$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa File: 9a0e1652-643d-3073-a20b-c2aa99019a4f.roa (raw, json) Hash identifier: hZEdzYJBEqPHDkkJRDbvcFStwT0XKiGutW5P5IBLFbU= Subject key identifier: 39:7E:A4:D1:A5:18:E7:9F:E5:0E:96:72:46:2D:7D:23:C0:E9:DA:52 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584976A99098E58CE182A9A36400 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 15164 IP address blocks: 209.71.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:90:98:e5:8c:e1:82:a9:a3:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=9c994e8a-057b-445a-8e2b-ad9dcd4be13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:70:6d:6f:de:4f:d7:06:8b:1a:1e:8c:4f: b7:36:e4:41:86:c7:ce:e9:0c:1b:2d:3f:be:e1:e9: 11:41:7d:5a:cc:63:cf:74:bc:e2:a4:e3:3f:ce:3e: 4e:20:59:72:04:b0:19:e9:f7:2d:5e:de:f3:2e:5d: aa:41:1a:44:33:82:de:93:6d:38:c6:c6:ce:89:9c: aa:cd:2d:89:12:1a:66:8f:c9:b6:6d:77:ab:64:2b: e0:91:3e:cb:c3:92:a6:35:b3:e7:0e:38:5d:8c:91: 71:a3:fc:22:20:07:fb:bb:30:dd:cb:99:d9:19:47: 18:bc:26:0f:0f:87:fe:d0:02:ce:7b:5d:f5:37:e7: 99:d3:4b:ec:ff:ce:2a:d7:fb:3d:cf:56:46:94:d8: fb:a5:23:a3:40:a3:35:bd:9d:7c:92:89:f7:00:fd: 73:70:a6:73:cd:e8:36:00:ab:e1:c1:51:9f:db:4f: b1:d5:c6:68:9b:be:a7:58:56:f0:a4:be:de:68:ed: 62:a5:b2:fa:a6:10:29:f8:bd:d2:51:ab:84:d8:1e: fe:63:0a:cd:ab:78:ef:11:cf:de:7d:da:94:aa:26: 7f:ea:0b:d4:68:b6:09:62:74:02:89:60:63:78:69: e7:d7:c6:30:24:84:71:ad:c3:54:af:94:f7:6b:77: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7E:A4:D1:A5:18:E7:9F:E5:0E:96:72:46:2D:7D:23:C0:E9:DA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:11:19:a2:da:eb:20:93:d9:ba:e9:1c:9a:76:67:b6:04:f7: 36:1c:16:5a:48:15:84:07:65:8c:3b:7c:fc:ca:df:af:27:7d: ec:a2:38:a9:8b:96:b9:a7:46:f0:df:c3:ed:15:60:1e:9c:5d: f6:de:b4:0a:52:db:2b:0b:0c:c6:dc:9b:b9:d3:c4:bd:69:7a: b5:7f:54:6a:11:0b:ac:ef:c7:94:a3:3f:e8:93:0a:c9:67:3c: 8f:13:a6:cd:c3:bd:f3:0e:b6:32:32:9d:fc:32:0f:cf:1d:6d: 80:82:71:f5:ad:ff:8d:ff:76:a9:ee:3c:58:b5:68:19:65:29: 13:20:e4:23:0c:38:ba:28:47:0d:d7:8b:b8:61:07:8f:2d:5e: b4:0a:35:9f:04:dc:7b:19:2f:e0:17:86:68:1b:2d:fa:58:c5: 28:c0:95:bf:bd:64:83:ae:cf:06:32:cf:0c:8e:d0:18:d7:c3: 82:ed:66:47:44:7a:54:9a:47:7a:d4:e7:79:f9:85:17:52:f9: 46:cc:33:1b:1c:e5:c6:46:cf:78:1a:0b:fb:e2:16:01:b0:65: 1c:c2:ec:89:c8:01:4e:2a:e1:ce:54:35:9e:6a:c3:7a:64:e2: 4e:d7:66:31:60:ca:0f:26:8a:44:3c:ca:93:a9:34:fb:db:10: e9:75:a9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZCY5YzhgqmjZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk OWM5OTRlOGEtMDU3Yi00NDVhLThlMmItYWQ5ZGNkNGJlMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx5wbW/eT9cGixoejE+3NuRBhsfO6QwbLT++ 4ekRQX1azGPPdLzipOM/zj5OIFlyBLAZ6fctXt7zLl2qQRpEM4Lek204xsbOiZyq zS2JEhpmj8m2bXerZCvgkT7Lw5KmNbPnDjhdjJFxo/wiIAf7uzDdy5nZGUcYvCYP D4f+0ALOe131N+eZ00vs/84q1/s9z1ZGlNj7pSOjQKM1vZ18kon3AP1zcKZzzeg2 AKvhwVGf20+x1cZom76nWFbwpL7eaO1ipbL6phAp+L3SUauE2B7+YwrNq3jvEc/e fdqUqiZ/6gvUaLYJYnQCiWBjeGnn18YwJIRxrcNUr5T3a3dhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl+pNGlGOef5Q6WckYtfSPA6dpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOWEwZTE2NTItNjQzZC0z MDczLWEyMGItYzJhYTk5MDE5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcRGaLa6yCT2brpHJp2Z7YE9zYcFlpIFYQHZYw7fPzK368nfeyiOKmL lrmnRvDfw+0VYB6cXfbetApS2ysLDMbcm7nTxL1perV/VGoRC6zvx5SjP+iTCsln PI8Tps3DvfMOtjIynfwyD88dbYCCcfWt/43/dqnuPFi1aBllKRMg5CMMOLooRw3X i7hhB48tXrQKNZ8E3HsZL+AXhmgbLfpYxSjAlb+9ZIOuzwYyzwyO0BjXw4LtZkdE elSaR3rU53n5hRdS+UbMMxsc5cZGz3gaC/viFgGwZRzC7InIAU4q4c5UNZ5qw3pk 4k7XZjFgyg8mikQ8ypOpNPvbEOl1qaM= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:32 2025 by rpki-client