$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa File: d89dc6bf-f760-34a0-9822-7f13629e97e6.roa (raw, json) Hash identifier: 3fqH327MCbiQyQkGSHASNvXDoW8HiF7ywV1OQQ3jtKg= Subject key identifier: EF:A3:95:A5:39:DB:0E:5A:79:6C:7D:8F:0F:66:C7:77:9D:8B:DC:9C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858498FC9B6F1B6A0FF444D5E99C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 173.244.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:b6:f1:b6:a0:ff:44:4d:5e:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=940f7e45-d809-4bf9-8a90-20e687898f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:2e:63:52:82:64:d8:03:6a:e9:97:ea:94: 68:bb:c5:65:ad:af:95:6d:e9:0a:c6:02:2d:2b:0e: 8d:09:2c:49:68:63:e4:b8:49:e0:a1:04:2b:99:89: f6:02:cc:7c:d0:b6:47:53:40:8b:e1:b0:2b:b7:11: 7b:40:f0:0b:4d:ea:d7:0c:a2:b2:19:ba:5d:2c:9b: cd:33:a1:d3:09:d3:dc:95:c4:14:09:e0:50:bc:4c: 2a:f6:1b:93:2d:8c:18:9d:39:0b:3b:44:23:f1:a0: e2:c7:c9:a9:3a:39:d0:c4:22:a2:2c:e0:3e:1a:5f: d1:ea:98:e1:de:ad:88:5c:16:33:81:0b:fe:09:21: 65:89:04:40:f6:10:3c:98:9e:02:ca:a9:05:b9:29: 0a:ad:09:43:b8:5e:a5:69:53:13:6f:d0:bd:26:d5: 73:db:6b:f3:65:41:aa:44:a1:6a:31:76:c8:43:0a: f5:1c:a7:1a:77:d5:49:1b:09:c0:6a:0a:f6:61:49: d7:16:73:cc:86:5b:33:d2:34:d7:d8:3a:c7:13:d9: f9:3e:3c:ac:86:51:f7:72:53:46:ad:ef:fd:25:07: eb:59:0a:1a:a3:f4:36:98:9e:6c:43:9f:3d:79:08: 6d:b7:82:14:30:7b:3a:3d:28:1e:1d:15:8b:1f:26: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A3:95:A5:39:DB:0E:5A:79:6C:7D:8F:0F:66:C7:77:9D:8B:DC:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ef:57:f7:4b:ec:af:5f:cd:bd:3a:95:7c:2c:f0:42:e9:a5: 42:1e:ee:76:d8:1e:a7:b6:9e:21:31:3d:af:1d:8c:74:2d:c4: da:e4:35:b6:10:b2:2b:c1:d6:dd:7f:66:e0:48:57:57:53:66: 69:b3:4b:2a:05:9d:9c:16:87:59:4b:d5:bf:11:cf:1b:24:83: ca:41:c0:f5:ea:66:20:8e:5f:d0:14:13:a3:60:3e:6f:84:84: 9c:39:d2:82:48:7f:94:ee:a6:d8:4b:fb:48:5c:12:a0:2d:1b: f2:ca:24:26:49:11:7f:cc:6f:d9:90:05:54:b6:4e:31:39:23: 38:17:35:ab:14:de:ed:7e:63:f3:3e:7e:16:a9:2e:d0:f3:94: e6:93:92:5e:16:6a:a6:a0:cd:1f:6f:67:17:4e:45:e0:1c:9c: 67:ba:0f:c1:07:0a:ed:1f:54:99:77:ff:46:63:2c:97:98:7e: 96:24:92:e0:e2:76:f0:bc:14:e3:f3:1f:9e:0d:b2:5c:de:6c: 1a:43:ff:fc:a4:b1:8d:4a:ed:1e:10:f4:f3:da:48:56:cf:6c: 1a:be:8c:e9:4b:e4:23:fa:7f:42:f8:c9:e7:7f:9e:5a:e3:cc: c5:09:8c:b2:52:45:41:8e:d8:2c:e8:82:2f:9d:9e:ec:5e:4d: 9e:41:ce:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybbxtqD/RE1emcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk OTQwZjdlNDUtZDgwOS00YmY5LThhOTAtMjBlNjg3ODk4ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hsuY1KCZNgDaumX6pRou8Vlra+VbekKxgIt Kw6NCSxJaGPkuEngoQQrmYn2Asx80LZHU0CL4bArtxF7QPALTerXDKKyGbpdLJvN M6HTCdPclcQUCeBQvEwq9huTLYwYnTkLO0Qj8aDix8mpOjnQxCKiLOA+Gl/R6pjh 3q2IXBYzgQv+CSFliQRA9hA8mJ4CyqkFuSkKrQlDuF6laVMTb9C9JtVz22vzZUGq RKFqMXbIQwr1HKcad9VJGwnAagr2YUnXFnPMhlsz0jTX2DrHE9n5PjyshlH3clNG re/9JQfrWQoao/Q2mJ5sQ589eQhtt4IUMHs6PSgeHRWLHyZd3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+jlaU52w5aeWx9jw9mx3edi9ycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZDg5ZGM2YmYtZjc2MC0z NGEwLTk4MjItN2YxMzYyOWU5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3vV/dL7K9fzb06lXws8ELppUIe7nbYHqe2niExPa8djHQtxNrkNbYQ sivB1t1/ZuBIV1dTZmmzSyoFnZwWh1lL1b8Rzxskg8pBwPXqZiCOX9AUE6NgPm+E hJw50oJIf5TupthL+0hcEqAtG/LKJCZJEX/Mb9mQBVS2TjE5IzgXNasU3u1+Y/M+ fhapLtDzlOaTkl4WaqagzR9vZxdOReAcnGe6D8EHCu0fVJl3/0ZjLJeYfpYkkuDi dvC8FOPzH54NslzebBpD//yksY1K7R4Q9PPaSFbPbBq+jOlL5CP6f0L4yed/nlrj zMUJjLJSRUGO2Czogi+dnuxeTZ5Bzik= -----END CERTIFICATE-----Generated at Mon May 12 23:24:53 2025 by rpki-client