$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json) Hash identifier: kIvxNOsHeJ2PjdBCFLUPQ/5lka9eOY6Wz08+1Nk5KUk= Subject key identifier: CE:64:00:1B:A7:F6:03:0F:06:80:41:71:3E:B3:4F:9A:16:AF:A9:15 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515F53B541C7EC4D56980 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:f5:3b:54:1c:7e:c4:d5:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3f25cb3e-9940-4286-b9b4-585c38d2e703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:28:4d:70:3e:a3:ea:d7:67:37:5e:81:7f: 01:d1:ba:b3:32:ef:7c:1a:e7:68:75:18:7d:40:b2: 9a:d7:9a:59:d4:81:f2:30:86:24:68:76:a4:a7:e2: 91:0d:d8:70:14:c8:88:cc:e4:e0:63:b5:54:95:54: 86:90:f8:93:4c:0d:b7:ae:b2:13:7c:da:85:31:06: c6:a1:fd:4b:e7:3d:72:d0:3a:ec:8c:9d:5c:a1:5f: 3c:39:0d:b1:c8:39:68:db:c5:42:05:4f:08:d0:52: 5e:bb:07:46:d1:02:69:2a:31:46:9d:1f:95:9b:27: 59:4f:14:77:6f:2d:96:fb:0c:85:14:d2:ec:2a:07: 06:56:24:07:4d:13:48:61:39:4c:2d:be:8c:68:55: df:11:a1:85:87:61:ac:24:a6:bf:18:3c:9e:43:12: dc:d9:f0:95:6e:53:ca:8d:82:01:1f:7b:f5:7b:3c: 6b:3a:d7:25:8c:8b:65:a1:e4:a8:93:bf:f5:4c:c9: e0:f5:f4:fb:1d:dc:30:44:c1:d3:6b:49:70:18:1a: b5:7d:e7:14:c4:10:0e:02:8e:1c:06:49:d4:be:b9: fa:b3:50:7a:91:61:b3:5d:16:fe:ad:d0:fd:ef:76: df:53:ab:f6:58:61:f9:4c:7c:51:77:f3:c1:50:23: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:00:1B:A7:F6:03:0F:06:80:41:71:3E:B3:4F:9A:16:AF:A9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:cd:64:a1:27:4a:65:38:6a:aa:29:77:22:00:2b:99:b7:95: 67:05:2f:85:c0:ba:99:e9:c7:8b:c4:4c:2d:d5:69:06:33:29: 06:53:67:40:f6:28:3b:a2:b0:2f:35:fc:16:00:a9:3c:e4:2f: d3:f7:35:aa:70:7f:ce:bf:49:7f:69:f8:0f:7c:28:10:d4:3f: 7e:e1:db:2f:3e:e3:9b:66:b6:73:8a:03:ac:b3:a3:2e:55:0b: c3:95:ce:b8:1d:0e:b4:c0:69:ed:b4:dd:2c:44:44:cf:b7:cb: c6:63:1b:04:8c:2a:77:30:88:05:df:0b:97:99:08:9c:7f:3b: f1:dc:23:f1:75:9a:89:09:c8:19:83:b3:f8:1d:db:6f:01:e7: 11:78:ee:0c:0f:81:c5:12:90:f8:bb:4b:2e:f3:c9:e0:b9:f9: f6:94:0e:38:75:70:ab:98:71:d0:34:a2:a8:c5:7b:c4:6d:36: 09:ba:84:20:48:ac:28:56:b4:11:4c:42:bc:30:94:c2:f6:93: c4:f9:5a:8d:0d:00:69:23:a8:88:35:78:49:e8:a5:04:18:5a: b1:bb:22:06:ca:1a:f4:ad:c0:36:12:5f:79:39:46:00:b1:01: 3e:d4:ba:bd:d1:bf:67:11:e4:82:8f:2e:33:6e:7d:d2:af:06: dd:92:85:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRX1O1QcfsTVaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk M2YyNWNiM2UtOTk0MC00Mjg2LWI5YjQtNTg1YzM4ZDJlNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiEoTXA+o+rXZzdegX8B0bqzMu98GudodRh9 QLKa15pZ1IHyMIYkaHakp+KRDdhwFMiIzOTgY7VUlVSGkPiTTA23rrITfNqFMQbG of1L5z1y0DrsjJ1coV88OQ2xyDlo28VCBU8I0FJeuwdG0QJpKjFGnR+VmydZTxR3 by2W+wyFFNLsKgcGViQHTRNIYTlMLb6MaFXfEaGFh2GsJKa/GDyeQxLc2fCVblPK jYIBH3v1ezxrOtcljItloeSok7/1TMng9fT7HdwwRMHTa0lwGBq1fecUxBAOAo4c BknUvrn6s1B6kWGzXRb+rdD973bfU6v2WGH5THxRd/PBUCNDxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5kABun9gMPBoBBcT6zT5oWr6kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjQxODVhNjMtMzE2Zi0z ZDkxLWI2NzQtNTJmZmFkNzJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjNZKEnSmU4aqopdyIAK5m3lWcFL4XAupnpx4vETC3VaQYzKQZTZ0D2 KDuisC81/BYAqTzkL9P3Napwf86/SX9p+A98KBDUP37h2y8+45tmtnOKA6yzoy5V C8OVzrgdDrTAae203SxERM+3y8ZjGwSMKncwiAXfC5eZCJx/O/HcI/F1mokJyBmD s/gd228B5xF47gwPgcUSkPi7Sy7zyeC5+faUDjh1cKuYcdA0oqjFe8RtNgm6hCBI rChWtBFMQrwwlML2k8T5Wo0NAGkjqIg1eEnopQQYWrG7IgbKGvStwDYSX3k5RgCx AT7Uur3Rv2cR5IKPLjNufdKvBt2ShSI= -----END CERTIFICATE-----Generated at Mon May 12 04:31:34 2025 by rpki-client