$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa File: 78a77a9f-d1ee-3657-8456-265177e16059.roa (raw, json) Hash identifier: pDUiWTVwBTpvZXdVQruHNndCRCeqV3EbREo1878aqU0= Subject key identifier: 7D:7B:34:13:AC:8B:26:FC:2C:29:C7:0F:B5:ED:C2:2E:A5:8E:A2:B0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE10052CAE0A41D149B85DC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:05:2c:ae:0a:41:d1:49:b8:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=b18f86e2-0108-4190-8ac2-bd28f80a263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:47:f0:85:e0:36:01:02:06:2f:bf:b5:d0: 1a:1c:42:f0:47:ec:4f:63:24:18:c5:f4:f1:2a:e0: 56:77:67:bf:08:23:32:21:98:2a:f8:69:dc:6e:66: 87:52:95:76:c0:7a:d3:ed:fd:15:50:16:ca:4f:b3: 45:6a:e1:93:9c:c7:33:16:57:3b:62:24:42:2d:05: c0:23:a8:6c:7b:4b:30:7b:65:2d:3a:de:33:b4:6c: 2c:e9:21:c5:c1:c9:bd:e3:39:aa:8a:a7:6f:90:c7: f1:8a:2c:46:74:74:81:cd:2b:cf:bf:b1:88:33:86: 07:e5:d2:bb:17:01:f9:2e:9c:97:5f:6a:2e:1b:17: f4:da:96:26:7f:e9:e2:43:ab:7c:83:3c:fb:37:98: 98:72:ee:72:9f:02:7c:7f:aa:f1:e2:ba:13:36:7a: 7a:20:e1:0b:99:8b:6b:a2:a8:48:21:06:ef:24:d5: 97:50:f2:5b:cf:51:b8:b7:c7:a4:0b:d8:9c:a0:0a: d5:38:a7:55:b5:5c:0b:26:75:ea:fc:e7:9e:8a:5b: cc:e8:dc:a2:74:7b:7c:60:d4:60:ca:e6:d0:4b:7a: 8b:6f:11:f2:99:47:b9:e9:a5:71:a3:20:fc:9d:3b: 3e:63:8c:ee:72:2b:8e:11:57:d1:35:9e:bf:5e:17: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:34:13:AC:8B:26:FC:2C:29:C7:0F:B5:ED:C2:2E:A5:8E:A2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5a:2a:92:09:17:0d:5d:f4:63:66:43:dd:2d:4e:13:8d:64: cf:4e:12:bc:9f:60:5e:f9:fe:c9:05:9b:e3:95:3b:b4:7a:2b: 22:6b:ee:c7:f9:c4:25:e1:31:df:ee:47:88:33:f0:95:06:b4: 88:4f:e5:e2:88:7e:0a:80:cf:ec:ce:bc:fc:59:be:e0:73:b5: 48:d4:39:5b:0d:56:00:a8:22:93:5d:ce:50:fa:0a:82:d6:b5: 33:e3:9b:1c:f0:ed:9d:30:36:a9:9a:60:3c:d5:27:1e:0d:2a: 59:61:15:62:c4:82:f6:7b:04:c4:3f:5b:c0:ce:56:e7:db:43: e2:5b:e0:5c:e1:9d:15:1e:1f:8a:6d:1f:72:1c:5a:3c:72:f8: ed:8e:40:ad:e8:80:2b:1e:d2:f0:e9:a4:59:76:30:ae:7d:0e: c8:e5:64:af:4b:fa:1a:9a:ff:f9:ac:73:57:8d:cf:32:82:40: c3:ce:3c:67:3f:b7:87:14:f7:a5:73:95:30:4a:70:4d:a9:e5: a7:64:7b:e2:f8:ae:37:49:39:f2:86:fc:2b:88:68:96:bc:69: 89:e4:c2:10:3c:09:ea:a2:39:4f:a1:09:72:ff:fd:50:8a:4d: 1e:2b:89:6c:a4:08:bf:9a:25:08:f4:4b:44:72:33:b8:f4:c3: 30:8c:bd:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAUsrgpB0Um4XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YjE4Zjg2ZTItMDEwOC00MTkwLThhYzItYmQyOGY4MGEyNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/VH8IXgNgECBi+/tdAaHELwR+xPYyQYxfTx KuBWd2e/CCMyIZgq+GncbmaHUpV2wHrT7f0VUBbKT7NFauGTnMczFlc7YiRCLQXA I6hse0swe2UtOt4ztGws6SHFwcm94zmqiqdvkMfxiixGdHSBzSvPv7GIM4YH5dK7 FwH5LpyXX2ouGxf02pYmf+niQ6t8gzz7N5iYcu5ynwJ8f6rx4roTNnp6IOELmYtr oqhIIQbvJNWXUPJbz1G4t8ekC9icoArVOKdVtVwLJnXq/OeeilvM6NyidHt8YNRg yubQS3qLbxHymUe56aVxoyD8nTs+Y4zuciuOEVfRNZ6/Xhf4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH17NBOsiyb8LCnHD7Xtwi6ljqKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzhhNzdhOWYtZDFlZS0z NjU3LTg0NTYtMjY1MTc3ZTE2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRaKpIJFw1d9GNmQ90tThONZM9OEryfYF75/skFm+OVO7R6KyJr7sf5 xCXhMd/uR4gz8JUGtIhP5eKIfgqAz+zOvPxZvuBztUjUOVsNVgCoIpNdzlD6CoLW tTPjmxzw7Z0wNqmaYDzVJx4NKllhFWLEgvZ7BMQ/W8DOVufbQ+Jb4FzhnRUeH4pt H3IcWjxy+O2OQK3ogCse0vDppFl2MK59DsjlZK9L+hqa//msc1eNzzKCQMPOPGc/ t4cU96VzlTBKcE2p5adke+L4rjdJOfKG/CuIaJa8aYnkwhA8CeqiOU+hCXL//VCK TR4riWykCL+aJQj0S0RyM7j0wzCMvRU= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:50 2025 by rpki-client