$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/400fc5b2-4364-3e2a-8d78-c32c6f39281e.roa File: 400fc5b2-4364-3e2a-8d78-c32c6f39281e.roa (raw, json) Hash identifier: 6OiGdFRYewmnriVhfhoT7jcSSHDA6tUWgSMTyU14lG0= Subject key identifier: 34:C3:C2:1F:88:A0:EB:56:B3:75:8A:7A:ED:68:37:27:99:1E:AD:F5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515DCD2A9B1BE1F5A6A80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/400fc5b2-4364-3e2a-8d78-c32c6f39281e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:dc:d2:a9:b1:be:1f:5a:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=8824a7eb-ac66-4c66-99c6-59da0c6627ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:29:ec:fd:fd:f0:ae:cc:b8:22:8c:dc:03: 55:34:37:f5:d8:9c:ca:11:63:54:ea:b2:ec:10:69: 54:62:24:20:95:32:31:3f:f7:97:2d:c3:74:f1:a8: c0:21:f4:5d:2f:e5:2c:a1:16:10:70:e2:8e:e5:20: 0d:97:ac:43:81:8d:c5:f1:e4:8a:5c:35:50:63:06: 63:16:f6:36:f9:91:70:7f:57:33:61:32:ab:d3:b2: a4:3b:c2:43:77:7b:bb:68:eb:17:eb:06:37:d3:1e: f3:18:9d:7b:60:ef:8a:1d:e3:f8:f0:73:a2:71:98: c2:ae:f8:47:23:cb:2a:8e:ed:15:05:e1:15:7a:28: ce:88:5f:37:19:af:20:f1:75:66:5f:51:3a:89:9d: d3:88:78:8c:b1:c1:f6:58:27:cd:0c:bc:8a:de:9e: 5c:6a:f3:9c:f9:c3:a7:54:3c:2c:b0:78:ba:f7:6c: 4a:98:92:55:07:49:26:6f:29:cb:71:f0:fb:45:d5: 18:49:14:f4:1b:6d:eb:fe:87:de:95:84:4b:d6:ec: 5f:4b:8c:03:f8:b0:8d:b2:bc:71:f3:6b:5e:a7:b9: 4e:e3:5b:85:3c:12:cc:48:ee:f2:6c:f2:cd:6f:40: 3b:e0:c9:fe:fe:42:43:80:8c:6f:56:d2:a2:5b:8c: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C3:C2:1F:88:A0:EB:56:B3:75:8A:7A:ED:68:37:27:99:1E:AD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/400fc5b2-4364-3e2a-8d78-c32c6f39281e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:e7:a9:ee:2f:3b:3d:39:59:a5:2d:45:4c:29:3e:9b:42: b6:6d:61:96:76:81:1e:57:13:07:34:f4:0d:19:3f:88:76:4c: 6d:36:f3:b7:e8:d0:6c:a5:1c:ba:18:84:bb:87:cf:30:15:7f: 1d:b9:dd:33:af:64:15:13:6b:26:ad:30:46:e0:b7:dd:56:f5: 85:a3:f6:f6:2d:e0:f1:23:9d:3b:e4:c9:6a:2f:03:16:b4:e0: 7d:94:28:d1:21:7d:23:97:0c:4f:5c:cd:36:a7:f5:2c:c8:4d: 06:05:0c:09:48:88:4e:2f:42:7d:38:53:07:ee:a2:6c:d1:1d: fe:0c:94:38:6b:d4:05:4e:94:cc:32:69:c1:25:fd:6f:d0:1c: d9:e6:2d:62:30:dc:96:2a:d4:8e:a3:5e:49:e6:51:5a:5a:e1: 0f:d5:7a:6d:66:83:b4:bd:2f:23:c2:4f:2b:11:e0:e2:39:dc: 4c:72:7d:7f:45:4c:cb:e6:40:48:9f:8b:38:f4:e6:fe:94:6f: 25:6b:13:ec:c5:f6:f0:f2:f6:84:94:1c:a9:17:f6:18:67:79: 3d:6b:4c:2d:56:50:fa:57:ba:0f:ec:7d:27:09:91:54:da:37: b2:9f:6a:74:08:15:01:4f:fb:99:8b:55:f0:a6:87:2f:f2:da: 01:41:98:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRXc0qmxvh9aaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODgyNGE3ZWItYWM2Ni00YzY2LTk5YzYtNTlkYTBjNjYyN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Ap7P398K7MuCKM3ANVNDf12JzKEWNU6rLs EGlUYiQglTIxP/eXLcN08ajAIfRdL+UsoRYQcOKO5SANl6xDgY3F8eSKXDVQYwZj FvY2+ZFwf1czYTKr07KkO8JDd3u7aOsX6wY30x7zGJ17YO+KHeP48HOicZjCrvhH I8sqju0VBeEVeijOiF83Ga8g8XVmX1E6iZ3TiHiMscH2WCfNDLyK3p5cavOc+cOn VDwssHi692xKmJJVB0kmbynLcfD7RdUYSRT0G23r/ofelYRL1uxfS4wD+LCNsrxx 82tep7lO41uFPBLMSO7ybPLNb0A74Mn+/kJDgIxvVtKiW4wxSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTDwh+IoOtWs3WKeu1oNyeZHq31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNDAwZmM1YjItNDM2NC0z ZTJhLThkNzgtYzMyYzZmMzkyODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClE56nuLzs9OVmlLUVMKT6bQrZtYZZ2gR5XEwc09A0ZP4h2TG0287fo 0GylHLoYhLuHzzAVfx253TOvZBUTayatMEbgt91W9YWj9vYt4PEjnTvkyWovAxa0 4H2UKNEhfSOXDE9czTan9SzITQYFDAlIiE4vQn04UwfuomzRHf4MlDhr1AVOlMwy acEl/W/QHNnmLWIw3JYq1I6jXknmUVpa4Q/Vem1mg7S9LyPCTysR4OI53ExyfX9F TMvmQEifizj05v6UbyVrE+zF9vDy9oSUHKkX9hhneT1rTC1WUPpXug/sfScJkVTa N7KfanQIFQFP+5mLVfCmhy/y2gFBmC0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:31:49 2025 by rpki-client