$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa File: 6e089eef-fbf2-3611-96fd-939251a6b7fa.roa (raw, json) Hash identifier: tB3A+RyV6Oo8R3mAqB/UIOU9MhFTD1MDoSwMTosfeiA= Subject key identifier: 76:9C:AE:C2:34:8C:CE:76:2D:0E:F3:C3:53:4F:EC:2B:7E:29:A5:2D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165163EF10DF9812D658880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:3e:f1:0d:f9:81:2d:65:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=40ab1c67-1985-45a1-a5b1-cec54f20d55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ee:39:ba:5c:84:45:b5:8e:32:f8:2f:82:2b: 2b:c9:55:07:0c:da:54:fe:fd:a5:a9:7b:55:5d:6c: 10:ca:e5:cf:be:fb:9a:4a:2e:72:ea:3b:d0:b4:ef: 3a:14:af:11:c6:05:cc:0b:2c:fb:49:9a:60:8d:2b: 18:63:86:f1:7f:25:a9:ff:d2:1a:85:94:e0:2c:49: e2:69:bf:e9:6b:5a:e6:49:30:74:a0:02:e1:64:d9: 2e:e2:7f:1a:bd:20:ac:61:c7:98:8d:31:26:ec:63: 3a:77:3c:aa:a6:f4:db:33:18:b8:fe:91:3a:bc:2d: 94:dd:64:c6:97:bc:89:e7:88:c9:32:7a:63:6c:c2: bd:59:65:2b:ed:28:17:37:d9:68:c8:ed:45:64:61: c6:2e:fa:ca:c1:1b:5d:8f:3e:19:f0:af:93:6a:0a: a7:4b:6c:40:f5:12:71:b8:bd:61:1e:47:df:2e:fc: 3a:dd:51:b6:09:38:93:c8:2d:be:f0:cd:ac:3b:ba: ee:68:4c:ae:c1:33:e1:28:7a:3b:0e:fa:51:48:83: a2:f1:ba:5b:7d:0f:2f:dd:2a:af:3e:0c:36:f8:7e: c3:fe:84:85:c6:62:23:15:db:4c:bc:72:e1:ad:3b: 51:cb:04:55:3d:a1:b4:96:0b:06:0c:52:c2:e7:3a: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:AE:C2:34:8C:CE:76:2D:0E:F3:C3:53:4F:EC:2B:7E:29:A5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ce:5c:50:c9:b3:d3:ea:c5:ff:26:aa:46:78:7a:10:e4:12: ed:03:5a:31:27:bc:76:75:a6:e3:ff:4a:24:f9:21:e8:37:d2: 28:8c:99:7f:07:2c:92:d8:7e:c9:8f:fc:16:7b:5f:87:5e:28: 31:d6:94:9d:8a:1c:33:f7:63:66:8d:9b:62:1e:01:7b:38:ff: 99:4e:06:c5:dc:e7:44:63:74:10:b4:ac:00:1e:11:39:8b:ab: 0b:72:3e:ca:0d:19:b5:9d:11:da:7c:41:b5:cb:19:3f:74:14: 38:51:55:6e:50:ba:cf:9e:99:c1:72:81:fa:cd:85:4d:26:47: 4e:7b:0c:38:60:ca:64:36:14:54:89:c2:ee:90:31:f4:78:a0: e8:6b:f1:2c:69:d6:25:5e:3b:f5:c6:99:cc:ce:9c:7e:68:72: da:7f:66:83:f7:a9:78:7d:c4:ed:87:6d:01:b5:db:a9:4d:7d: 08:b3:8f:68:e9:0c:0c:28:98:64:79:a2:eb:54:99:1f:05:7a: 2e:ea:d0:0c:89:ee:e6:60:23:bd:fc:d0:d6:8c:82:13:bd:85: 7b:e3:47:a0:9d:f9:48:06:86:4b:6f:77:bc:4b:7f:fe:c8:9e: e0:8b:af:35:31:44:3a:5a:3f:91:49:37:9b:0b:5c:f6:48:4a: 14:bd:2e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRY+8Q35gS1liIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NDBhYjFjNjctMTk4NS00NWExLWE1YjEtY2VjNTRmMjBkNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+45ulyERbWOMvgvgisryVUHDNpU/v2lqXtV XWwQyuXPvvuaSi5y6jvQtO86FK8RxgXMCyz7SZpgjSsYY4bxfyWp/9IahZTgLEni ab/pa1rmSTB0oALhZNku4n8avSCsYceYjTEm7GM6dzyqpvTbMxi4/pE6vC2U3WTG l7yJ54jJMnpjbMK9WWUr7SgXN9loyO1FZGHGLvrKwRtdjz4Z8K+TagqnS2xA9RJx uL1hHkffLvw63VG2CTiTyC2+8M2sO7ruaEyuwTPhKHo7DvpRSIOi8bpbfQ8v3Sqv Pgw2+H7D/oSFxmIjFdtMvHLhrTtRywRVPaG0lgsGDFLC5zprTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHacrsI0jM52LQ7zw1NP7Ct+KaUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNmUwODllZWYtZmJmMi0z NjExLTk2ZmQtOTM5MjUxYTZiN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPOXFDJs9Pqxf8mqkZ4ehDkEu0DWjEnvHZ1puP/SiT5Ieg30iiMmX8H LJLYfsmP/BZ7X4deKDHWlJ2KHDP3Y2aNm2IeAXs4/5lOBsXc50RjdBC0rAAeETmL qwtyPsoNGbWdEdp8QbXLGT90FDhRVW5Qus+emcFygfrNhU0mR057DDhgymQ2FFSJ wu6QMfR4oOhr8Sxp1iVeO/XGmczOnH5octp/ZoP3qXh9xO2HbQG126lNfQizj2jp DAwomGR5outUmR8Fei7q0AyJ7uZgI7380NaMghO9hXvjR6Cd+UgGhktvd7xLf/7I nuCLrzUxRDpaP5FJN5sLXPZIShS9LgM= -----END CERTIFICATE-----Generated at Mon May 12 04:16:13 2025 by rpki-client