$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa File: 2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa (raw, json) Hash identifier: 4J1O2eckjGT7tpWB+nwtjsh2pnuOFf8dAjaX8dmP1m0= Subject key identifier: 42:95:95:EB:8D:22:31:B4:BB:F9:14:BC:A7:69:D1:54:F9:7A:13:C8 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A5E605BF97A2FD4D92408F760 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 15164 IP address blocks: 209.71.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:f9:7a:2f:d4:d9:24:08:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=a14b693f-7808-4d38-be5a-b2546d564ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:b6:d4:ab:08:98:e5:ab:70:5e:40:79:1a: 5a:46:43:c2:5d:76:f5:0f:a9:dc:45:c7:43:c5:20: 85:24:d0:00:27:1d:4b:4b:dd:62:1c:bc:d9:c5:bb: fd:0b:f6:e1:02:fa:9d:dc:81:35:ba:b3:47:56:fd: 05:90:34:82:60:1b:b3:44:ed:86:46:45:ed:fa:13: f0:1c:33:4a:98:c9:99:ce:2c:c0:96:24:0e:82:e1: 16:04:5d:19:1f:62:95:9d:5f:fb:80:b1:ad:4d:ec: ff:d1:64:01:d0:19:69:19:c0:fa:ba:f8:49:ed:bb: 75:fc:85:4d:3c:4c:f4:96:3f:9b:48:aa:58:0d:01: 1d:88:46:03:b3:4f:9d:30:d2:50:2b:30:08:c3:cc: 2e:ce:0a:11:30:2e:08:87:68:a2:8e:a0:dc:68:5c: 4a:1d:12:7c:95:3a:4e:ed:9d:18:3d:56:cd:70:45: 91:48:79:a3:5d:ac:74:e6:39:de:b8:86:41:23:c9: 9c:97:7f:61:b7:4b:b2:1c:cd:55:2f:45:81:61:49: 6a:26:30:7a:25:ef:00:6f:08:77:f0:a2:9f:c2:27: 0e:af:d1:bf:a5:b9:8a:61:0d:55:9f:dc:75:0e:2d: 82:cf:3b:c0:19:f0:1a:9b:46:ea:a2:43:f5:8d:3d: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:95:95:EB:8D:22:31:B4:BB:F9:14:BC:A7:69:D1:54:F9:7A:13:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b6:64:d7:3f:a5:dd:55:ce:8e:f7:e9:0e:34:1d:86:27:3a: 42:f9:eb:0a:7a:87:80:23:f3:f6:fd:ef:de:f0:f7:f6:54:2b: 26:10:46:79:6e:9d:fe:b6:62:85:70:bb:bd:4a:c3:cd:1d:89: d9:e9:a3:28:a1:a2:b8:52:e3:d7:97:22:f1:fd:76:4b:1f:92: 0e:13:1e:01:38:3a:5d:d2:99:d9:80:7d:f8:46:b2:b4:da:8e: d7:f6:3a:d2:1a:6c:cd:bb:f5:51:ac:a3:3a:b1:70:96:bc:1c: b7:97:cf:4a:36:fa:01:7a:82:18:1e:a3:ad:b9:7f:29:82:db: e9:0e:c2:17:12:c1:2d:d7:f8:dc:92:1b:1d:0d:ec:c6:e9:2b: 00:9b:6d:e8:fa:68:23:06:65:72:a7:5d:8f:30:32:6c:e1:fa: f5:77:2d:cd:3d:fa:21:25:2a:80:97:35:e8:45:a8:ca:7e:ef: 03:62:8d:4c:32:ee:a7:5a:7b:a3:1d:b1:f9:4e:ed:93:b1:e7: 59:33:f8:2b:d3:cc:0c:7a:cc:7a:72:0f:a9:a0:44:0c:d3:93: 0f:2b:26:93:2c:f0:54:5e:66:7e:2a:8a:62:81:07:1a:14:fa: 19:87:8c:7f:0d:24:88:c8:6e:d6:c4:8e:d0:12:a2:02:7a:da: 13:c2:02:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFv5ei/U2SQI92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTE0YjY5M2YtNzgwOC00ZDM4LWJlNWEtYjI1NDZkNTY0ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVm21KsImOWrcF5AeRpaRkPCXXb1D6ncRcdD xSCFJNAAJx1LS91iHLzZxbv9C/bhAvqd3IE1urNHVv0FkDSCYBuzRO2GRkXt+hPw HDNKmMmZzizAliQOguEWBF0ZH2KVnV/7gLGtTez/0WQB0BlpGcD6uvhJ7bt1/IVN PEz0lj+bSKpYDQEdiEYDs0+dMNJQKzAIw8wuzgoRMC4Ih2iijqDcaFxKHRJ8lTpO 7Z0YPVbNcEWRSHmjXax05jneuIZBI8mcl39ht0uyHM1VL0WBYUlqJjB6Je8Abwh3 8KKfwicOr9G/pbmKYQ1Vn9x1Di2CzzvAGfAam0bqokP1jT11mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKVleuNIjG0u/kUvKdp0VT5ehPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMmEzMmMwYTEtZWQxYi0z YTNlLWIzODAtOTE4Mzc0ZDc3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI22ZNc/pd1Vzo736Q40HYYnOkL56wp6h4Aj8/b9797w9/ZUKyYQRnlu nf62YoVwu71Kw80didnpoyihorhS49eXIvH9dksfkg4THgE4Ol3SmdmAffhGsrTa jtf2OtIabM279VGsozqxcJa8HLeXz0o2+gF6ghgeo625fymC2+kOwhcSwS3X+NyS Gx0N7MbpKwCbbej6aCMGZXKnXY8wMmzh+vV3Lc09+iElKoCXNehFqMp+7wNijUwy 7qdae6MdsflO7ZOx51kz+CvTzAx6zHpyD6mgRAzTkw8rJpMs8FReZn4qimKBBxoU +hmHjH8NJIjIbtbEjtASogJ62hPCAkw= -----END CERTIFICATE-----Generated at Tue Jul 1 18:07:36 2025 by rpki-client