$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json) Hash identifier: OomGvyofpT4FjaSjXvlrHDot1QrtRER11UY+XsE5Qoo= Subject key identifier: E5:36:9D:CF:63:50:94:70:60:8A:D8:A7:B0:C3:29:82:F0:A7:F8:39 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D1650DF41A2F609FCD188080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 199.91.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0d:f4:1a:2f:60:9f:cd:18:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=87f09494-0038-408a-869d-ada4df9a51ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:5f:c7:74:b8:f8:91:03:ef:c3:70:38:5c: db:ee:c8:aa:32:d1:db:d6:50:0a:e3:86:04:a5:91: 8d:d3:e9:9f:0c:af:d7:ad:d4:c0:e7:6a:13:3f:98: 08:e9:11:28:68:7d:a5:79:94:7e:17:9e:52:76:22: af:c2:74:f3:bb:f9:30:e6:8b:8c:79:ed:96:08:b4: 07:a7:f7:8e:40:3a:d0:f6:d9:06:c1:e0:0f:42:24: 43:37:da:94:23:48:52:1c:70:f7:7a:c5:3b:5f:dc: dd:24:49:56:8a:4a:c6:e3:3d:16:0d:8a:fe:f2:86: ad:ad:51:f8:9b:7a:28:fd:24:54:93:9c:67:d2:78: 02:c0:90:b9:db:bc:0a:e5:aa:1a:2c:37:9d:31:48: 31:2f:f6:bb:79:82:ae:69:02:c8:ac:26:ad:46:e2: 3a:75:df:e3:14:15:a8:8c:ee:93:cb:b4:6c:4e:c5: e3:89:d8:5f:c0:94:3f:9d:19:eb:f7:80:55:57:e0: e7:69:53:4e:0c:9a:ae:fe:f5:53:58:40:30:5c:16: c6:32:30:af:7e:bb:43:fb:09:ca:5c:86:0a:63:67: 40:0b:0a:b7:2e:9d:79:d6:50:54:c5:48:10:07:cd: 00:6b:a8:05:d1:9c:02:c8:72:35:72:12:27:ca:b3: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:36:9D:CF:63:50:94:70:60:8A:D8:A7:B0:C3:29:82:F0:A7:F8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:53:7f:57:a5:6f:28:ad:71:fd:77:31:cf:5b:1d:e1:af:11: d5:d3:75:55:69:47:93:15:b6:20:c5:aa:14:18:8f:40:2f:7a: 79:d3:b8:35:39:9a:12:6d:49:1f:2a:d9:bf:de:82:78:69:22: d0:54:6a:1d:ac:30:c6:73:9a:4f:bf:60:84:73:04:dd:92:d7: 3b:a7:23:d5:ef:5d:3b:a5:5d:7b:0d:11:45:7d:c6:08:41:e6: 23:4c:45:e0:c1:de:3e:de:fb:9f:72:1e:b6:9f:25:c2:b2:23: 6b:97:1c:b4:31:64:d4:54:b2:52:48:69:d3:3c:81:6e:c8:61: 0a:b2:c3:4c:c1:f9:97:89:2d:3b:f8:28:35:05:a8:d4:48:98: 3d:d2:3c:21:7d:1d:51:f2:d1:0c:3d:d4:72:54:c4:3f:50:c1: 00:d1:12:61:b3:54:23:14:83:53:e2:19:74:ab:90:d3:c5:23: e1:21:7d:6f:c3:86:15:9c:d9:10:bb:ed:53:7c:c8:ea:a4:98: 3e:ec:2c:38:ee:e8:58:68:3a:f7:37:74:12:24:0d:65:82:43: 01:28:ff:d0:8f:4e:9d:5d:f5:b9:27:43:0b:35:09:cd:ee:64: b9:31:88:b0:f4:20:28:4b:53:df:98:cb:a9:cc:de:cc:8a:6e: 36:f8:46:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ30Gi9gn80YgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODdmMDk0OTQtMDAzOC00MDhhLTg2OWQtYWRhNGRmOWE1MWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRlfx3S4+JED78NwOFzb7siqMtHb1lAK44YE pZGN0+mfDK/XrdTA52oTP5gI6REoaH2leZR+F55SdiKvwnTzu/kw5ouMee2WCLQH p/eOQDrQ9tkGweAPQiRDN9qUI0hSHHD3esU7X9zdJElWikrG4z0WDYr+8oatrVH4 m3oo/SRUk5xn0ngCwJC527wK5aoaLDedMUgxL/a7eYKuaQLIrCatRuI6dd/jFBWo jO6Ty7RsTsXjidhfwJQ/nRnr94BVV+DnaVNODJqu/vVTWEAwXBbGMjCvfrtD+wnK XIYKY2dACwq3Lp151lBUxUgQB80Aa6gF0ZwCyHI1chInyrMhDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU2nc9jUJRwYIrYp7DDKYLwp/g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JmNWQ2NjEtY2FmNy0z MDE2LThjZmMtYjVhNTQwZTcxMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxTf1elbyitcf13Mc9bHeGvEdXTdVVpR5MVtiDFqhQYj0AvennTuDU5 mhJtSR8q2b/egnhpItBUah2sMMZzmk+/YIRzBN2S1zunI9XvXTulXXsNEUV9xghB 5iNMReDB3j7e+59yHrafJcKyI2uXHLQxZNRUslJIadM8gW7IYQqyw0zB+ZeJLTv4 KDUFqNRImD3SPCF9HVHy0Qw91HJUxD9QwQDREmGzVCMUg1PiGXSrkNPFI+EhfW/D hhWc2RC77VN8yOqkmD7sLDju6FhoOvc3dBIkDWWCQwEo/9CPTp1d9bknQws1Cc3u ZLkxiLD0IChLU9+Yy6nM3syKbjb4RsY= -----END CERTIFICATE-----Generated at Mon Jun 30 18:39:14 2025 by rpki-client