$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json) Hash identifier: yGFLAAVt/1UZ2RDXsziIPJdpfxdrEBBz7SZCStZE854= Subject key identifier: 6D:C4:0A:67:BC:7B:71:14:8A:90:9F:AB:5F:7F:AA:1C:A2:1F:11:BF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515E8C1F154A802977300 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:e8:c1:f1:54:a8:02:97:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=70d2dadd-e008-4381-a747-6f83c2e562ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:b6:8f:97:4d:33:f1:89:a1:04:72:1a:b1: 76:46:b3:b8:20:b2:21:ce:00:df:15:b1:ee:d5:ff: 74:33:78:a6:57:43:3a:ba:ff:4e:7a:10:f2:34:c9: c6:ab:7d:da:84:d2:73:5f:e9:dd:96:e3:37:15:df: c6:4c:f1:44:21:39:bd:12:cd:cc:39:c6:a6:cd:24: f0:8a:4b:5a:3a:f5:84:ff:0e:db:08:0e:e3:0c:15: f9:9c:6a:f3:d4:e1:12:65:6c:28:80:cd:97:73:9c: ba:eb:f8:46:dd:2d:a5:e0:cd:ff:e2:de:e7:dc:6f: fc:61:11:e6:8e:79:c5:e9:98:72:82:50:3c:97:3e: 9e:b0:a8:48:75:86:52:90:b2:9f:be:45:2d:d6:e4: ae:bf:4c:b7:26:11:a4:eb:de:b1:30:19:af:1f:d5: 71:72:38:e3:2d:41:e3:22:db:98:65:6c:17:84:92: cd:59:7b:45:29:ad:27:89:e3:ec:18:fd:db:82:d6: 87:81:8c:93:18:0c:8b:a2:72:d6:cd:0b:90:95:65: c0:9d:66:4f:c3:33:79:a5:86:62:84:f3:de:df:08: dc:e2:8b:44:78:67:13:fb:c9:ab:1a:11:62:39:09: 7c:06:e7:92:48:1e:65:86:94:1e:3b:42:63:10:52: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C4:0A:67:BC:7B:71:14:8A:90:9F:AB:5F:7F:AA:1C:A2:1F:11:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:53:34:32:4c:60:f5:93:6f:db:b3:e6:e4:03:8f:e7:7d:13: 2b:af:0b:17:e4:7e:05:dc:e0:ed:1a:d8:51:28:75:bb:11:32: 1a:8d:50:11:d0:3b:39:d5:ed:71:67:73:3e:81:0e:79:e6:89: ef:ce:83:97:47:c5:b9:db:d4:db:d4:f6:fc:8f:fc:31:e8:40: ef:2d:0e:87:82:33:61:fa:ed:2f:e3:18:4f:b2:66:e0:de:41: 86:34:12:84:c5:4d:31:89:7f:f5:5b:6f:3c:fb:a9:4d:ce:1a: 16:08:44:0c:ac:ec:18:4c:98:21:23:12:49:32:19:eb:9f:a7: 05:dc:db:aa:ee:86:79:1d:b5:d8:d1:d6:ec:8f:aa:a8:99:db: cb:ff:11:d5:bd:92:d3:bb:5c:84:47:fd:f7:7a:8b:3a:d8:97: 79:c8:ac:82:2e:d4:85:b7:7d:a8:16:11:68:64:f5:39:d1:7f: ab:4f:ea:6f:c1:1b:b7:70:f4:50:6d:b0:02:73:24:6a:2a:e8: fe:56:06:85:33:61:4c:08:74:28:6c:66:22:79:27:97:7e:4b: 76:3d:07:a4:44:61:f5:2f:97:83:1a:71:a1:44:f7:d5:2e:1c: f3:48:8a:f7:17:31:60:0b:cf:f8:76:c1:07:0a:f6:b4:2c:f4: 9f:3d:14:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRXowfFUqAKXcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzBkMmRhZGQtZTAwOC00MzgxLWE3NDctNmY4M2MyZTU2MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+u2j5dNM/GJoQRyGrF2RrO4ILIhzgDfFbHu 1f90M3imV0M6uv9OehDyNMnGq33ahNJzX+ndluM3Fd/GTPFEITm9Es3MOcamzSTw iktaOvWE/w7bCA7jDBX5nGrz1OESZWwogM2Xc5y66/hG3S2l4M3/4t7n3G/8YRHm jnnF6ZhyglA8lz6esKhIdYZSkLKfvkUt1uSuv0y3JhGk696xMBmvH9VxcjjjLUHj ItuYZWwXhJLNWXtFKa0niePsGP3bgtaHgYyTGAyLonLWzQuQlWXAnWZPwzN5pYZi hPPe3wjc4otEeGcT+8mrGhFiOQl8BueSSB5lhpQeO0JjEFLlEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3ECme8e3EUipCfq19/qhyiHxG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JiNDdjMTQtMjc5OS0z YjY0LTg3ZDgtMjI2NGRhNWUzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFTNDJMYPWTb9uz5uQDj+d9EyuvCxfkfgXc4O0a2FEodbsRMhqNUBHQ OznV7XFncz6BDnnmie/Og5dHxbnb1NvU9vyP/DHoQO8tDoeCM2H67S/jGE+yZuDe QYY0EoTFTTGJf/Vbbzz7qU3OGhYIRAys7BhMmCEjEkkyGeufpwXc26ruhnkdtdjR 1uyPqqiZ28v/EdW9ktO7XIRH/fd6izrYl3nIrIIu1IW3fagWEWhk9TnRf6tP6m/B G7dw9FBtsAJzJGoq6P5WBoUzYUwIdChsZiJ5J5d+S3Y9B6REYfUvl4MacaFE99Uu HPNIivcXMWALz/h2wQcK9rQs9J89FGs= -----END CERTIFICATE-----Generated at Mon Jun 30 09:43:30 2025 by rpki-client