$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa File: 1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa (raw, json) Hash identifier: ew2OAlnqvS8n5hTe+TOSsQotWyz6SdIrE6sRC+VT/jE= Subject key identifier: 83:47:72:8F:DD:D5:84:F9:9F:C0:09:D5:03:0D:65:C4:3C:80:EF:3F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858491246A3318FD649F697F7BE80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 15164 IP address blocks: 209.71.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a3:31:8f:d6:49:f6:97:f7:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a83c730a-0b60-4913-9509-50651a0bc1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:6e:5d:00:8e:b3:4f:44:53:ce:b3:7a:fb: 59:66:51:1d:26:48:5a:6a:a2:98:87:7a:11:b2:fd: 4e:8b:93:53:3a:54:95:80:32:47:30:5f:24:39:5a: 6f:ec:f0:e3:a5:a3:ca:a4:a2:96:f4:c5:cd:b2:6c: 2d:76:ca:67:43:4c:58:bd:1f:e6:7f:14:cc:f1:b8: dd:b7:d0:de:c1:01:2b:52:ea:cc:54:3a:cd:ca:dc: f4:00:1d:21:52:3c:5a:4f:32:ef:e8:09:77:6c:a0: 17:65:34:04:ed:98:96:b5:ca:a0:6a:1c:06:ef:5d: 8a:ca:7d:fa:c0:02:06:cf:6b:8d:e7:26:7b:38:ec: 4f:b3:ac:22:92:95:5e:12:92:62:a0:3a:2f:35:17: 17:c8:e4:61:ab:d3:ed:4c:2c:21:4c:d2:97:53:1f: fd:03:c6:79:e4:60:b3:c1:93:78:a6:99:bf:9c:d4: de:30:b0:20:23:7a:a9:4f:c5:c9:7b:03:77:b4:ee: 79:db:66:f4:be:5d:52:08:20:f6:70:79:bb:88:c8: 29:b8:29:f1:ce:3a:4f:49:e9:83:77:08:42:5d:ed: 50:9e:25:a6:1a:0a:c7:8c:9a:a1:2d:ef:19:fa:db: 91:95:67:9a:e5:24:6a:0a:59:fc:fb:ae:1b:80:1a: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:72:8F:DD:D5:84:F9:9F:C0:09:D5:03:0D:65:C4:3C:80:EF:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:13:9e:0f:10:11:45:28:e9:b7:dd:e9:f0:6d:cb:d9:bf:c9: 33:6b:ec:4c:2e:90:0f:eb:be:4f:08:d9:0e:f2:43:57:11:cb: fd:40:82:95:5d:3d:1f:6f:ff:b5:2b:f5:ad:9d:3c:d9:33:cc: 04:f0:fa:2a:7d:d3:ed:f2:a8:30:37:e8:69:b6:98:0f:7f:01: ed:05:ee:78:15:c0:8e:29:25:bd:34:da:51:06:4b:a0:6b:a4: 45:e5:2a:10:48:9b:a8:a4:a3:1c:37:2b:4a:21:8f:ef:19:9e: f8:77:c4:c7:01:29:62:ce:c2:62:63:57:fc:45:7d:a7:87:02: 83:ea:6c:a8:37:0d:d9:6a:e7:96:06:b3:c2:d1:13:a1:4a:52: c9:2b:15:b7:69:90:43:2c:7e:5c:e4:21:e0:24:ae:a5:5a:ba: b9:bf:ea:ee:e4:a5:03:6c:0f:9b:77:f5:61:fd:d1:39:26:8c: 4d:e5:ff:16:23:7a:20:f7:2a:a6:69:68:a1:72:7d:e2:b2:14: 32:27:fa:37:33:27:8c:5b:17:cf:5a:f3:27:0f:a0:61:34:5c: ff:25:31:1a:94:79:81:31:f2:2d:0e:5f:47:33:01:ba:02:b2: 78:ec:98:1e:d0:f3:65:1c:49:52:1a:3d:5c:ee:e4:d1:78:99: 82:e1:6b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqMxj9ZJ9pf3voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTgzYzczMGEtMGI2MC00OTEzLTk1MDktNTA2NTFhMGJjMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04VuXQCOs09EU86zevtZZlEdJkhaaqKYh3oR sv1Oi5NTOlSVgDJHMF8kOVpv7PDjpaPKpKKW9MXNsmwtdspnQ0xYvR/mfxTM8bjd t9DewQErUurMVDrNytz0AB0hUjxaTzLv6Al3bKAXZTQE7ZiWtcqgahwG712Kyn36 wAIGz2uN5yZ7OOxPs6wikpVeEpJioDovNRcXyORhq9PtTCwhTNKXUx/9A8Z55GCz wZN4ppm/nNTeMLAgI3qpT8XJewN3tO5522b0vl1SCCD2cHm7iMgpuCnxzjpPSemD dwhCXe1QniWmGgrHjJqhLe8Z+tuRlWea5SRqCln8+64bgBqgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINHco/d1YT5n8AJ1QMNZcQ8gO8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTA3NmExYzYtYWRiNy0z NmI4LTg4NzktNGNkZDA2MjFlZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABITng8QEUUo6bfd6fBty9m/yTNr7EwukA/rvk8I2Q7yQ1cRy/1AgpVd PR9v/7Ur9a2dPNkzzATw+ip90+3yqDA36Gm2mA9/Ae0F7ngVwI4pJb002lEGS6Br pEXlKhBIm6ikoxw3K0ohj+8Znvh3xMcBKWLOwmJjV/xFfaeHAoPqbKg3Ddlq55YG s8LRE6FKUskrFbdpkEMsflzkIeAkrqVaurm/6u7kpQNsD5t39WH90TkmjE3l/xYj eiD3KqZpaKFyfeKyFDIn+jczJ4xbF89a8ycPoGE0XP8lMRqUeYEx8i0OX0czAboC snjsmB7Q82UcSVIaPVzu5NF4mYLhaws= -----END CERTIFICATE-----Generated at Thu Apr 17 09:22:29 2025 by rpki-client