$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa File: d496bf54-ff2f-3588-af59-de7d639e9932.roa (raw, json) Hash identifier: moepJlqyIbxFfhXQdQ5LFOVpmQ0MV/EJe/T1EWu5PKU= Subject key identifier: B2:F9:C9:3F:92:84:D2:1E:31:FD:EA:4D:CF:DC:14:F3:3B:5D:A5:5F Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F43285849AA4F666243D7EC6D72BF34E0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 397373 IP address blocks: 168.91.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:66:62:43:d7:ec:6d:72:bf:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=238edc9b-b28f-42f9-a996-9db5a33002dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:87:74:9b:4a:e6:0a:ef:69:39:85:a6:44: da:c0:26:73:61:b0:ee:b0:b3:10:07:9d:ec:8d:bd: 01:ea:b8:f4:a6:42:b3:18:77:f6:fc:27:33:58:f0: 64:6a:36:2b:42:97:9d:5b:1e:c5:d5:33:1a:0f:48: 48:92:9b:f1:a2:73:88:46:fc:3e:8b:39:59:09:a6: 39:81:a6:05:8b:2c:71:70:a4:1a:7e:87:af:0c:84: b1:f1:ab:42:10:ef:73:3e:49:32:dd:0e:a6:f7:f4: de:1d:e3:33:3e:04:20:ee:13:f7:9a:49:87:7f:d1: 6f:7d:88:b5:0d:f6:1f:06:f9:f9:01:0e:72:19:b3: ed:92:03:39:33:38:ae:74:ab:00:56:50:5d:33:e1: 8a:8e:c5:6c:f4:c8:e0:ca:c5:39:54:db:87:65:16: 60:fa:f8:88:d6:88:a5:cb:80:11:a9:d0:17:2d:09: de:96:dc:1c:7c:94:03:de:ee:ef:03:01:f3:48:90: 11:33:1f:8e:62:34:f6:de:9e:1e:50:a0:11:c2:03: d7:1e:8d:95:52:48:d4:f2:c5:e8:ac:2d:e4:08:13: 0b:25:aa:8b:6c:55:5c:79:b4:fc:1e:20:8b:7e:e0: fa:f1:37:0f:47:51:f8:86:c1:24:3c:64:75:e2:60: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:C9:3F:92:84:D2:1E:31:FD:EA:4D:CF:DC:14:F3:3B:5D:A5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d496bf54-ff2f-3588-af59-de7d639e9932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:16:6c:52:18:b8:0c:58:de:1d:32:fb:cd:28:74:5c:b4:98: 07:e4:31:08:b1:37:55:ac:a0:87:54:1b:14:4d:db:72:d7:dd: f4:2b:0c:92:d0:91:8a:91:c5:bb:87:71:29:83:a5:da:95:72: 26:86:4e:a5:10:08:e5:73:86:ff:88:c3:87:46:60:fb:0d:6a: 31:3e:10:44:cc:c0:e9:84:ff:c0:12:f9:06:ef:fb:2e:1e:74: cf:e9:ee:22:a4:55:1b:49:20:c3:d8:85:e8:f7:6e:d0:f6:da: d6:3e:3c:45:f0:ee:81:3d:eb:b5:24:aa:fb:29:b8:85:60:df: 8a:25:96:a0:0c:ef:fc:ec:d2:90:5b:8f:7c:00:0c:dc:92:54: fb:d3:f4:df:02:bc:b3:7c:cf:6e:85:76:1a:ed:ca:ac:0b:e4: f9:d5:69:13:c8:26:9c:65:37:c4:94:d3:5f:91:2d:f0:4b:f9: 1a:32:2c:70:47:ee:ab:00:71:b6:c9:4d:d2:f0:9b:1b:36:99: ff:fa:59:e3:bb:ff:86:56:ef:d8:ef:de:ac:35:23:8a:27:bd: b3:a6:bd:1a:a9:d4:b9:b2:dd:d0:aa:d6:66:b0:41:6d:57:c7: d9:ba:1b:7a:47:4d:76:b5:4e:76:20:0a:8f:36:33:8a:f3:a5: f9:2b:67:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2ZiQ9fsbXK/NOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MjM4ZWRjOWItYjI4Zi00MmY5LWE5OTYtOWRiNWEzMzAwMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTGHdJtK5grvaTmFpkTawCZzYbDusLMQB53s jb0B6rj0pkKzGHf2/CczWPBkajYrQpedWx7F1TMaD0hIkpvxonOIRvw+izlZCaY5 gaYFiyxxcKQafoevDISx8atCEO9zPkky3Q6m9/TeHeMzPgQg7hP3mkmHf9FvfYi1 DfYfBvn5AQ5yGbPtkgM5MziudKsAVlBdM+GKjsVs9MjgysU5VNuHZRZg+viI1oil y4ARqdAXLQneltwcfJQD3u7vAwHzSJARMx+OYjT23p4eUKARwgPXHo2VUkjU8sXo rC3kCBMLJaqLbFVcebT8HiCLfuD68TcPR1H4hsEkPGR14mAsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL5yT+ShNIeMf3qTc/cFPM7XaVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ5NmJmNTQtZmYyZi0z NTg4LWFmNTktZGU3ZDYzOWU5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMWbFIYuAxY3h0y+80odFy0mAfkMQixN1WsoIdUGxRN23LX3fQrDJLQ kYqRxbuHcSmDpdqVciaGTqUQCOVzhv+Iw4dGYPsNajE+EETMwOmE/8AS+Qbv+y4e dM/p7iKkVRtJIMPYhej3btD22tY+PEXw7oE967UkqvspuIVg34ollqAM7/zs0pBb j3wADNySVPvT9N8CvLN8z26FdhrtyqwL5PnVaRPIJpxlN8SU01+RLfBL+RoyLHBH 7qsAcbbJTdLwmxs2mf/6WeO7/4ZW79jv3qw1I4onvbOmvRqp1Lmy3dCq1mawQW1X x9m6G3pHTXa1TnYgCo82M4rzpfkrZ1A= -----END CERTIFICATE-----Generated at Sat May 10 08:08:13 2025 by rpki-client