$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa File: 7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa (raw, json) Hash identifier: siGo0LqnKf3mzozTvNqEuhFQwB0e59khKj01uHPcwYw= Subject key identifier: 5F:4B:40:0F:56:F4:F2:C7:39:98:C1:4C:9A:B5:E9:E9:80:C0:4F:AC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848FBF12B8208A4E92CB8DA5800 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 15164 IP address blocks: 209.71.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:2b:82:08:a4:e9:2c:b8:da:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=4b9d7a08-a583-444c-8e61-bb171a6cb8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:e8:44:00:df:79:81:78:39:d4:9b:ef:9d: 0f:e9:b9:ed:71:aa:60:ff:73:3f:ec:9e:f3:bc:ae: 9f:0d:13:f9:13:c4:29:45:ef:84:af:ed:86:57:19: e1:e9:3b:d2:a5:9c:1c:b3:51:0a:f4:8f:ef:e8:5e: 34:95:6c:00:94:a4:3e:ec:3a:28:9c:9d:eb:47:47: 8f:bc:d4:09:39:67:d0:62:d1:87:b2:18:82:d0:fd: b3:5f:87:2c:ee:37:ab:d9:3b:83:bf:8e:f2:3c:70: 63:e0:4c:7b:d5:f6:a0:a3:c3:95:a1:bb:3c:fa:30: fe:64:b8:2a:f2:12:47:08:5c:80:b7:29:96:08:53: 68:0f:a0:28:7a:8c:15:68:17:e3:69:d8:a1:d6:31: 98:93:1f:9c:2b:40:44:5f:a9:85:1a:3f:42:0e:7b: 3e:2f:1e:27:6a:7b:3d:15:a1:ce:65:f4:97:34:1c: 27:ad:53:f1:3a:b2:8f:df:e2:2e:0e:33:e2:54:d6: 72:2d:ad:b9:de:99:39:f0:dc:58:be:bc:03:e0:b7: 28:e1:41:cf:e7:ac:19:af:54:a8:2c:6b:59:d6:37: 56:63:07:b5:d6:34:2e:60:1c:b1:52:ad:9b:97:cf: 10:61:e3:c7:af:53:28:08:8f:4c:7b:26:fe:54:9a: 79:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4B:40:0F:56:F4:F2:C7:39:98:C1:4C:9A:B5:E9:E9:80:C0:4F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c0:f6:67:b4:a1:53:80:59:87:9a:c2:a1:12:e0:b5:7d:e9: 56:93:b2:2f:e4:f2:30:41:5d:13:57:f8:55:dc:ae:19:a7:54: 93:8e:49:e9:5a:3d:8f:08:c4:8d:e1:44:62:1a:d8:aa:ea:c7: 7f:1d:f0:15:8b:0f:23:0c:93:14:ef:e1:5a:1e:5c:88:ad:e1: 6c:e5:a5:7f:3e:c0:22:5b:05:db:a4:4b:34:81:34:7b:9b:c8: 9f:02:72:3d:c0:ec:8c:d5:ef:e6:6d:4c:b8:f5:dd:f7:98:3d: e4:81:c4:a0:be:0a:84:77:db:eb:e5:9e:fd:ca:16:a7:27:9a: 3e:c9:5a:bf:59:d8:87:ba:c4:b3:f1:e5:d3:b7:7c:e7:c2:74: 9c:0f:ff:eb:9a:4f:ab:05:e6:b1:00:e1:2c:32:f6:32:2f:6d: f2:1e:43:3a:0c:7a:79:8e:bf:5f:2c:45:52:eb:0f:6e:c3:22: 9c:16:58:c4:e2:b6:79:5a:54:09:96:10:ca:4e:77:05:f1:23: fd:d5:19:a6:27:30:97:67:d5:98:2f:0d:94:ce:a1:8f:f7:cb: b2:82:b1:9f:3a:c1:ef:5f:9b:2e:60:51:bf:f9:e4:67:c0:1a: 85:70:50:16:e6:22:d6:a7:91:6b:42:1b:5e:38:b0:8f:5f:2f: 91:50:38:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78SuCCKTpLLjaWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk NGI5ZDdhMDgtYTU4My00NDRjLThlNjEtYmIxNzFhNmNiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm17oRADfeYF4OdSb750P6bntcapg/3M/7J7z vK6fDRP5E8QpRe+Er+2GVxnh6TvSpZwcs1EK9I/v6F40lWwAlKQ+7DoonJ3rR0eP vNQJOWfQYtGHshiC0P2zX4cs7jer2TuDv47yPHBj4Ex71fago8OVobs8+jD+ZLgq 8hJHCFyAtymWCFNoD6AoeowVaBfjadih1jGYkx+cK0BEX6mFGj9CDns+Lx4nans9 FaHOZfSXNBwnrVPxOrKP3+IuDjPiVNZyLa253pk58NxYvrwD4Lco4UHP56wZr1So LGtZ1jdWYwe11jQuYByxUq2bl88QYePHr1MoCI9Meyb+VJp50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9LQA9W9PLHOZjBTJq16emAwE+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvN2Y4Y2QyMDMtZGZlNS0z ZDY5LThlNWEtMWY0NDJmMzFmOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvA9me0oVOAWYeawqES4LV96VaTsi/k8jBBXRNX+FXcrhmnVJOOSela PY8IxI3hRGIa2Krqx38d8BWLDyMMkxTv4VoeXIit4WzlpX8+wCJbBdukSzSBNHub yJ8Ccj3A7IzV7+ZtTLj13feYPeSBxKC+CoR32+vlnv3KFqcnmj7JWr9Z2Ie6xLPx 5dO3fOfCdJwP/+uaT6sF5rEA4Swy9jIvbfIeQzoMenmOv18sRVLrD27DIpwWWMTi tnlaVAmWEMpOdwXxI/3VGaYnMJdn1ZgvDZTOoY/3y7KCsZ86we9fmy5gUb/55GfA GoVwUBbmItankWtCG144sI9fL5FQOPU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:23:34 2025 by rpki-client