$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json) Hash identifier: 0XAbrq28Gg+DtS4nSzEPFmiF18clYV2ycyEGSbMoWJQ= Subject key identifier: 1D:F8:B6:F5:D4:03:7B:39:EA:31:E0:80:A9:30:AE:B2:14:92:BB:52 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EC7673F95FF02E4F4B80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 199.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ec:76:73:f9:5f:f0:2e:4f:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=8910b093-9d69-4621-99bd-8e9b91f915ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:1d:17:bb:60:24:82:39:3f:15:66:4b:b1: f5:9a:3e:b0:5b:45:b1:69:36:48:08:07:b9:92:63: 94:78:5a:2e:75:70:bd:a6:15:d7:e8:11:83:37:c4: ef:64:c2:f3:03:00:8e:ed:aa:bb:0d:4c:e7:06:7c: ce:4c:0d:1d:86:45:61:fb:79:9f:95:ff:1c:86:5f: 16:7b:43:54:3d:49:c0:3e:12:61:52:9d:a3:b3:67: 83:5c:96:09:4b:66:14:f8:88:e7:dc:b8:7e:0b:dc: d4:c7:89:1c:0e:cc:cf:91:a5:81:9b:7d:d3:d7:50: 80:b9:fb:96:16:83:4f:dd:56:3c:03:25:ee:ed:bc: c6:28:fa:fe:52:f3:91:25:77:4a:50:fd:ab:fd:6f: a1:ce:1c:64:f2:d8:a4:be:3e:71:61:81:e3:a3:63: a9:69:ee:93:d8:18:1f:24:a1:bd:28:0a:51:55:85: 68:64:70:cc:98:5a:d9:84:45:f0:f5:22:27:59:2c: cc:19:1f:0c:7f:91:17:70:b9:c3:8e:cf:84:4e:2e: 00:62:cc:0d:b4:81:1b:58:60:f7:c3:c5:5a:8e:b5: fa:e3:de:dc:96:ef:21:94:f2:91:e4:86:b5:1c:01: 34:67:78:ed:c6:14:3d:bd:28:b5:14:3b:60:c9:3e: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F8:B6:F5:D4:03:7B:39:EA:31:E0:80:A9:30:AE:B2:14:92:BB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bd:8b:81:75:13:f4:df:91:a6:85:2e:bc:d4:b4:0e:32:13: f4:21:fd:62:5d:b0:7a:fa:13:bd:af:af:17:de:9b:cc:a2:ad: b3:3c:93:b3:cf:a2:f9:0e:ab:0a:55:33:0b:ef:96:ac:de:85: a4:ca:a5:96:b2:f7:ea:8a:d6:5d:0b:e6:56:43:97:5e:84:73: 4e:c9:64:c4:a3:84:0e:32:de:5b:93:ea:c5:ce:b5:6c:84:9c: a2:05:62:f7:cc:af:35:f9:df:85:f4:0c:d7:67:47:a5:e7:0e: ed:5e:52:28:de:5c:5c:13:b8:b5:b7:9c:2c:2c:20:85:34:68: 08:fd:08:d8:67:6f:59:7d:19:65:6e:d6:63:6b:68:e3:cc:98: 9e:43:ba:2c:ee:98:e2:d6:2a:90:c5:ee:30:f0:35:25:eb:94: f6:01:ef:22:08:33:8f:0a:a5:d2:e3:40:a6:14:97:cc:87:e7: dc:1e:c8:51:c3:3b:a4:20:33:d5:a1:23:e3:e5:c4:88:13:d2: 51:5d:c0:59:b3:52:b3:d1:43:df:28:64:d9:76:8c:91:86:41: d9:91:a7:99:bb:17:b6:8f:a7:51:f1:96:8c:8d:f8:45:b8:4f: 33:d8:4c:c5:ac:82:6d:66:82:c0:e4:42:b9:29:35:0c:92:b7: b2:0d:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ux2c/lf8C5PS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ODkxMGIwOTMtOWQ2OS00NjIxLTk5YmQtOGU5YjkxZjkxNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/wdF7tgJII5PxVmS7H1mj6wW0WxaTZICAe5 kmOUeFoudXC9phXX6BGDN8TvZMLzAwCO7aq7DUznBnzOTA0dhkVh+3mflf8chl8W e0NUPUnAPhJhUp2js2eDXJYJS2YU+Ijn3Lh+C9zUx4kcDszPkaWBm33T11CAufuW FoNP3VY8AyXu7bzGKPr+UvORJXdKUP2r/W+hzhxk8tikvj5xYYHjo2Opae6T2Bgf JKG9KApRVYVoZHDMmFrZhEXw9SInWSzMGR8Mf5EXcLnDjs+ETi4AYswNtIEbWGD3 w8VajrX6497clu8hlPKR5Ia1HAE0Z3jtxhQ9vSi1FDtgyT4lvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB34tvXUA3s56jHggKkwrrIUkrtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGFkMDRlOTctNTFlZi0z OWIyLWE5MGUtNzk4ZjhlNDVjNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS9i4F1E/TfkaaFLrzUtA4yE/Qh/WJdsHr6E72vrxfem8yirbM8k7PP ovkOqwpVMwvvlqzehaTKpZay9+qK1l0L5lZDl16Ec07JZMSjhA4y3luT6sXOtWyE nKIFYvfMrzX534X0DNdnR6XnDu1eUijeXFwTuLW3nCwsIIU0aAj9CNhnb1l9GWVu 1mNraOPMmJ5DuizumOLWKpDF7jDwNSXrlPYB7yIIM48KpdLjQKYUl8yH59weyFHD O6QgM9WhI+PlxIgT0lFdwFmzUrPRQ98oZNl2jJGGQdmRp5m7F7aPp1HxloyN+EW4 TzPYTMWsgm1mgsDkQrkpNQySt7INUaM= -----END CERTIFICATE-----Generated at Sat May 10 13:45:28 2025 by rpki-client