$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa File: 34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa (raw, json) Hash identifier: IAnOAszqk4wEa+w4TGNpaF78icAhcJukZCZRbdVc1tw= Subject key identifier: 51:14:22:D8:9B:97:EB:D3:69:A0:50:A5:0E:65:A5:55:8B:69:97:51 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B75600F0FEAF128CBC40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 173.244.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b7:56:00:f0:fe:af:12:8c:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=934cbca9-e636-4ec8-a5ed-a84095d2ee2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:c3:60:6a:fb:18:75:2e:1b:33:4c:d6:23: 6c:66:57:95:5f:0e:3f:51:ec:92:da:dd:c7:c8:f0: e0:04:3a:f1:d2:18:1b:22:5b:4e:7d:0d:5c:6e:7f: eb:1a:14:89:a6:eb:ef:28:2f:d3:41:46:06:dc:15: 2b:db:a6:f0:14:12:93:be:a1:5d:ef:f4:f6:d3:7f: b5:34:7f:6d:d7:97:35:41:0c:8f:6c:21:07:f5:97: ae:87:a4:5d:96:71:d0:95:8a:c9:b3:d6:e6:e0:df: d4:e0:f7:9d:25:35:3e:88:7a:71:2e:78:de:78:91: 8b:4f:0f:ee:e1:fe:c9:15:15:b4:77:19:41:60:71: dd:81:d5:f3:ef:70:4f:d5:47:9f:3f:a5:1b:61:c4: 0c:a3:b9:0a:e9:3c:98:97:44:d2:11:d2:87:47:b4: 19:ae:b6:bf:1f:bf:eb:3d:ef:6b:d3:cb:e4:d9:c1: b2:ec:2e:fa:f5:ff:96:be:06:b1:7e:a0:a0:fc:73: c8:bf:aa:df:49:10:c6:23:fc:9c:6f:c4:04:2e:a2: df:9f:04:1e:6f:ba:29:84:03:f6:16:f2:25:8a:62: c4:72:90:0a:1a:34:c2:80:4a:99:59:19:20:6d:c9: 75:4a:80:af:88:d2:8d:1b:12:33:9f:e2:ab:8f:03: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:22:D8:9B:97:EB:D3:69:A0:50:A5:0E:65:A5:55:8B:69:97:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:de:c0:8c:15:41:99:4c:b3:ed:78:0e:bd:42:5a:3f:47:1c: 0f:c7:5f:63:d3:2d:9e:8c:df:e4:ef:95:c9:d1:6a:e1:69:28: 07:62:35:84:37:27:4a:d6:44:ed:a1:9f:84:5e:a5:cc:d1:7a: 6a:49:be:d0:37:14:0e:39:4a:67:08:a9:76:0a:cc:51:56:05: 60:26:3a:c9:37:fb:02:a1:c3:a8:c8:39:9b:6b:e7:7a:69:4b: 24:ab:e0:04:3d:e3:ed:6c:e7:04:ca:6a:1b:89:97:9d:29:d2: 3b:2e:66:ed:54:63:f9:49:21:eb:6a:43:e3:91:10:a3:a1:c2: d2:2e:d0:ed:e4:1f:12:04:fd:38:06:45:26:2d:75:a7:d4:cc: db:71:d7:9b:95:65:7d:2a:9b:2e:10:91:cb:cf:40:02:63:1f: 2c:92:12:82:ca:a1:12:83:c2:2c:27:85:a1:6c:04:57:a0:3e: 3f:ac:7a:ea:2a:1e:ae:fb:c9:69:02:8d:65:5e:da:3f:46:d7: 97:28:78:c1:bf:1c:98:76:85:18:40:5b:8e:78:0d:de:41:84: 18:cc:ae:69:30:a0:ef:88:e0:dc:34:75:a7:a8:bc:d4:a3:69: e9:6e:c0:a7:ac:06:1c:18:73:45:88:1e:86:8f:73:10:47:9e: ab:b2:a5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybdWAPD+rxKMvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk OTM0Y2JjYTktZTYzNi00ZWM4LWE1ZWQtYTg0MDk1ZDJlZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDDYGr7GHUuGzNM1iNsZleVXw4/UeyS2t3H yPDgBDrx0hgbIltOfQ1cbn/rGhSJpuvvKC/TQUYG3BUr26bwFBKTvqFd7/T203+1 NH9t15c1QQyPbCEH9Zeuh6RdlnHQlYrJs9bm4N/U4PedJTU+iHpxLnjeeJGLTw/u 4f7JFRW0dxlBYHHdgdXz73BP1UefP6UbYcQMo7kK6TyYl0TSEdKHR7QZrra/H7/r Pe9r08vk2cGy7C769f+WvgaxfqCg/HPIv6rfSRDGI/ycb8QELqLfnwQeb7ophAP2 FvIlimLEcpAKGjTCgEqZWRkgbcl1SoCviNKNGxIzn+KrjwOUZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEUItibl+vTaaBQpQ5lpVWLaZdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMzRhZjVlYjYtZjAzYi0z ZWJkLWJjYzEtOWM0ZTMwMTA5MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjewIwVQZlMs+14Dr1CWj9HHA/HX2PTLZ6M3+TvlcnRauFpKAdiNYQ3 J0rWRO2hn4RepczRempJvtA3FA45SmcIqXYKzFFWBWAmOsk3+wKhw6jIOZtr53pp SySr4AQ94+1s5wTKahuJl50p0jsuZu1UY/lJIetqQ+OREKOhwtIu0O3kHxIE/TgG RSYtdafUzNtx15uVZX0qmy4QkcvPQAJjHyySEoLKoRKDwiwnhaFsBFegPj+seuoq Hq77yWkCjWVe2j9G15coeMG/HJh2hRhAW454Dd5BhBjMrmkwoO+I4Nw0daeovNSj aeluwKesBhwYc0WIHoaPcxBHnquypQk= -----END CERTIFICATE-----Generated at Sun May 11 22:01:54 2025 by rpki-client