$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa File: a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa (raw, json) Hash identifier: yDG7TZ/rghpS0qe762/XWzw45Qj0jxrbrsclUu6JOTw= Subject key identifier: FD:48:AC:0C:51:1C:85:D0:0F:8F:4D:77:44:25:8D:87:62:C9:BE:86 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285849D237DD83A3963E64F1993F80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa Signing time: Sun 11 May 2025 20:06:08 +0000 ROA not before: Sun 11 May 2025 20:06:08 +0000 ROA not after: Sat 09 Aug 2025 20:06:08 +0000 asID: 15164 IP address blocks: 209.71.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:37:dd:83:a3:96:3e:64:f1:99:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: May 11 20:06:08 2025 GMT Not After : Aug 9 20:06:08 2025 GMT Subject: CN=dc73f5f1-4f1a-4e03-9dd0-74e3a3710bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:69:cb:a1:ae:44:bd:8f:ea:60:a3:13:eb: eb:16:7b:07:b8:9a:66:7f:50:67:97:29:ee:84:78: 4a:d4:3d:da:12:ca:9e:2d:a5:6c:8d:a8:ff:23:0a: ad:b9:b5:9b:59:34:c2:35:00:7e:08:72:77:93:8f: 08:2b:e2:b7:f1:ca:4d:f9:87:83:82:25:61:4f:4c: 0d:c9:fe:a1:3c:83:0b:4a:63:18:5d:e5:00:04:07: 31:00:9f:bf:84:47:c9:aa:16:4c:da:d6:a5:5b:ca: 01:7c:c2:7d:2a:3a:b6:76:cc:19:8d:ef:05:ad:57: 31:15:7c:1e:02:43:45:91:b3:4b:2c:2f:67:50:ee: b4:60:72:96:e6:b7:9b:c4:62:a6:c7:3e:41:23:c2: c1:3b:cc:93:f0:1b:c4:fa:0d:92:e3:3d:f2:5e:8d: 5f:6b:4d:47:ef:0d:c5:a1:38:e4:a8:99:f7:bf:89: 2b:49:dd:d6:1a:28:e4:6b:bc:bc:26:12:88:8a:6f: d1:9b:6c:6c:48:63:c2:dd:06:c6:ce:c0:94:4c:2b: 38:33:e7:cb:03:51:3e:cf:0e:72:f4:24:5a:2a:f2: 2f:a9:f5:ef:f9:3e:cb:bf:b6:67:f8:f4:7b:f4:93: 0a:0c:d3:37:51:4c:98:17:26:34:2c:68:7c:8f:e0: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:AC:0C:51:1C:85:D0:0F:8F:4D:77:44:25:8D:87:62:C9:BE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f7:ce:56:dd:a4:d1:9e:59:0b:f9:82:b8:1b:a1:f0:1a:ef: 71:42:01:d9:6b:96:43:99:a4:19:4a:aa:25:14:56:6b:49:1a: b8:52:a8:f0:7d:a4:02:2c:34:c0:6c:e5:96:37:75:d0:18:3e: 6f:bf:4b:da:28:e7:43:3a:0d:c2:fe:89:bd:b5:7b:36:8d:04: 1f:bd:50:12:d1:35:1e:46:1a:81:89:f2:0f:6d:8a:dc:d6:9d: 01:71:12:d6:5e:42:91:6c:d4:5e:52:35:73:8b:99:5a:3c:2e: 1b:9e:76:bb:8d:c3:b1:f8:df:5b:29:cf:02:3a:80:48:dc:80: dc:b5:99:1e:60:c2:a4:41:c4:a4:ff:52:1d:62:d7:98:5d:26: c1:83:8e:82:c1:f8:b3:e4:9a:c7:c8:c0:74:c7:cf:5e:12:4f: 42:eb:36:df:83:1a:6a:d4:4b:f6:f1:87:f8:04:75:ab:63:cf: 3f:44:95:73:03:1d:16:1c:e9:a0:9f:3d:3b:af:4c:57:e7:cd: b0:3e:98:66:6c:d4:f9:3b:8a:75:40:43:f5:de:ba:c4:d4:84: d3:d4:67:17:43:a5:ac:a9:84:69:37:55:29:e7:f4:18:03:63: c3:78:b8:d0:b0:3d:59:b4:9d:fe:32:c0:f8:5e:a1:42:67:f5: 94:ca:f1:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSN92Do5Y+ZPGZP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDUxMTIwMDYwOFoXDTI1MDgwOTIwMDYwOFowLzEtMCsGA1UEAxMk ZGM3M2Y1ZjEtNGYxYS00ZTAzLTlkZDAtNzRlM2EzNzEwYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Zpy6GuRL2P6mCjE+vrFnsHuJpmf1Bnlynu hHhK1D3aEsqeLaVsjaj/IwqtubWbWTTCNQB+CHJ3k48IK+K38cpN+YeDgiVhT0wN yf6hPIMLSmMYXeUABAcxAJ+/hEfJqhZM2talW8oBfMJ9Kjq2dswZje8FrVcxFXwe AkNFkbNLLC9nUO60YHKW5rebxGKmxz5BI8LBO8yT8BvE+g2S4z3yXo1fa01H7w3F oTjkqJn3v4krSd3WGijka7y8JhKIim/Rm2xsSGPC3QbGzsCUTCs4M+fLA1E+zw5y 9CRaKvIvqfXv+T7Lv7Zn+PR79JMKDNM3UUyYFyY0LGh8j+CEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1IrAxRHIXQD49Nd0QljYdiyb6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTFlYjNlNzctYjk2YS0z YTQ0LTkyYzktOTQ3OWQwMmJhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz3zlbdpNGeWQv5grgbofAa73FCAdlrlkOZpBlKqiUUVmtJGrhSqPB9 pAIsNMBs5ZY3ddAYPm+/S9oo50M6DcL+ib21ezaNBB+9UBLRNR5GGoGJ8g9titzW nQFxEtZeQpFs1F5SNXOLmVo8LhuedruNw7H431spzwI6gEjcgNy1mR5gwqRBxKT/ Uh1i15hdJsGDjoLB+LPkmsfIwHTHz14ST0LrNt+DGmrUS/bxh/gEdatjzz9ElXMD HRYc6aCfPTuvTFfnzbA+mGZs1Pk7inVAQ/XeusTUhNPUZxdDpayphGk3VSnn9BgD Y8N4uNCwPVm0nf4ywPheoUJn9ZTK8Z4= -----END CERTIFICATE-----Generated at Tue May 13 17:22:37 2025 by rpki-client