$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa File: 9a0e1652-643d-3073-a20b-c2aa99019a4f.roa (raw, json) Hash identifier: 24RRcctzoNyhpraXqi9d+CRH7Y5sN3ZxmIXjCKIzD50= Subject key identifier: 52:77:BD:03:4C:44:08:00:AD:73:65:45:36:F9:0A:1E:D5:78:4B:01 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A56004FFE288FF42E53048300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 15164 IP address blocks: 209.71.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4f:fe:28:8f:f4:2e:53:04:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=d613d361-1d1b-41ee-9a69-c4daca67a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:23:88:19:8d:b1:9d:b2:be:8c:b3:31:9c: 5d:40:53:4f:36:e6:0c:3e:ab:bc:b4:37:2d:d3:ae: 33:ed:3d:a2:e0:1f:9a:0a:5d:b6:cb:9e:51:34:2d: a6:4c:a5:5d:8f:96:6a:30:ed:67:96:38:0f:da:0b: b9:87:72:5d:a9:b1:3b:92:62:17:e7:47:db:c0:d4: 9d:db:54:1d:04:57:f7:74:ad:2a:fa:74:d5:5b:2f: 8c:94:be:dd:d8:dc:44:90:e3:e6:53:e7:5f:bc:1f: fd:23:ec:77:6a:58:16:4f:7c:c3:a6:f2:3c:30:4e: af:e4:49:f0:d4:7a:eb:e9:98:79:6e:fe:34:b0:17: a1:3f:ef:98:dd:bc:e0:f6:e2:b8:2d:64:92:8a:97: 4c:93:a1:44:43:6f:55:e1:db:a6:21:4f:e7:d4:0b: b9:c6:b0:41:c2:f3:90:76:cc:3d:6c:05:ad:57:60: 3d:bb:80:85:7d:e1:73:43:1b:23:98:49:65:ce:4a: b1:30:67:b3:04:fb:69:9a:b2:64:31:13:a7:1b:cc: 2e:cb:6c:fe:16:de:32:38:0b:40:f0:da:c4:f7:38: 7a:75:a8:28:9f:f1:19:c0:83:4a:3e:99:e9:24:77: f1:f7:34:38:74:66:d2:a9:2e:97:ca:9b:fb:8a:1b: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:BD:03:4C:44:08:00:AD:73:65:45:36:F9:0A:1E:D5:78:4B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e9:d8:4f:2c:49:ac:d6:8d:75:07:62:02:2f:8c:c6:dc:e7: bc:b3:ff:b3:57:5d:73:99:dd:51:fb:6d:07:c5:b9:e0:19:f0: 0e:1b:a6:c0:e4:a5:32:93:ba:5c:0b:a4:62:8d:83:d4:d3:f8: 73:b3:8b:5f:6d:45:d6:7e:50:be:c8:05:15:97:43:d3:dd:62: ee:59:9e:f8:c3:f5:2d:6d:e3:ca:15:3a:c6:85:2f:7f:01:7a: 19:c2:b2:d2:6e:14:b5:53:ce:76:50:d3:d0:4c:7a:87:f5:52: e0:79:0e:53:6c:d7:7f:77:fc:14:07:d0:d1:7d:c5:59:5a:ac: 51:83:98:16:17:07:d7:73:b8:e4:10:af:27:a9:a0:fa:23:86: 14:2d:71:58:97:94:15:05:b4:90:3c:58:73:4a:8c:3c:37:c1: 28:72:eb:f4:df:1d:2b:61:b7:a8:af:d5:bf:8a:f1:c0:d0:0b: 65:dc:68:2f:ec:4f:d8:c9:ba:6a:e1:0e:58:74:37:bd:1f:fd: 86:c6:5a:fe:bc:a0:2d:24:58:8c:77:fb:9b:d4:c1:ea:22:8a: c4:47:03:25:91:c9:d8:1b:e3:65:9a:cc:03:d7:9a:b1:19:76: 9a:88:68:96:05:6b:51:34:a0:c2:fd:39:e8:7e:cd:cc:62:84: 15:f6:68:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAE/+KI/0LlMEgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ZDYxM2QzNjEtMWQxYi00MWVlLTlhNjktYzRkYWNhNjdhNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLQjiBmNsZ2yvoyzMZxdQFNPNuYMPqu8tDct 064z7T2i4B+aCl22y55RNC2mTKVdj5ZqMO1nljgP2gu5h3JdqbE7kmIX50fbwNSd 21QdBFf3dK0q+nTVWy+MlL7d2NxEkOPmU+dfvB/9I+x3algWT3zDpvI8ME6v5Enw 1Hrr6Zh5bv40sBehP++Y3bzg9uK4LWSSipdMk6FEQ29V4dumIU/n1Au5xrBBwvOQ dsw9bAWtV2A9u4CFfeFzQxsjmEllzkqxMGezBPtpmrJkMROnG8wuy2z+Ft4yOAtA 8NrE9zh6dagon/EZwINKPpnpJHfx9zQ4dGbSqS6Xypv7ihv9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ3vQNMRAgArXNlRTb5Ch7VeEsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOWEwZTE2NTItNjQzZC0z MDczLWEyMGItYzJhYTk5MDE5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADp2E8sSazWjXUHYgIvjMbc57yz/7NXXXOZ3VH7bQfFueAZ8A4bpsDk pTKTulwLpGKNg9TT+HOzi19tRdZ+UL7IBRWXQ9PdYu5ZnvjD9S1t48oVOsaFL38B ehnCstJuFLVTznZQ09BMeof1UuB5DlNs1393/BQH0NF9xVlarFGDmBYXB9dzuOQQ ryepoPojhhQtcViXlBUFtJA8WHNKjDw3wShy6/TfHStht6iv1b+K8cDQC2XcaC/s T9jJumrhDlh0N70f/YbGWv68oC0kWIx3+5vUweoiisRHAyWRydgb42WazAPXmrEZ dpqIaJYFa1E0oML9Oeh+zcxihBX2aG4= -----END CERTIFICATE-----Generated at Tue Jul 1 19:06:48 2025 by rpki-client