$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa File: b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa (raw, json) Hash identifier: X3vAWaPSeZRFwOZEGx5hAWfF3VfwAQoLh1syEoHaoyk= Subject key identifier: D1:06:4F:53:9F:D4:52:A7:17:0B:13:64:65:43:79:7D:7E:85:37:D8 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B4CD1638845699FEC22C Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 140.82.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b4:cd:16:38:84:56:99:fe:c2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=66ca9497-c4c5-4dbf-a7b1-262310025a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4e:a6:94:14:b6:22:b9:21:8c:ba:f0:88:59: ee:2b:54:0d:46:70:47:2c:48:0d:93:8a:88:75:63: 9d:ba:42:dc:bb:9b:b4:4f:db:4a:fe:d5:54:e8:3c: dc:b0:f0:67:0e:7b:38:3e:03:18:b0:68:27:2c:71: 0e:70:23:93:c0:13:58:f9:a9:8d:dd:8a:ad:61:8d: f9:cf:62:a4:9f:65:14:31:ac:da:1a:f5:be:f6:45: f3:de:7d:fb:2a:9b:81:29:bd:45:f2:f9:b2:4e:90: 8b:6b:bb:1a:27:c9:1a:ba:db:f8:fc:d8:3a:06:84: 86:0a:ba:71:48:a2:40:78:7a:cb:35:38:1b:72:80: 90:96:c6:e0:46:ff:06:94:62:3d:8d:18:f0:7a:43: 6f:e4:e9:9d:5d:5f:7d:aa:93:92:9d:16:1a:37:1a: 6f:14:8a:d7:2f:ec:ea:69:eb:a0:8f:e2:0c:24:8a: 7d:13:4c:b9:b3:35:35:c4:04:b0:35:f5:42:5b:14: 8b:ca:cf:b0:c8:b0:ea:43:7b:21:bb:e9:c6:87:28: dc:3d:0d:00:78:b1:59:be:ac:e6:14:23:1b:e0:f7: c7:2a:ed:96:86:7d:f5:2b:fb:58:0b:2b:9b:65:86: f3:36:e7:08:91:a2:b4:7c:43:af:e7:90:de:69:1c: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:06:4F:53:9F:D4:52:A7:17:0B:13:64:65:43:79:7D:7E:85:37:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f7:cf:93:45:c5:0a:1e:69:9d:66:90:4e:21:fe:0d:d5:76: 7f:9a:d2:60:0a:b4:8d:a6:62:b4:c8:c6:18:6a:22:c5:0f:f6: 92:2f:d1:f1:fc:e8:b5:19:8b:12:1c:60:17:3f:11:fd:88:1c: 92:21:47:0b:ae:29:f4:d9:1c:7c:b9:24:4c:73:fa:49:fd:35: 88:30:bb:bd:0c:f9:2c:57:d6:f3:c4:ad:22:e4:a8:b2:00:82: cb:fd:4a:b9:fd:c9:98:5c:c8:6b:4b:5e:d5:8b:9d:9f:f3:ca: 12:2d:8b:2c:b6:fb:23:e7:46:68:f4:be:66:ad:b8:e5:59:71: 79:0b:fa:a6:90:95:5f:7d:ce:1b:51:85:a6:22:93:3e:fe:6a: 20:b6:d4:51:8c:d5:2a:44:ab:27:2a:ed:f1:e9:5f:60:47:89: 10:28:c0:fc:58:94:2c:44:4f:99:8a:7f:56:66:bd:4b:81:8b: 8f:f3:21:de:3d:58:18:0f:5c:6d:10:01:67:50:2e:99:e1:36: 84:8d:06:79:8d:25:bf:a5:37:76:19:85:e7:7f:06:2b:2e:1a: 9a:7b:53:4c:23:b6:ed:d5:21:f0:7f:55:98:db:15:65:c7:26: e4:23:09:bc:a2:e5:49:5f:b3:91:9e:cf:3f:bf:a3:34:7a:a2: 66:0a:98:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybTNFjiEVpn+wiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NjZjYTk0OTctYzRjNS00ZGJmLWE3YjEtMjYyMzEwMDI1YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+k6mlBS2IrkhjLrwiFnuK1QNRnBHLEgNk4qI dWOdukLcu5u0T9tK/tVU6DzcsPBnDns4PgMYsGgnLHEOcCOTwBNY+amN3YqtYY35 z2Kkn2UUMazaGvW+9kXz3n37KpuBKb1F8vmyTpCLa7saJ8kautv4/Ng6BoSGCrpx SKJAeHrLNTgbcoCQlsbgRv8GlGI9jRjwekNv5OmdXV99qpOSnRYaNxpvFIrXL+zq aeugj+IMJIp9E0y5szU1xASwNfVCWxSLys+wyLDqQ3shu+nGhyjcPQ0AeLFZvqzm FCMb4PfHKu2Whn31K/tYCyubZYbzNucIkaK0fEOv55DeaRyz1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEGT1Of1FKnFwsTZGVDeX1+hTfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjEyYWEyMGQtMWE5OC0z NGY3LWI2MzEtNDgzNmNkNmQ0YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFK+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL3z5NFxQoeaZ1mkE4h/g3Vdn+a0mAKtI2mYrTIxhhqIsUP9pIv0fH8 6LUZixIcYBc/Ef2IHJIhRwuuKfTZHHy5JExz+kn9NYgwu70M+SxX1vPErSLkqLIA gsv9Srn9yZhcyGtLXtWLnZ/zyhItiyy2+yPnRmj0vmatuOVZcXkL+qaQlV99zhtR haYikz7+aiC21FGM1SpEqycq7fHpX2BHiRAowPxYlCxET5mKf1ZmvUuBi4/zId49 WBgPXG0QAWdQLpnhNoSNBnmNJb+lN3YZhed/BisuGpp7U0wjtu3VIfB/VZjbFWXH JuQjCbyi5Ulfs5Gezz+/ozR6omYKmCg= -----END CERTIFICATE-----Generated at Sun May 11 16:01:20 2025 by rpki-client