493e-b6f8-8b335f3dc625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:68:2d:15:bc:29:6d:29:3d:71:c7:38:fe: bf:38:6a:48:c3:0f:ed:c8:40:7a:ff:67:46:3d:0d: 88:cc:8c:6d:0f:1b:e0:59:28:24:79:95:b5:95:28: 90:70:cd:59:fc:42:68:e5:be:81:f6:f7:dc:b6:4e: 1c:74:3d:d9:cb:69:c4:0a:37:da:d8:e7:23:1f:a1: fc:43:35:ea:31:49:d0:fc:52:3c:d8:25:72:62:ed: 85:c2:9e:38:31:c6:57:60:71:f2:4a:7d:9b:1a:4d: 5c:d6:2f:43:62:de:83:d4:ba:39:72:ef:d8:d2:92: 39:51:c3:f6:15:4a:fd:c5:59:37:72:bc:82:80:af: 5f:f6:7e:ae:44:ca:5e:7b:23:bd:76:4b:c4:d4:76: 22:ae:ee:48:b0:70:99:60:da:f0:15:ee:44:4b:6c: 34:b0:5a:11:ca:00:1e:5a:a0:0a:c5:8d:2a:00:a0: b7:e5:af:98:7d:2e:9e:3b:70:ed:07:6b:3b:f3:2c: 6c:33:ad:db:95:5f:19:c9:c2:65:45:89:79:40:f5: 6a:c9:36:41:1b:45:fc:1f:5d:1b:d1:8b:9a:0c:ae: 57:fe:45:17:82:a0:34:2e:10:83:4b:f3:f4:bf:18: e5:d1:2a:00:53:ec:f9:c9:04:74:13:30:05:b1:de: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C5:CB:AC:45:BB:D9:0F:DB:AC:0F:46:4D:E8:54:6D:21:1E:49:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:65:68:5b:8a:ba:d3:e1:a6:7e:a1:82:0a:99:12:1d:9a:e1: 03:81:39:36:a1:62:d8:c3:53:54:26:b8:15:7d:91:47:17:6d: c4:14:b7:f6:9c:ea:c9:91:b9:d8:e9:4c:f6:0a:b7:02:c5:ca: ac:12:3c:99:83:6c:c4:5e:fa:a8:27:51:8c:a5:bb:d1:86:89: f6:e1:ad:b8:76:88:15:a1:d8:42:eb:05:d1:d9:d9:fe:4a:e1: 47:73:56:1a:2e:e5:81:43:be:50:cb:95:c6:71:a5:6e:36:96: 39:46:2a:c9:e9:08:7e:29:81:22:17:b5:17:35:cb:75:71:36: 0c:12:38:c2:a2:a2:22:bd:aa:7b:4b:b7:ea:d3:0d:1e:f2:74: d7:3f:ea:40:49:6f:de:ce:4c:78:5b:18:97:59:e6:34:fe:6e: da:8d:52:17:e3:d6:85:f1:1d:3c:04:86:b4:a0:7c:5a:1d:4d: 26:7b:d4:43:c7:15:6f:0a:48:29:c9:fc:a2:a2:c2:3f:06:0f: dd:3b:74:58:09:45:a7:df:b5:89:79:e0:0c:d5:96:27:7c:d3: 4e:52:03:74:c7:13:98:8c:c6:05:9d:73:c4:33:94:ef:73:24: a7:3e:f2:4a:35:23:e0:af:12:cc:91:ea:27:85:d0:01:77:97: dc:7e:b9:58 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnJBPRz+c8VV8m3FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2M5Njc1MzUtZmQzNC00OTNlLWI2ZjgtOGIzMzVmM2RjNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIloLRW8KW0pPXHHOP6/OGpIww/tyEB6/2dG PQ2IzIxtDxvgWSgkeZW1lSiQcM1Z/EJo5b6B9vfctk4cdD3Zy2nECjfa2OcjH6H8 QzXqMUnQ/FI82CVyYu2Fwp44McZXYHHySn2bGk1c1i9DYt6D1Lo5cu/Y0pI5UcP2 FUr9xVk3cryCgK9f9n6uRMpeeyO9dkvE1HYiru5IsHCZYNrwFe5ES2w0sFoRygAe WqAKxY0qAKC35a+YfS6eO3DtB2s78yxsM63blV8ZycJlRYl5QPVqyTZBG0X8H10b 0YuaDK5X/kUXgqA0LhCDS/P0vxjl0SoAU+z5yQR0EzAFsd4QqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFnFy6xFu9kP26wPRk3oVG0hHknhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvN2Y1YWJhNmEtYmMzNi0z ZjYyLWE2MmYtMmIxNDBhZGM1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXWVoW4q60+GmfqGCCpkSHZrhA4E5NqFi2MNTVCa4FX2RRxdtxBS39pzq yZG52OlM9gq3AsXKrBI8mYNsxF76qCdRjKW70YaJ9uGtuHaIFaHYQusF0dnZ/krh R3NWGi7lgUO+UMuVxnGlbjaWOUYqyekIfimBIhe1FzXLdXE2DBI4wqKiIr2qe0u3 6tMNHvJ01z/qQElv3s5MeFsYl1nmNP5u2o1SF+PWhfEdPASGtKB8Wh1NJnvUQ8cV bwpIKcn8oqLCPwYP3Tt0WAlFp9+1iXngDNWWJ3zTTlIDdMcTmIzGBZ1zxDOU73Mk pz7ySjUj4K8SzJHqJ4XQAXeX3H65WA== -----END CERTIFICATE-----Generated at Sat May 10 22:10:09 2025 by rpki-client