$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa File: 73276284-ecac-36ab-a7aa-14e8474f7c9c.roa (raw, json) Hash identifier: fXfrWSRCAsQpSqMYFU/c2IgAWMD/ZXlZZb3akvwgoh0= Subject key identifier: D0:A0:D2:C9:0F:02:60:1D:E4:AF:E5:4B:17:C7:63:3E:05:8E:5E:F6 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165164FBDB681243FC1C000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:4f:bd:b6:81:24:3f:c1:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=35a0a435-2877-4b04-970c-be636486dbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:6e:21:f3:fc:62:0b:90:90:cc:e9:83:64: 65:8e:18:9c:17:93:0c:6a:ec:5b:9a:c3:4f:18:0f: 31:51:60:2a:2f:94:34:b8:ed:13:fb:7b:8e:2b:c5: 99:05:02:fb:86:2c:6e:d8:15:a5:b1:eb:c6:65:f1: c0:c4:24:f5:f4:99:11:e6:e4:98:0c:35:9e:bf:64: 93:97:ee:23:7e:d2:63:e4:16:fb:3e:cb:1b:28:f7: cb:e8:23:66:a6:dc:1a:b2:4c:ff:e4:44:9b:b2:45: e8:bc:43:4e:21:73:2b:f8:64:ab:75:07:37:dc:6f: 12:32:fd:20:ac:6e:29:fd:f7:dd:38:5c:a3:83:cb: 6f:c4:ba:51:d9:13:84:b6:44:20:56:14:30:19:2c: 83:18:c1:50:5c:bd:b5:98:85:46:20:70:50:84:28: fd:8e:5e:c0:83:e1:15:31:53:73:e7:86:54:ed:27: cf:3f:8d:7b:e0:10:04:ea:c8:9b:7f:96:13:a9:ca: be:98:ab:f6:c0:4e:44:0f:ab:dd:fe:d6:ba:8f:8e: 28:d3:5d:a2:e0:ec:43:2e:bd:0c:55:c8:81:00:06: 2a:41:51:a7:90:09:6d:c4:f8:7f:f8:9c:5a:60:4a: c0:b6:a1:25:d9:ab:59:83:b8:49:5e:6e:aa:22:bc: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:D2:C9:0F:02:60:1D:E4:AF:E5:4B:17:C7:63:3E:05:8E:5E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1a:28:fe:ee:a3:86:f3:23:40:4e:a1:dd:55:30:87:35:ed: 61:17:91:07:67:df:6e:0e:d0:d3:e9:b7:7a:82:77:f0:3e:ca: 00:f2:55:fa:69:ef:fd:bd:08:dd:dd:49:31:b8:77:b8:5b:1f: b1:b7:02:66:23:ec:b0:61:4c:b8:83:8f:9d:37:e7:f7:85:17: 6e:c0:1e:9a:de:b2:d2:ec:a3:f9:1e:03:f5:f8:cd:60:3d:db: f6:93:65:c9:d1:89:02:82:03:c4:a3:fc:5d:12:f8:6c:05:0a: ae:b9:94:30:c0:79:99:0a:f3:19:73:cf:f9:f9:4c:2a:e2:d8: eb:f2:62:c7:85:65:80:e8:c6:e9:0b:63:c6:ac:b2:11:f2:4e: 41:fe:ff:18:62:f5:f7:08:7a:ce:66:77:91:9d:1c:13:50:2b: d1:79:a8:02:0e:c4:61:66:50:31:cd:c5:9f:f1:2a:12:9e:ef: cc:81:84:e5:07:e4:64:9f:f4:f6:d2:96:30:c7:3a:4c:0d:23: cf:0b:41:45:69:d2:b9:0e:0d:27:2d:02:3a:8e:63:78:2d:e8: 46:d1:ce:af:b5:ad:c0:19:d2:4c:0c:54:30:7c:9a:2a:a8:28: bd:b6:e3:7d:36:03:96:21:f2:4f:7f:e7:64:c0:7b:2c:27:bf: b4:66:0e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRZPvbaBJD/BwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MzVhMGE0MzUtMjg3Ny00YjA0LTk3MGMtYmU2MzY0ODZkYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5uIfP8YguQkMzpg2RljhicF5MMauxbmsNP GA8xUWAqL5Q0uO0T+3uOK8WZBQL7hixu2BWlsevGZfHAxCT19JkR5uSYDDWev2ST l+4jftJj5Bb7PssbKPfL6CNmptwaskz/5ESbskXovENOIXMr+GSrdQc33G8SMv0g rG4p/ffdOFyjg8tvxLpR2ROEtkQgVhQwGSyDGMFQXL21mIVGIHBQhCj9jl7Ag+EV MVNz54ZU7SfPP4174BAE6sibf5YTqcq+mKv2wE5ED6vd/ta6j44o012i4OxDLr0M VciBAAYqQVGnkAltxPh/+JxaYErAtqEl2atZg7hJXm6qIrz99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCg0skPAmAd5K/lSxfHYz4Fjl72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzMyNzYyODQtZWNhYy0z NmFiLWE3YWEtMTRlODQ3NGY3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYaKP7uo4bzI0BOod1VMIc17WEXkQdn324O0NPpt3qCd/A+ygDyVfpp 7/29CN3dSTG4d7hbH7G3AmYj7LBhTLiDj5035/eFF27AHprestLso/keA/X4zWA9 2/aTZcnRiQKCA8Sj/F0S+GwFCq65lDDAeZkK8xlzz/n5TCri2OvyYseFZYDoxukL Y8asshHyTkH+/xhi9fcIes5md5GdHBNQK9F5qAIOxGFmUDHNxZ/xKhKe78yBhOUH 5GSf9PbSljDHOkwNI88LQUVp0rkODSctAjqOY3gt6EbRzq+1rcAZ0kwMVDB8miqo KL224302A5Yh8k9/52TAeywnv7RmDnI= -----END CERTIFICATE-----Generated at Tue Jul 1 12:36:32 2025 by rpki-client