$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json) Hash identifier: Mx4Z+Nx62WQ92ub9Cc1tBDMzVJ9yX5rXQnUWWIRRd1U= Subject key identifier: 1E:7C:61:25:57:F1:A9:E6:95:20:E7:2B:56:DE:0D:75:70:A1:AE:48 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE100058B144F42AD2FE7940 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:58:b1:44:f4:2a:d2:fe:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=bc8cf5ee-830c-4a89-b7f3-7aad870a7775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:16:50:6f:17:0d:3a:05:bf:4c:db:62:1c: e8:65:b2:6e:6c:c0:d3:a0:f4:8f:04:61:d8:41:85: f9:42:0f:64:7a:80:b7:69:1b:55:19:a9:65:68:87: 5b:37:dc:86:57:c5:1f:39:2a:a7:9a:02:59:89:e0: 01:2c:c1:62:3e:2f:73:49:b0:76:05:4f:b5:20:bb: 96:04:4e:b8:ef:6c:13:51:97:19:8f:66:ab:e9:a7: 9b:82:a2:f4:ae:6b:9c:36:aa:8a:e7:c1:f2:08:23: ef:e0:bb:91:73:4a:4e:b3:ef:a6:38:2b:aa:c1:73: b3:ff:b0:e0:cb:8f:9f:00:bb:fc:f9:c4:22:70:a7: 3b:0c:d8:b6:05:97:c1:41:1e:35:35:0a:94:2b:cb: b4:e9:4d:f5:c7:c1:f3:4c:b0:28:12:92:f7:28:5a: 70:4e:77:1f:fb:11:e9:44:6b:fd:7f:5f:d3:e4:84: 80:d4:39:0b:aa:58:10:e1:f8:f5:7b:83:d9:9e:35: dc:6d:22:0b:49:06:32:2c:b4:b0:61:9d:0d:61:60: 80:63:cc:34:4f:79:0a:e9:2a:5b:65:16:1d:00:dc: c4:23:da:08:f3:03:6b:56:b5:24:8d:fa:e4:66:55: f7:d6:92:2e:34:c7:9d:0a:30:bd:fa:d1:d4:fb:9d: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7C:61:25:57:F1:A9:E6:95:20:E7:2B:56:DE:0D:75:70:A1:AE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:90:a8:25:b2:3b:8d:5e:fe:90:f0:c1:af:5a:2e:0e:f4:2e: b4:d0:bc:8a:3e:b7:26:b7:b7:21:6e:49:2d:fc:a0:9c:5c:17: 32:ba:58:c8:c6:f2:f4:f4:f8:fd:e3:02:44:f5:10:77:6b:ab: 91:bf:90:20:dc:99:7e:01:1b:e0:54:dc:d3:a3:0a:6e:a7:f0: 52:37:d4:cd:b6:38:f0:8f:cd:b4:0f:d6:0a:5b:f5:80:2b:83: d9:0b:6b:7b:2a:82:00:2b:e8:86:b3:62:2b:f1:87:35:9d:95: bf:2c:08:b5:9f:da:f8:9e:51:81:cb:fc:cd:d9:50:68:d8:d7: de:21:3c:ce:90:ed:26:70:98:9b:a7:41:c4:d2:8e:b2:e0:c6: 34:bb:02:07:2d:65:93:ab:f9:99:83:de:ae:4c:a7:d8:ab:81: 82:33:5c:67:e9:88:a7:a2:ea:b1:f2:11:d1:72:87:29:b7:58: 11:73:e5:1a:d2:36:25:77:d0:ae:6e:34:a9:c2:03:4a:37:49: d1:5e:34:81:94:53:42:16:d5:c2:c2:61:aa:2f:03:48:f2:94: 58:ba:f1:6b:fc:3d:9f:75:52:a8:a4:40:9c:87:c1:4d:ad:14: bd:a7:83:e1:a0:34:ce:44:1b:46:f8:e2:f4:90:b5:35:90:8d: f9:7a:a5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EABYsUT0KtL+eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YmM4Y2Y1ZWUtODMwYy00YTg5LWI3ZjMtN2FhZDg3MGE3Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmkWUG8XDToFv0zbYhzoZbJubMDToPSPBGHY QYX5Qg9keoC3aRtVGallaIdbN9yGV8UfOSqnmgJZieABLMFiPi9zSbB2BU+1ILuW BE6472wTUZcZj2ar6aebgqL0rmucNqqK58HyCCPv4LuRc0pOs++mOCuqwXOz/7Dg y4+fALv8+cQicKc7DNi2BZfBQR41NQqUK8u06U31x8HzTLAoEpL3KFpwTncf+xHp RGv9f1/T5ISA1DkLqlgQ4fj1e4PZnjXcbSILSQYyLLSwYZ0NYWCAY8w0T3kK6Spb ZRYdANzEI9oI8wNrVrUkjfrkZlX31pIuNMedCjC9+tHU+50e7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB58YSVX8anmlSDnK1beDXVwoa5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGFkMDRlOTctNTFlZi0z OWIyLWE5MGUtNzk4ZjhlNDVjNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGQqCWyO41e/pDwwa9aLg70LrTQvIo+tya3tyFuSS38oJxcFzK6WMjG 8vT0+P3jAkT1EHdrq5G/kCDcmX4BG+BU3NOjCm6n8FI31M22OPCPzbQP1gpb9YAr g9kLa3sqggAr6IazYivxhzWdlb8sCLWf2vieUYHL/M3ZUGjY194hPM6Q7SZwmJun QcTSjrLgxjS7AgctZZOr+ZmD3q5Mp9irgYIzXGfpiKei6rHyEdFyhym3WBFz5RrS NiV30K5uNKnCA0o3SdFeNIGUU0IW1cLCYaovA0jylFi68Wv8PZ91UqikQJyHwU2t FL2ng+GgNM5EG0b44vSQtTWQjfl6pW8= -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:39 2025 by rpki-client