$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: Dphs/f+67Jw22q+WyIznuLlKWKixGTd4mvGwhXbOxaE= Subject key identifier: 20:16:65:38:A9:39:2A:C0:8A:22:23:85:00:0B:7C:5F:BE:7F:F1:3C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1005991AE5B32EC14E66C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:05:99:1a:e5:b3:2e:c1:4e:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=107ac70c-8c0f-41a1-bf1c-5d8e8dda01d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:da:68:0c:f5:c3:ff:2f:37:c7:12:27:cf: 3a:d0:ed:b5:9a:5b:26:57:14:59:57:44:27:ed:1a: f4:d8:60:bc:67:c4:48:dd:06:2f:57:75:9e:0e:30: 47:c2:78:5c:8b:b2:07:8d:f4:c4:10:0b:72:a2:ea: 14:2b:c3:64:4b:05:e0:a1:02:12:8b:45:f6:20:5d: ac:e6:8f:e2:08:62:e6:e3:d1:34:d9:cc:83:bc:43: f1:9c:a0:07:a3:2a:4c:99:f0:af:4c:06:7c:ef:d0: 66:94:92:1a:cb:96:3e:56:6a:35:70:23:d8:34:87: 43:bd:07:9f:be:4b:63:61:c8:38:97:a6:84:0c:d6: ef:84:b3:70:29:6b:9b:82:9b:15:ff:de:9b:cd:e2: 1c:22:ac:7b:ad:6e:56:c1:ff:68:af:a4:3e:14:44: 7a:e7:2b:f8:58:91:2d:e8:38:64:b2:15:1c:ff:0a: 3f:b8:04:8f:60:51:2f:a6:ea:59:37:29:15:e6:77: 39:33:c6:b4:29:41:2f:6d:86:03:0c:f8:3f:70:7e: b2:cd:ca:5c:8b:45:4b:72:01:02:f3:87:8d:ea:4f: cd:f2:4b:2f:66:12:28:38:79:84:52:26:4f:59:f4: 83:0f:75:db:c8:ca:9a:be:90:f5:14:38:e3:88:5a: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:65:38:A9:39:2A:C0:8A:22:23:85:00:0B:7C:5F:BE:7F:F1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7d:06:64:dd:c6:5e:f8:ed:0b:e8:30:6f:83:e2:14:ad:bf: 91:a0:08:04:91:6f:cf:dd:2b:e1:60:b1:c2:68:33:3a:8e:2a: fe:ce:e9:6e:36:4c:07:16:25:d9:44:86:8e:02:b4:97:fd:6e: 6f:4e:6b:25:08:0d:d5:50:0c:74:e8:1d:b1:29:d0:44:01:4b: ca:56:98:4f:2d:b3:54:55:19:18:9b:2c:a5:aa:8a:f7:5d:55: 45:50:99:92:51:ef:88:45:17:3a:ec:ae:6e:9f:f5:24:3c:46: 3b:6a:a9:d1:c9:da:78:ca:ee:a9:2c:6b:b7:97:35:e2:a6:4e: 91:7d:90:ec:ce:5a:8d:28:da:57:5b:29:f0:f2:36:57:d2:75: 5f:e6:38:7a:59:b1:75:f0:f5:00:f9:b6:08:fc:fe:7b:e2:aa: 20:94:4b:42:d4:f1:94:09:64:ef:ce:62:40:c7:80:cd:4b:30: dc:98:82:91:77:55:60:b2:e5:b0:65:fd:26:b4:ef:03:a6:3e: f8:88:79:8e:15:8c:73:19:b5:ba:a1:3c:52:35:1a:fe:27:ea: 4d:7d:32:56:e2:9f:4e:3e:97:98:b7:be:56:43:ad:ba:2b:90: 5d:65:cf:36:a9:2b:05:d6:42:cd:3f:89:f3:3a:f6:cb:6d:e6: c0:18:52:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAWZGuWzLsFOZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTA3YWM3MGMtOGMwZi00MWExLWJmMWMtNWQ4ZThkZGEwMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglDaaAz1w/8vN8cSJ8860O21mlsmVxRZV0Qn 7Rr02GC8Z8RI3QYvV3WeDjBHwnhci7IHjfTEEAtyouoUK8NkSwXgoQISi0X2IF2s 5o/iCGLm49E02cyDvEPxnKAHoypMmfCvTAZ879BmlJIay5Y+Vmo1cCPYNIdDvQef vktjYcg4l6aEDNbvhLNwKWubgpsV/96bzeIcIqx7rW5Wwf9or6Q+FER65yv4WJEt 6DhkshUc/wo/uASPYFEvpupZNykV5nc5M8a0KUEvbYYDDPg/cH6yzcpci0VLcgEC 84eN6k/N8ksvZhIoOHmEUiZPWfSDD3XbyMqavpD1FDjjiFrSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAWZTipOSrAiiIjhQALfF++f/E8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx9BmTdxl747QvoMG+D4hStv5GgCASRb8/dK+FgscJoMzqOKv7O6W42 TAcWJdlEho4CtJf9bm9OayUIDdVQDHToHbEp0EQBS8pWmE8ts1RVGRibLKWqivdd VUVQmZJR74hFFzrsrm6f9SQ8RjtqqdHJ2njK7qksa7eXNeKmTpF9kOzOWo0o2ldb KfDyNlfSdV/mOHpZsXXw9QD5tgj8/nviqiCUS0LU8ZQJZO/OYkDHgM1LMNyYgpF3 VWCy5bBl/Sa07wOmPviIeY4VjHMZtbqhPFI1Gv4n6k19Mlbin04+l5i3vlZDrbor kF1lzzapKwXWQs0/ifM69stt5sAYUs8= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:15 2025 by rpki-client