$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa File: 26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa (raw, json) Hash identifier: dOEOC+XQYnmt7GUppFy/Avz52tY4MfIgUeKJepHjeuw= Subject key identifier: A5:8A:1B:36:86:C5:56:8A:02:03:D5:7E:14:E1:26:AB:79:7C:4F:5D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B903546195E2A2EB3280 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b9:03:54:61:95:e2:a2:eb:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=34dbdac5-d312-4c4e-b1e1-4fcae8889ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:60:b1:e9:e0:7f:61:10:69:eb:27:17:3b: f1:c2:ff:d0:18:2b:97:75:3e:3a:24:07:d3:e3:d7: 77:2c:4f:10:1d:7d:ea:fd:70:f4:f7:f4:89:47:fe: fc:d4:77:95:a6:c6:c4:6c:dd:d3:bc:84:71:bf:d2: 52:be:82:60:7b:eb:33:af:05:0b:de:a6:90:a5:d5: b0:a2:d7:6d:25:d3:79:cc:f4:cc:01:b7:64:7a:43: cd:08:1a:66:04:26:aa:63:28:36:c8:28:37:27:de: 01:18:8a:fb:a0:4a:f4:1a:b6:04:4f:4d:21:95:e7: 68:96:87:37:20:ef:21:57:5e:2b:38:86:d0:f2:4c: a5:5c:33:a9:9e:35:9b:e8:9f:b0:31:cb:52:27:b2: 3a:0a:63:49:8b:02:86:8d:e2:00:58:77:9e:6e:06: 62:07:87:e3:d3:e9:b7:30:07:d0:f7:36:2a:98:ab: a9:65:8b:cf:30:e9:18:98:a6:d0:e2:99:aa:d9:43: f9:2f:c0:bb:4c:99:e2:a1:92:28:73:83:cf:78:33: 30:6d:03:68:57:44:38:6e:e7:57:ab:a8:ca:4c:5b: fb:aa:76:d2:49:8a:ab:02:66:57:6a:78:3b:d1:91: 1f:a6:d8:7a:fc:f3:5f:48:30:cf:96:f0:a7:b1:d4: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:1B:36:86:C5:56:8A:02:03:D5:7E:14:E1:26:AB:79:7C:4F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:77:fe:16:7a:63:85:ed:8a:aa:09:05:b0:e7:12:75:a5:38: de:11:c8:b8:80:85:0f:07:8f:f9:d3:a3:7c:a4:6b:f9:23:68: e3:fe:e6:05:3b:b0:7d:4f:7e:98:47:6e:4c:01:b3:96:be:40: 33:ac:e6:8b:22:ba:11:37:e5:db:20:f3:2e:a2:9d:34:ef:d0: 25:45:51:93:77:aa:86:4a:c8:09:15:19:63:f8:7c:db:f2:2a: 0e:34:97:fd:60:14:73:40:18:6e:d0:ea:9f:8c:07:b1:2c:05: 55:9b:5d:7e:3e:89:67:11:13:ef:d3:1c:45:8b:80:81:9f:c9: 07:68:0c:89:9c:8f:69:c9:2c:ce:4f:66:01:57:af:a3:8f:42: db:e9:7c:c0:b5:6d:75:87:47:1d:5c:b6:eb:94:de:6e:4b:03: bb:8f:59:46:d7:76:50:07:01:41:6e:60:cb:f1:c4:cd:ba:62: e8:29:33:bf:d4:ac:b8:c0:53:a5:69:f5:76:90:87:2b:1b:15: fa:93:43:47:23:34:48:d2:0e:57:9b:37:5e:bf:54:46:be:da: 14:16:80:69:5b:6d:3a:21:74:99:4a:a3:00:8b:09:be:d4:84: 20:9c:e0:0f:12:f4:ca:ed:c4:bb:5c:4e:3a:a6:a7:c0:76:37: d1:81:d8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybkDVGGV4qLrMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk MzRkYmRhYzUtZDMxMi00YzRlLWIxZTEtNGZjYWU4ODg5YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwNgsengf2EQaesnFzvxwv/QGCuXdT46JAfT 49d3LE8QHX3q/XD09/SJR/781HeVpsbEbN3TvIRxv9JSvoJge+szrwUL3qaQpdWw otdtJdN5zPTMAbdkekPNCBpmBCaqYyg2yCg3J94BGIr7oEr0GrYET00hledoloc3 IO8hV14rOIbQ8kylXDOpnjWb6J+wMctSJ7I6CmNJiwKGjeIAWHeebgZiB4fj0+m3 MAfQ9zYqmKupZYvPMOkYmKbQ4pmq2UP5L8C7TJnioZIoc4PPeDMwbQNoV0Q4budX q6jKTFv7qnbSSYqrAmZXang70ZEfpth6/PNfSDDPlvCnsdS8QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWKGzaGxVaKAgPVfhThJqt5fE9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjZlYWVmMWEtODBiOS0z NmExLWIzZTQtZWJlNWU2ODMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp3/hZ6Y4XtiqoJBbDnEnWlON4RyLiAhQ8Hj/nTo3yka/kjaOP+5gU7 sH1PfphHbkwBs5a+QDOs5osiuhE35dsg8y6inTTv0CVFUZN3qoZKyAkVGWP4fNvy Kg40l/1gFHNAGG7Q6p+MB7EsBVWbXX4+iWcRE+/THEWLgIGfyQdoDImcj2nJLM5P ZgFXr6OPQtvpfMC1bXWHRx1ctuuU3m5LA7uPWUbXdlAHAUFuYMvxxM26YugpM7/U rLjAU6Vp9XaQhysbFfqTQ0cjNEjSDlebN16/VEa+2hQWgGlbbTohdJlKowCLCb7U hCCc4A8S9MrtxLtcTjqmp8B2N9GB2Do= -----END CERTIFICATE-----Generated at Sat May 10 09:47:28 2025 by rpki-client