$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa File: 833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa (raw, json) Hash identifier: UTOhXO8MqPJFMw+zsuiUNos+vmaCpJb+z0C6wwKQ8f0= Subject key identifier: 94:4C:01:75:FD:5C:84:3E:CE:49:6A:52:78:58:4A:DD:30:56:D7:C3 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858493E6637D9F6790447B47D4380 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa Signing time: Wed 19 Mar 2025 21:19:54 +0000 ROA not before: Wed 19 Mar 2025 21:19:54 +0000 ROA not after: Tue 17 Jun 2025 21:19:54 +0000 asID: 15164 IP address blocks: 209.71.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:66:37:d9:f6:79:04:47:b4:7d:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 19 21:19:54 2025 GMT Not After : Jun 17 21:19:54 2025 GMT Subject: CN=c5a6c4cb-5824-472b-9f4b-40ddc815a735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:f7:db:99:bc:f1:ba:39:db:13:42:9b:56: 4a:79:5f:4f:eb:58:f1:6d:1c:67:ca:ba:a6:4f:72: 93:f5:80:ba:3e:09:45:77:17:9c:ab:eb:27:7b:25: 49:e3:d0:04:6f:25:58:a4:04:34:df:a2:c5:27:d8: 61:0f:bd:e2:63:f3:00:97:1a:9c:fd:98:4a:76:77: a2:ff:97:33:92:bb:8d:a3:b4:48:5b:21:1e:43:a1: 3c:52:1f:5e:37:40:23:ed:85:b9:34:02:8f:89:bb: 87:3f:cd:21:67:fe:d4:4b:14:ce:14:05:22:08:aa: da:42:ba:2f:9d:45:17:3b:e9:61:bf:33:df:81:13: c1:fe:4d:0c:54:9c:2e:b8:b9:02:56:0b:ba:d5:1a: e4:7b:06:ac:f9:c3:55:a5:28:de:11:9f:f5:6a:1c: 77:43:bd:92:43:e2:fa:5e:a8:34:b7:63:6d:4e:dd: b9:95:39:f8:13:5a:69:4f:3f:e8:35:c9:c8:34:9a: ca:f8:79:d5:e9:c2:7f:36:77:07:5e:fb:52:8f:3f: e6:a2:be:2c:73:19:f3:42:a3:fe:44:28:a1:ea:4f: c8:2f:60:54:e3:eb:04:58:3f:d5:c6:d6:f9:c3:5e: 2d:b8:f0:97:df:56:2b:e3:34:95:21:02:f3:c1:7f: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4C:01:75:FD:5C:84:3E:CE:49:6A:52:78:58:4A:DD:30:56:D7:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d5:a1:02:e8:07:63:e1:b0:28:45:b7:ca:42:94:8d:e9:c4: 43:7b:20:f0:ab:0a:e1:7f:ac:c1:96:56:f3:17:aa:17:3c:45: c1:67:0c:e6:19:ba:eb:f9:83:f0:59:06:60:d7:79:0e:c1:9f: 87:12:9b:2e:5b:01:0b:5f:d6:7a:a6:15:ab:7a:a3:28:39:b6: dd:a4:c0:10:b5:d3:b4:08:da:66:12:2f:7d:8e:33:d9:b9:d0: 17:29:87:04:69:ce:11:39:36:56:1d:ae:4c:d6:dc:23:b2:1c: d3:e8:5f:56:fb:cf:c3:67:c4:7e:37:1d:82:2a:12:fe:f2:58: 3d:5a:6b:96:f7:99:be:58:dd:97:f3:cb:40:3a:86:e9:f0:55: 31:c3:65:f9:bb:bc:11:1c:67:d6:40:30:88:92:f5:85:4e:e8: 3c:40:2e:09:3b:ba:e7:f2:76:ce:2d:da:cc:df:1a:2f:da:84: c3:b0:90:46:c8:1b:84:45:42:10:e0:03:54:24:53:59:a1:19: b5:4d:5d:c6:3e:cd:2e:7d:b6:95:22:89:23:ba:9e:38:23:4f: 47:6b:fe:2c:24:25:f1:ea:b7:11:d1:5d:d4:0b:13:20:aa:c9: 07:2a:62:0c:01:96:63:39:7d:cb:75:cb:35:60:71:e8:eb:0a: 65:46:9b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+ZjfZ9nkER7R9Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDMxOTIxMTk1NFoXDTI1MDYxNzIxMTk1NFowLzEtMCsGA1UEAxMk YzVhNmM0Y2ItNTgyNC00NzJiLTlmNGItNDBkZGM4MTVhNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTf325m88bo52xNCm1ZKeV9P61jxbRxnyrqm T3KT9YC6PglFdxecq+sneyVJ49AEbyVYpAQ036LFJ9hhD73iY/MAlxqc/ZhKdnei /5czkruNo7RIWyEeQ6E8Uh9eN0Aj7YW5NAKPibuHP80hZ/7USxTOFAUiCKraQrov nUUXO+lhvzPfgRPB/k0MVJwuuLkCVgu61Rrkewas+cNVpSjeEZ/1ahx3Q72SQ+L6 Xqg0t2NtTt25lTn4E1ppTz/oNcnINJrK+HnV6cJ/NncHXvtSjz/mor4scxnzQqP+ RCih6k/IL2BU4+sEWD/Vxtb5w14tuPCX31Yr4zSVIQLzwX+bhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRMAXX9XIQ+zklqUnhYSt0wVtfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODMzYzE0YzgtNmQyYy0z ZmU1LTljMGYtNmI5YTNmZDYzYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3VoQLoB2PhsChFt8pClI3pxEN7IPCrCuF/rMGWVvMXqhc8RcFnDOYZ uuv5g/BZBmDXeQ7Bn4cSmy5bAQtf1nqmFat6oyg5tt2kwBC107QI2mYSL32OM9m5 0BcphwRpzhE5NlYdrkzW3COyHNPoX1b7z8NnxH43HYIqEv7yWD1aa5b3mb5Y3Zfz y0A6hunwVTHDZfm7vBEcZ9ZAMIiS9YVO6DxALgk7uufyds4t2szfGi/ahMOwkEbI G4RFQhDgA1QkU1mhGbVNXcY+zS59tpUiiSO6njgjT0dr/iwkJfHqtxHRXdQLEyCq yQcqYgwBlmM5fct1yzVgcejrCmVGmwI= -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:51 2025 by rpki-client