$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa File: a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa (raw, json) Hash identifier: IqRwsH6ihJwwBEgS7VUfcoTejiL5+gHzLyDIUAQUVQg= Subject key identifier: 1D:F7:98:B4:BE:11:14:21:B4:AE:59:25:74:01:66:C1:F3:D1:0B:27 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B837815995B7EB1142C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 199.200.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b8:37:81:59:95:b7:eb:11:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=643bf103-ff6a-48d6-9ccc-6701efb519b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:f8:bf:b5:9a:ca:8b:c1:8b:9c:4a:80:1a: 51:4f:03:f0:1c:de:35:01:4a:51:bb:22:03:df:71: db:ac:96:03:e6:bf:a0:1b:1e:60:07:4e:72:7e:bd: ae:c1:cc:9f:c2:33:fd:bd:41:b3:d1:d5:89:af:12: 1e:10:b4:0a:c4:b0:56:75:e9:26:97:49:e7:79:18: 40:00:9b:ff:08:55:2b:02:aa:04:d7:fc:20:68:8c: bd:c3:ee:72:b2:13:6d:6c:be:e9:a2:f7:57:1e:2d: c2:2b:c9:72:d9:ab:4e:72:c3:8d:1e:bb:cc:7a:f3: 4e:f7:7e:ca:1b:c7:46:69:75:9e:d2:38:af:53:ac: fe:42:f8:b5:cc:34:c2:24:69:65:1c:9c:dc:6e:95: 41:d8:c1:d4:d2:d3:1f:1e:82:eb:2a:fd:5f:04:07: d2:52:d9:22:f3:2a:0b:5d:b4:f7:00:47:ec:0d:57: e7:3f:f6:91:8e:b5:96:f1:b5:7f:8d:25:23:37:e0: 6d:32:f5:14:16:f1:93:ae:27:9f:00:1b:1f:67:f2: 8a:17:a3:4d:2e:a6:63:cd:ea:e2:82:1d:dd:22:45: 8a:fb:42:3c:87:03:8c:84:15:99:04:06:60:7e:f6: c6:50:e5:ec:95:be:e1:f3:61:35:9e:31:1f:b8:37: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F7:98:B4:BE:11:14:21:B4:AE:59:25:74:01:66:C1:F3:D1:0B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cc:1f:16:e9:2b:38:65:89:54:f5:3c:65:f0:f5:86:4e:e8: 0e:73:0f:cf:50:ba:4d:1f:4a:72:5a:70:a0:c1:ad:3b:6d:11: 67:be:08:7f:43:8a:13:cf:b8:ec:92:33:0f:83:6b:9a:c0:ca: f3:45:71:5f:12:e1:31:46:94:91:da:1e:c3:26:a3:19:03:3a: b6:50:de:74:47:26:1c:cc:2b:1e:dd:56:8f:45:0f:aa:0d:f0: ab:c6:79:bb:4e:23:6b:b2:f1:fa:68:af:21:9e:09:d0:24:93: 5e:67:97:58:b7:a5:4c:33:88:23:a5:93:e2:6f:14:61:15:f5: a2:e7:b8:fb:3c:ee:f5:da:12:0a:32:ab:7f:c6:9b:8d:88:57: 30:e6:37:89:86:76:e3:d4:bf:6b:1a:c4:01:ed:41:9b:4f:a9: 08:a8:28:06:28:da:b7:cd:5e:1a:c2:43:d3:01:55:62:b6:dd: 9e:db:38:ca:bf:6e:67:4c:5f:5f:2b:2a:9f:69:cb:94:42:a8: 00:cb:cf:bd:0c:30:fb:45:db:3c:fa:83:17:35:ca:1e:c2:3d: 81:4e:64:9d:c9:77:06:5b:60:3a:e2:f3:03:42:be:db:c5:ce: fc:78:42:59:4a:50:6f:85:f0:da:ea:bb:0c:4e:ad:69:f6:fe: e9:95:52:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybg3gVmVt+sRQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NjQzYmYxMDMtZmY2YS00OGQ2LTljY2MtNjcwMWVmYjUxOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZL4v7WayovBi5xKgBpRTwPwHN41AUpRuyID 33HbrJYD5r+gGx5gB05yfr2uwcyfwjP9vUGz0dWJrxIeELQKxLBWdekml0nneRhA AJv/CFUrAqoE1/wgaIy9w+5yshNtbL7povdXHi3CK8ly2atOcsONHrvMevNO937K G8dGaXWe0jivU6z+Qvi1zDTCJGllHJzcbpVB2MHU0tMfHoLrKv1fBAfSUtki8yoL XbT3AEfsDVfnP/aRjrWW8bV/jSUjN+BtMvUUFvGTriefABsfZ/KKF6NNLqZjzeri gh3dIkWK+0I8hwOMhBWZBAZgfvbGUOXslb7h82E1njEfuDeQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB33mLS+ERQhtK5ZJXQBZsHz0QsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTE4ZmZhZWUtMmUwZS0z ZjY3LTljNmYtNTJlNmY4OWJiZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLMHxbpKzhliVT1PGXw9YZO6A5zD89Quk0fSnJacKDBrTttEWe+CH9D ihPPuOySMw+Da5rAyvNFcV8S4TFGlJHaHsMmoxkDOrZQ3nRHJhzMKx7dVo9FD6oN 8KvGebtOI2uy8fporyGeCdAkk15nl1i3pUwziCOlk+JvFGEV9aLnuPs87vXaEgoy q3/Gm42IVzDmN4mGduPUv2saxAHtQZtPqQioKAYo2rfNXhrCQ9MBVWK23Z7bOMq/ bmdMX18rKp9py5RCqADLz70MMPtF2zz6gxc1yh7CPYFOZJ3JdwZbYDri8wNCvtvF zvx4QllKUG+F8NrquwxOrWn2/umVUmA= -----END CERTIFICATE-----Generated at Sat May 10 19:28:31 2025 by rpki-client