$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a2fd428e-8683-30a8-91ae-e770350e95fa.roa File: a2fd428e-8683-30a8-91ae-e770350e95fa.roa (raw, json) Hash identifier: qOH9AUN1ELpxmXfKh0IeUnEAo9Vwky+gdWQZUN6ejgE= Subject key identifier: 6C:0D:98:91:B0:CA:F9:05:A5:8A:4B:CF:87:AA:E6:EE:C4:05:04:07 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F432858499A86CAA0A77E112100A62380 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a2fd428e-8683-30a8-91ae-e770350e95fa.roa Signing time: Mon 21 Apr 2025 21:19:54 +0000 ROA not before: Mon 21 Apr 2025 21:19:54 +0000 ROA not after: Sun 20 Jul 2025 21:19:54 +0000 asID: 15164 IP address blocks: 209.71.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:86:ca:a0:a7:7e:11:21:00:a6:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 21 21:19:54 2025 GMT Not After : Jul 20 21:19:54 2025 GMT Subject: CN=995e13cb-ad7e-42f2-ac81-e82a05df661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:69:44:a3:88:53:42:35:f5:ca:01:e5:0d: 95:1a:39:4d:ba:57:68:e3:dc:eb:fd:17:ec:62:ce: b7:f0:67:dc:fa:6a:78:50:7e:7d:fb:cd:2c:a7:37: 3a:0e:36:b7:4d:2b:ff:ed:71:f5:82:19:d8:a1:ba: cb:18:d9:60:13:2a:e7:42:39:ff:96:2b:83:f6:dc: 37:32:45:d1:f2:d9:41:87:4d:af:e4:b6:4a:b9:65: da:3c:81:e8:4a:5a:fe:1d:e9:59:98:f3:fe:c0:69: 2f:b5:84:68:b1:7e:a9:3d:3c:d2:92:7f:7c:79:11: 1a:dc:3e:c6:66:d8:7b:e4:1f:8d:ec:94:a0:1d:69: 3c:fc:dc:aa:0b:25:86:2c:d7:cf:bf:1d:3b:a1:a9: 88:87:f7:cf:7a:fb:3a:d3:9e:1c:5b:e1:a3:32:47: e0:5d:14:ca:21:41:f6:a3:43:11:81:08:a1:21:1a: e2:96:f8:fd:34:c5:51:a8:81:b2:dd:2d:9b:01:44: a6:21:da:db:ab:69:7a:ab:84:b5:5f:2d:f0:76:8e: b6:bb:09:e7:b7:03:5f:5c:67:67:55:38:1b:6d:69: 3a:b9:90:34:a1:11:92:90:8a:79:e4:36:2d:df:e5: 57:b2:91:a6:3c:c5:01:8e:10:39:bc:14:35:c1:2c: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0D:98:91:B0:CA:F9:05:A5:8A:4B:CF:87:AA:E6:EE:C4:05:04:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a2fd428e-8683-30a8-91ae-e770350e95fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:18:02:c2:9e:93:92:bb:25:ec:ea:6f:48:e4:5e:40:f5:14: be:d6:d9:22:f8:af:d6:04:c1:0a:d4:0b:9c:df:c7:01:b5:6d: c5:ef:75:f8:05:3f:d9:79:45:ef:d3:05:89:66:6d:54:79:3c: ca:e7:a1:a6:1f:75:37:34:5a:ef:9c:58:03:6c:9c:95:4f:31: 1f:a6:0a:fa:28:28:7d:51:33:e0:e2:bf:4f:16:be:d9:40:a8: 11:76:c8:f0:f0:d9:a9:2d:16:88:f5:ee:4f:00:13:b6:b8:ff: 9c:1a:f6:3b:b8:11:0d:f7:12:e0:1e:06:b3:e9:ab:7b:f4:9c: b9:ba:6e:7e:2b:98:ba:d6:da:b1:f3:06:30:86:7c:e0:ca:28: 73:91:74:3c:12:e2:96:2b:8c:cd:17:dc:7b:e1:61:0d:d6:a3: c9:67:7b:21:09:42:56:32:3a:d3:74:4a:b5:f9:97:7c:30:0a: 65:d4:11:1c:e6:b3:ca:4a:c4:3b:68:19:a6:1d:ea:4a:12:b9: f7:d6:69:dc:51:21:88:fc:a6:76:cc:cc:e8:95:ab:ff:d5:1b: 4c:f2:d1:04:dd:57:45:9f:f3:d6:ab:ad:e7:b0:3d:13:86:77: 64:da:43:24:51:5b:40:c2:19:02:19:b9:8d:57:a8:88:bd:67: 79:e8:22:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmahsqgp34RIQCmI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDQyMTIxMTk1NFoXDTI1MDcyMDIxMTk1NFowLzEtMCsGA1UEAxMk OTk1ZTEzY2ItYWQ3ZS00MmYyLWFjODEtZTgyYTA1ZGY2NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosRpRKOIU0I19coB5Q2VGjlNuldo49zr/Rfs Ys638Gfc+mp4UH59+80spzc6Dja3TSv/7XH1ghnYobrLGNlgEyrnQjn/liuD9tw3 MkXR8tlBh02v5LZKuWXaPIHoSlr+HelZmPP+wGkvtYRosX6pPTzSkn98eREa3D7G Zth75B+N7JSgHWk8/NyqCyWGLNfPvx07oamIh/fPevs6054cW+GjMkfgXRTKIUH2 o0MRgQihIRrilvj9NMVRqIGy3S2bAUSmIdrbq2l6q4S1Xy3wdo62uwnntwNfXGdn VTgbbWk6uZA0oRGSkIp55DYt3+VXspGmPMUBjhA5vBQ1wSwMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwNmJGwyvkFpYpLz4eq5u7EBQQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTJmZDQyOGUtODY4My0z MGE4LTkxYWUtZTc3MDM1MGU5NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0YAsKek5K7Jezqb0jkXkD1FL7W2SL4r9YEwQrUC5zfxwG1bcXvdfgF P9l5Re/TBYlmbVR5PMrnoaYfdTc0Wu+cWANsnJVPMR+mCvooKH1RM+Div08WvtlA qBF2yPDw2aktFoj17k8AE7a4/5wa9ju4EQ33EuAeBrPpq3v0nLm6bn4rmLrW2rHz BjCGfODKKHORdDwS4pYrjM0X3HvhYQ3Wo8lneyEJQlYyOtN0SrX5l3wwCmXUERzm s8pKxDtoGaYd6koSuffWadxRIYj8pnbMzOiVq//VG0zy0QTdV0Wf89arreewPROG d2TaQyRRW0DCGQIZuY1XqIi9Z3noIl0= -----END CERTIFICATE-----Generated at Mon May 12 19:27:28 2025 by rpki-client