$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: fh4BKyyoZ7F89WNUPV081b43KXlQRi87TllMGJ3fVls= Subject key identifier: 7D:7C:CE:5A:A2:E3:E3:0F:79:C0:4E:42:9C:DE:68:44:02:E7:CB:C4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C720DD602322360532D20 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:0d:d6:02:32:23:60:53:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=cbe5ccb5-e0a9-49bf-8ff5-c66e6783a593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:df:09:0e:66:cf:35:ca:72:70:11:11:0c: c6:07:9b:97:fe:88:92:2d:93:00:67:3d:c3:7a:a5: 4d:21:a4:8f:20:ff:de:79:5e:4a:3c:c2:9d:89:2d: f9:3f:d7:c3:b8:31:c6:cc:2e:25:7f:9b:a4:50:84: d2:22:12:9e:ae:48:57:f5:38:26:7b:0c:51:cc:a1: cb:58:b8:24:44:25:0b:18:b2:45:79:a3:94:1b:12: 22:b4:92:a1:ae:c6:b2:d3:e1:b9:75:72:72:f7:53: 70:cc:35:ed:67:08:59:92:04:a7:ab:56:31:66:88: f3:45:10:13:e3:e3:45:40:fa:17:93:21:a7:ee:3c: c4:56:e1:49:6a:8e:7a:97:4c:dd:61:e9:40:f1:14: f1:bf:80:0b:b4:80:bb:b9:7a:67:f6:ca:03:34:0c: 1a:65:96:fe:a4:43:fa:91:0c:31:e4:9c:8b:9e:17: cb:f6:d3:86:e2:09:02:e5:6d:f4:05:86:f5:3c:9a: c4:5c:93:7b:5d:e6:46:b5:66:c2:e6:96:a9:0e:1b: b0:a8:2d:39:2a:a9:9f:ef:a6:c9:e8:35:8f:7c:eb: df:e7:cb:e0:5e:1b:6f:58:61:36:7f:ae:5a:d6:0a: a6:b8:fb:35:5c:28:9e:d2:10:a9:84:68:c9:f0:99: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:CE:5A:A2:E3:E3:0F:79:C0:4E:42:9C:DE:68:44:02:E7:CB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:36:e6:ed:7d:e1:5c:66:a2:06:52:14:c9:72:38:f1:c3:5e: e3:6c:1b:47:a9:66:82:34:f7:ff:3f:2b:75:6f:2a:76:65:53: 4c:b6:a6:65:9f:c3:d6:f2:cd:98:62:cf:f1:77:09:46:f0:4b: 17:30:ca:0d:96:9c:1e:0d:df:ba:97:23:31:10:6e:c9:5d:d9: 9d:a6:af:a3:6f:e5:0f:4e:db:bf:ec:44:f5:69:95:aa:de:02: a3:c0:3d:01:98:6d:8e:e4:88:c8:f8:dc:dd:62:b3:f5:16:28: 25:21:9c:4a:73:6d:c2:dc:77:69:66:7d:67:7d:48:7f:66:39: c5:ae:77:65:51:bf:a2:1c:2d:86:ab:3e:7c:f0:4a:d0:da:24: e2:8d:4c:6f:d9:26:b6:c8:8f:95:eb:a9:01:d3:32:73:9a:d5: ae:e0:d5:bb:40:19:bf:cd:85:29:9d:56:99:05:f9:5c:71:e8: d6:c3:6e:83:75:13:9c:1f:96:2c:cd:0d:28:84:dd:1d:89:78: f0:61:ca:f6:64:17:3b:c9:bf:ef:c5:fb:0c:37:c2:74:dd:d2: b1:61:7e:e3:f1:21:20:8b:66:86:1c:ec:37:7a:45:b2:f5:d6: 01:ce:14:cd:b0:39:f5:0c:c7:30:95:8e:a7:31:71:4f:d0:51: 42:ef:ee:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHIN1gIyI2BTLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2JlNWNjYjUtZTBhOS00OWJmLThmZjUtYzY2ZTY3ODNhNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEzfCQ5mzzXKcnAREQzGB5uX/oiSLZMAZz3D eqVNIaSPIP/eeV5KPMKdiS35P9fDuDHGzC4lf5ukUITSIhKerkhX9TgmewxRzKHL WLgkRCULGLJFeaOUGxIitJKhrsay0+G5dXJy91NwzDXtZwhZkgSnq1YxZojzRRAT 4+NFQPoXkyGn7jzEVuFJao56l0zdYelA8RTxv4ALtIC7uXpn9soDNAwaZZb+pEP6 kQwx5JyLnhfL9tOG4gkC5W30BYb1PJrEXJN7XeZGtWbC5papDhuwqC05Kqmf76bJ 6DWPfOvf58vgXhtvWGE2f65a1gqmuPs1XCie0hCphGjJ8Jm3VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH18zlqi4+MPecBOQpzeaEQC58vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc25u194VxmogZSFMlyOPHDXuNsG0epZoI09/8/K3VvKnZlU0y2pmWf w9byzZhiz/F3CUbwSxcwyg2WnB4N37qXIzEQbsld2Z2mr6Nv5Q9O27/sRPVplare AqPAPQGYbY7kiMj43N1is/UWKCUhnEpzbcLcd2lmfWd9SH9mOcWud2VRv6IcLYar PnzwStDaJOKNTG/ZJrbIj5XrqQHTMnOa1a7g1btAGb/NhSmdVpkF+Vxx6NbDboN1 E5wflizNDSiE3R2JePBhyvZkFzvJv+/F+ww3wnTd0rFhfuPxISCLZoYc7Dd6RbL1 1gHOFM2wOfUMxzCVjqcxcU/QUULv7g0= -----END CERTIFICATE-----Generated at Sat May 10 04:48:24 2025 by rpki-client