$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa File: 91cf1c00-289f-3473-9f95-b903e535a230.roa (raw, json) Hash identifier: 1P97w2WdRDDbRYCk3/c0PAFQUhejBAMkH6NFLGpRT3s= Subject key identifier: C4:DA:08:9A:D0:8E:EE:75:85:DB:6E:E8:62:DD:8A:0A:18:8E:0A:77 Certificate issuer: /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059 Certificate serial: 010D0C9F43285849B14A0AF2EBCF07AD79D3AF00 Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 22056 IP address blocks: 204.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0a:f2:eb:cf:07:ad:79:d3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e03edd04-ce8f-4548-9d05-6c634286cf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:25:25:bf:ab:24:c4:52:a1:ef:4e:bf:ea: e6:1b:51:84:66:c8:91:14:8a:43:a9:fb:74:c0:31: 33:11:4a:55:43:54:09:a9:de:bf:cf:14:a2:09:e1: 46:19:94:1d:95:6f:f2:1a:a1:f2:fe:fb:9c:d9:9d: 91:95:f4:02:5e:1f:e5:3e:a4:c8:62:57:bb:bf:9a: a5:7a:67:d3:d4:4e:88:13:95:4a:dc:59:96:a3:cc: af:57:12:e0:50:81:68:61:c5:15:43:a4:6c:25:c3: 48:e2:1f:1b:5d:81:ef:bc:e0:f3:ed:69:e3:cb:33: 6d:07:78:df:fc:91:1e:74:a0:63:b1:75:05:3c:56: b8:61:4e:06:a0:31:42:a5:63:5e:a7:f1:8a:63:5e: 55:8e:03:6d:45:40:2c:7b:4b:30:da:93:ee:bf:b8: bf:38:91:f0:cd:fb:e4:45:e1:14:4f:ea:00:45:8c: e1:18:89:10:b4:d9:9e:22:4b:65:df:2e:c6:17:05: 80:c3:95:e3:35:69:cd:1a:33:25:33:1c:e0:69:0c: 6e:08:72:d4:1f:2e:44:37:c3:fb:42:25:7c:8a:3e: 70:0a:8f:cf:7b:87:59:ae:f7:48:ce:10:2c:c2:2b: 5d:28:df:2c:f8:be:07:56:6e:60:15:bb:90:04:72: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:08:9A:D0:8E:EE:75:85:DB:6E:E8:62:DD:8A:0A:18:8E:0A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl X509v3 Authority Key Identifier: keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer sbgp-ipAddrBlock: critical IPv4: 204.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:6f:9b:58:b6:e8:4a:ff:1b:03:46:41:85:07:6d:b1:62:e4: 3f:c1:8d:8f:4c:53:c5:aa:1f:55:f8:e5:93:1e:18:09:86:d1: 4b:58:87:aa:ed:f6:89:32:d1:f5:d9:a6:15:96:7f:b2:3d:59: 24:07:b4:c2:4e:79:f0:40:c0:86:22:21:04:40:09:eb:10:93: 36:d5:c2:5f:78:74:ad:32:5d:bf:a2:e1:4a:fe:ce:2f:38:ae: 89:e2:c7:f7:ad:a3:72:b8:c9:08:8a:2d:c5:7e:ec:7c:02:4b: ca:4e:87:5a:08:e6:59:9e:5a:6d:4d:84:34:b5:82:61:aa:70: 64:6e:3e:74:36:0f:29:ce:56:06:12:df:b5:eb:04:f4:a5:77: b5:00:26:9c:55:85:fa:94:aa:7d:03:92:ca:03:de:93:39:37: 30:5b:19:61:44:d2:d9:40:6b:33:6e:c3:1e:aa:8f:fa:a2:61: df:3c:b9:a1:ac:de:01:f8:41:02:a2:2a:e3:92:67:15:cc:0c: 0d:1e:1c:ee:10:6e:7c:7f:f0:19:6b:44:8d:32:04:ba:09:31: 86:e8:aa:40:74:a4:07:e2:76:5e:3c:9d:14:25:63:c7:13:ca: 36:8b:c8:22:19:bc:d2:64:43:93:47:a6:5b:4c:f5:5b:2c:9e: 22:c3:d1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgry688HrXnTrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI3MzgzY2EtNzRiMS00ZThhLWI3OWQtZjc5MWU2MzFj MDU5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTAzZWRkMDQtY2U4Zi00NTQ4LTlkMDUtNmM2MzQyODZjZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc8lJb+rJMRSoe9Ov+rmG1GEZsiRFIpDqft0 wDEzEUpVQ1QJqd6/zxSiCeFGGZQdlW/yGqHy/vuc2Z2RlfQCXh/lPqTIYle7v5ql emfT1E6IE5VK3FmWo8yvVxLgUIFoYcUVQ6RsJcNI4h8bXYHvvODz7WnjyzNtB3jf /JEedKBjsXUFPFa4YU4GoDFCpWNep/GKY15VjgNtRUAse0sw2pPuv7i/OJHwzfvk ReEUT+oARYzhGIkQtNmeIktl3y7GFwWAw5XjNWnNGjMlMxzgaQxuCHLUHy5EN8P7 QiV8ij5wCo/Pe4dZrvdIzhAswitdKN8s+L4HVm5gFbuQBHK9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTaCJrQju51hdtu6GLdigoYjgp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Yjcz ODNjYS03NGIxLTRlOGEtYjc5ZC1mNzkxZTYzMWMwNTkvOTFjZjFjMDAtMjg5Zi0z NDczLTlmOTUtYjkwM2U1MzVhMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWI3MzgzY2EtNzRiMS00ZThhLWI3 OWQtZjc5MWU2MzFjMDU5LzliNzM4M2NhLTc0YjEtNGU4YS1iNzlkLWY3OTFlNjMx YzA1OS5jcmwwHwYDVR0jBBgwFoAUSN+6uqwGs94NQMabZgapmi474ScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85YjczODNjYS03NGIxLTRlOGEtYjc5ZC1mNzkx ZTYzMWMwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5vm1i26Er/GwNGQYUHbbFi5D/BjY9MU8WqH1X45ZMeGAmG0UtYh6rt 9oky0fXZphWWf7I9WSQHtMJOefBAwIYiIQRACesQkzbVwl94dK0yXb+i4Ur+zi84 ronix/eto3K4yQiKLcV+7HwCS8pOh1oI5lmeWm1NhDS1gmGqcGRuPnQ2DynOVgYS 37XrBPSld7UAJpxVhfqUqn0DksoD3pM5NzBbGWFE0tlAazNuwx6qj/qiYd88uaGs 3gH4QQKiKuOSZxXMDA0eHO4Qbnx/8BlrRI0yBLoJMYboqkB0pAfidl48nRQlY8cT yjaLyCIZvNJkQ5NHpltM9VssniLD0eE= -----END CERTIFICATE-----Generated at Wed Apr 30 10:16:00 2025 by rpki-client