$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa File: 2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa (raw, json) Hash identifier: CSVtT9/G/Vbbit9cpo8eLHmhs4cJmFmmRzfDxq0mq5s= Subject key identifier: E6:7F:87:5A:69:A4:05:A3:7E:A6:75:10:B0:B0:70:66:8B:CA:6C:C2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858497F09A2279B8AF6FD0589A480 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 15164 IP address blocks: 209.71.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a2:27:9b:8a:f6:fd:05:89:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=aa7b2f90-6c7b-45e0-a487-3e15ec0d2ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:d8:d5:67:82:f6:a1:90:9a:22:e9:93:3d: 7b:22:a5:dc:2b:c7:83:c2:66:21:d5:57:32:ae:9b: 83:0a:0a:98:24:57:70:bc:4e:24:52:71:d5:89:ac: 85:1f:d8:74:2b:3f:c3:b8:88:e9:e7:09:c0:1e:fe: 00:06:61:4e:7f:74:6c:99:7e:f1:3e:2a:55:bc:f0: f0:26:cc:c4:e8:81:a0:92:e3:8a:e5:2c:51:2a:3d: 54:8f:9e:14:a2:e5:dc:51:8c:6e:90:5f:fd:b7:84: be:96:d5:70:ca:82:5c:48:e0:b9:75:ba:5d:5c:5b: 63:ba:f2:ff:f1:4a:26:d2:3f:24:16:75:c7:27:d8: 8d:1c:f6:4a:e6:51:18:e5:46:35:d8:de:77:50:6b: 18:b3:2d:e9:42:38:b0:4c:82:7e:76:39:31:86:6a: 47:66:9f:79:42:71:71:04:a0:da:4e:71:65:ee:2a: 9b:48:39:4c:5c:5d:45:51:4a:9d:3a:d9:26:14:17: 70:72:85:fc:7e:35:21:f1:ae:4f:14:0d:0b:1c:80: d4:99:3d:b6:fc:06:da:89:04:eb:44:8a:c5:8a:66: 49:9d:e6:4d:a7:6e:87:44:38:5b:45:d7:07:96:bf: a8:dd:69:93:1e:90:7d:f9:d4:d8:9c:bd:fb:58:f5: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7F:87:5A:69:A4:05:A3:7E:A6:75:10:B0:B0:70:66:8B:CA:6C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:77:d4:1b:31:1a:c5:38:06:42:4a:30:27:ff:fb:b8:53:c8: 8f:e1:be:9b:ab:7e:e6:f3:c6:f6:bc:69:56:f2:ee:d2:eb:b0: 68:a8:7e:82:d4:b7:81:d5:8a:6b:09:40:46:16:a2:ff:94:4c: f9:9f:05:73:a9:8f:4e:8e:7a:8f:61:46:d0:57:66:ad:54:63: 52:09:b3:b1:81:f8:20:84:c5:74:55:1c:b4:7b:c4:44:55:17: 45:a1:1d:c9:32:2f:04:5c:13:8e:70:f0:e0:58:56:2c:59:db: 39:f2:03:60:50:80:4a:1b:f6:be:5a:77:ff:68:dd:33:b3:2c: d9:9b:1b:bf:66:60:0d:9d:36:a8:9b:f6:ff:3f:ac:b2:c8:b1: d9:77:a7:34:07:78:ed:ec:3a:d1:77:73:c8:78:91:db:17:58: 25:3d:9e:8f:c2:87:02:f9:d0:1c:8f:11:7d:6f:ce:ce:41:d7: 38:c1:ee:a4:b2:9e:3b:4f:00:ea:46:87:2a:f7:2d:a4:99:3f: 30:e2:ac:07:1c:aa:a6:65:c8:9a:4c:41:31:5c:1b:5f:33:b0: 3f:61:01:26:b0:0a:92:ec:c7:b0:67:bb:be:ce:a4:a0:ae:e2: 73:ff:8f:1e:22:cc:39:29:b0:5e:bd:d9:97:50:2a:21:74:ea: cc:ca:88:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaInm4r2/QWJpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk YWE3YjJmOTAtNmM3Yi00NWUwLWE0ODctM2UxNWVjMGQyYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0zY1WeC9qGQmiLpkz17IqXcK8eDwmYh1Vcy rpuDCgqYJFdwvE4kUnHViayFH9h0Kz/DuIjp5wnAHv4ABmFOf3RsmX7xPipVvPDw JszE6IGgkuOK5SxRKj1Uj54UouXcUYxukF/9t4S+ltVwyoJcSOC5dbpdXFtjuvL/ 8Uom0j8kFnXHJ9iNHPZK5lEY5UY12N53UGsYsy3pQjiwTIJ+djkxhmpHZp95QnFx BKDaTnFl7iqbSDlMXF1FUUqdOtkmFBdwcoX8fjUh8a5PFA0LHIDUmT22/AbaiQTr RIrFimZJneZNp26HRDhbRdcHlr+o3WmTHpB9+dTYnL37WPVM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ/h1pppAWjfqZ1ELCwcGaLymzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMmEzMmMwYTEtZWQxYi0z YTNlLWIzODAtOTE4Mzc0ZDc3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR31BsxGsU4BkJKMCf/+7hTyI/hvpurfubzxva8aVby7tLrsGiofoLU t4HVimsJQEYWov+UTPmfBXOpj06Oeo9hRtBXZq1UY1IJs7GB+CCExXRVHLR7xERV F0WhHckyLwRcE45w8OBYVixZ2znyA2BQgEob9r5ad/9o3TOzLNmbG79mYA2dNqib 9v8/rLLIsdl3pzQHeO3sOtF3c8h4kdsXWCU9no/ChwL50ByPEX1vzs5B1zjB7qSy njtPAOpGhyr3LaSZPzDirAccqqZlyJpMQTFcG18zsD9hASawCpLsx7Bnu77OpKCu 4nP/jx4izDkpsF692ZdQKiF06szKiHk= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:35 2025 by rpki-client