$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa File: 2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa (raw, json) Hash identifier: OK9jNYxZzHINckjOGGmNNwuLX0Gq9s6V2btanVVLgK4= Subject key identifier: C1:5C:E3:67:C4:C6:2E:78:7C:E0:B7:1B:66:17:EA:67:19:05:DA:19 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285849A1EF6E4831F56B12182C5580 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 9009 IP address blocks: 168.91.72.0/24 maxlen: 24 168.91.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6e:48:31:f5:6b:12:18:2c:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=3a6d5828-7fc2-4ca3-8d74-b0ada5c3e775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:9d:75:ba:24:a7:45:16:98:fb:23:8b:b4: 92:7c:c7:1a:60:e3:83:1f:20:7b:75:bb:2b:4e:02: 28:48:08:24:5e:b0:05:32:8a:cb:d6:11:89:77:da: 48:2c:19:46:d4:b8:e3:a4:32:76:03:a3:a8:ae:57: 68:5d:32:17:4b:a1:0f:d0:55:2b:24:8a:3e:11:30: 60:08:35:79:36:3c:82:4a:25:08:14:89:97:ed:a2: 2e:e8:5f:16:7b:54:b6:44:8e:b0:48:76:03:db:29: 11:0f:84:86:5f:de:bf:55:ed:9f:81:50:23:84:74: 2c:27:de:8e:da:a3:20:5c:8f:b5:12:2f:fb:9c:d3: 1d:c5:c3:b4:0b:2a:a6:2c:98:cf:c5:e1:af:36:68: a1:a0:15:ad:b8:7d:0e:1d:5f:36:1d:35:c8:4e:89: 4a:5a:78:56:54:73:82:ee:a6:92:6a:e9:ed:80:b8: d7:ca:f1:49:64:fc:c3:a3:81:2e:d6:c0:32:07:6f: 38:da:22:4a:52:23:39:a4:54:bc:74:e8:40:cc:1d: f3:04:40:a5:fe:1c:0f:8b:d0:8b:5f:24:e2:d2:fd: 8f:d6:48:6a:75:a3:1f:1f:29:1b:a3:32:00:7f:d0: 07:74:56:e5:0c:03:2c:09:a6:19:54:e4:c4:43:d5: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5C:E3:67:C4:C6:2E:78:7C:E0:B7:1B:66:17:EA:67:19:05:DA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8f:75:19:b7:4a:af:8f:4e:c0:63:5c:34:bb:f8:4f:53:41: 6b:4e:66:4b:66:58:5f:cc:99:d5:a8:52:97:68:c9:6e:21:96: 69:ce:8e:a6:2f:dd:74:73:d2:7b:cf:1c:f5:2a:df:3c:0b:31: bb:02:ec:1c:5a:ec:79:44:0f:5d:b3:56:31:42:3d:d1:15:51: 27:bf:af:9b:b5:e0:5a:0f:fe:1f:c8:66:ad:91:7c:12:cf:95: 62:ef:49:93:a0:02:95:e3:63:11:06:47:32:29:a0:59:cf:1c: 98:19:3e:f2:2e:34:76:53:81:3f:bd:6e:a3:76:45:b8:20:20: 62:79:be:9b:14:3a:bf:34:07:7c:59:f4:a8:71:58:ae:a5:84: 4e:b0:ff:c1:34:a8:fd:08:99:93:8e:87:e6:83:1c:d9:84:2e: d0:8e:b6:d5:5f:4c:46:e0:67:96:1e:fc:71:2c:fe:9a:c0:ff: ab:24:b0:1b:42:80:90:ca:3a:ae:4a:12:30:ea:33:2f:3b:36: 91:80:c1:54:89:ac:1e:15:95:18:38:8e:93:7a:d9:78:cd:9d: ee:25:b0:27:18:23:56:8b:fc:09:b5:b7:c4:95:a8:fa:d3:5a: 44:8d:4d:8e:81:07:37:e6:44:59:41:6e:e0:10:c1:b5:1e:30: 55:82:37:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh725IMfVrEhgsVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk M2E2ZDU4MjgtN2ZjMi00Y2EzLThkNzQtYjBhZGE1YzNlNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Wddbokp0UWmPsji7SSfMcaYOODHyB7dbsr TgIoSAgkXrAFMorL1hGJd9pILBlG1LjjpDJ2A6OorldoXTIXS6EP0FUrJIo+ETBg CDV5NjyCSiUIFImX7aIu6F8We1S2RI6wSHYD2ykRD4SGX96/Ve2fgVAjhHQsJ96O 2qMgXI+1Ei/7nNMdxcO0CyqmLJjPxeGvNmihoBWtuH0OHV82HTXITolKWnhWVHOC 7qaSauntgLjXyvFJZPzDo4Eu1sAyB2842iJKUiM5pFS8dOhAzB3zBECl/hwPi9CL XyTi0v2P1khqdaMfHykbozIAf9AHdFblDAMsCaYZVOTEQ9Wo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFc42fExi54fOC3G2YX6mcZBdoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMmVlZjRlNDMtYTdlNC0z OGMzLTlhNDEtN2Q4OTZjOWY2OGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2PdRm3Sq+PTsBjXDS7+E9TQWtOZktmWF/MmdWoUpdoyW4hlmnOjqYv 3XRz0nvPHPUq3zwLMbsC7Bxa7HlED12zVjFCPdEVUSe/r5u14FoP/h/IZq2RfBLP lWLvSZOgApXjYxEGRzIpoFnPHJgZPvIuNHZTgT+9bqN2RbggIGJ5vpsUOr80B3xZ 9KhxWK6lhE6w/8E0qP0ImZOOh+aDHNmELtCOttVfTEbgZ5Ye/HEs/prA/6sksBtC gJDKOq5KEjDqMy87NpGAwVSJrB4VlRg4jpN62XjNne4lsCcYI1aL/Am1t8SVqPrT WkSNTY6BBzfmRFlBbuAQwbUeMFWCN2U= -----END CERTIFICATE-----Generated at Tue May 6 23:14:43 2025 by rpki-client