$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: i4vtlvm9S+703ls0W0L0621FPSkFG/LmIjvEHIJLOQI= Subject key identifier: 60:F0:53:39:69:C8:91:2F:1F:93:1C:58:33:A0:48:77:EE:70:C3:B9 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F43285849C3AB441A28371441F44AD2C0 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Tue 06 May 2025 15:01:32 +0000 ROA not before: Tue 06 May 2025 15:01:32 +0000 ROA not after: Mon 04 Aug 2025 15:01:32 +0000 asID: 7050 IP address blocks: 129.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:ab:44:1a:28:37:14:41:f4:4a:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: May 6 15:01:32 2025 GMT Not After : Aug 4 15:01:32 2025 GMT Subject: CN=80b91072-269f-4e4c-b062-33354264ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:a8:68:07:6c:fc:0a:00:26:47:12:3d:fd: b1:27:15:59:0d:09:2f:6e:8d:01:41:40:bf:95:27: 2c:91:83:bf:22:3f:6c:b7:cd:5c:dd:e4:d3:29:ad: e5:4f:a5:33:d6:b4:a6:f3:dd:8a:68:a3:6f:8e:4c: 5d:2f:62:22:b0:e3:1a:4a:40:9a:e5:97:ac:92:4f: a7:80:95:73:47:1b:66:19:e3:4c:65:e9:29:db:43: af:4d:85:f7:70:51:e6:4d:fa:88:1e:24:d1:ca:50: f0:5c:99:44:8b:c8:94:6f:c0:39:bd:5d:e2:20:7e: 0a:99:96:ba:7b:7c:a8:d5:96:f5:13:28:f6:28:73: 71:c8:66:4f:6b:7f:33:ab:d3:ab:28:ee:03:40:d3: de:64:27:97:ab:5e:25:4c:09:09:ea:3c:76:f8:96: 3c:aa:f3:7e:b8:6a:84:cb:88:f1:85:39:0d:a8:58: 07:6d:90:6d:2f:04:3a:c9:84:9e:b1:d6:0b:45:21: 48:cd:29:1a:f1:c8:44:ea:bf:b3:50:36:c6:0b:38: 78:9c:6b:81:c1:0e:3a:cb:21:75:c5:cf:9f:f9:ff: 4d:8e:c5:5b:f5:62:d7:ca:e0:ba:69:fc:33:3d:c2: 15:b3:46:b4:21:38:37:5b:3d:78:16:7e:be:24:8c: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:53:39:69:C8:91:2F:1F:93:1C:58:33:A0:48:77:EE:70:C3:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:77:95:46:9a:a8:2b:c3:c0:04:a4:cd:f3:15:e1:49:0d: 92:71:05:ee:54:23:37:9b:ca:10:be:78:b8:0d:2e:ea:61:45: ae:14:c8:27:b8:77:5f:1f:a6:98:48:21:8a:9a:f5:33:f9:00: 3b:6b:6f:b8:3b:fc:12:3b:99:3d:0b:15:3d:2c:36:d5:c7:2b: 2c:e4:91:7e:fb:28:44:28:2b:ff:93:4a:65:64:79:b7:c1:8e: e1:55:31:55:4e:a2:d3:74:c4:b5:40:e6:91:a1:20:2c:f5:46: df:4d:22:64:fd:e9:80:59:31:13:e1:98:7a:e0:0f:55:3d:1a: f0:e8:ff:dc:be:84:34:09:28:9c:72:95:f1:ec:62:0c:25:77: b0:e0:bf:6f:e0:c7:56:eb:f5:2f:1b:ba:5a:8b:10:11:9e:46: 09:08:e2:09:8c:5e:75:e1:26:bc:b9:ef:a7:3a:34:60:15:bc: e0:44:3d:bb:e1:33:d0:7c:22:8b:48:a1:5b:25:c0:6c:5c:66: 2e:bd:13:ea:cc:bc:37:c3:40:f3:a9:0a:c1:3c:4d:5c:1b:aa: 7f:e7:d4:9e:39:5e:b5:7b:ee:47:cf:62:dd:81:1b:43:e3:8c: 34:06:49:4c:e0:71:17:50:ae:5f:c9:46:12:2d:c6:af:9c:01: d3:2d:7f:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnDq0QaKDcUQfRK0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MDUwNjE1MDEzMloXDTI1MDgwNDE1MDEzMlowLzEtMCsGA1UEAxMk ODBiOTEwNzItMjY5Zi00ZTRjLWIwNjItMzMzNTQyNjRjY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8CoaAds/AoAJkcSPf2xJxVZDQkvbo0BQUC/ lScskYO/Ij9st81c3eTTKa3lT6Uz1rSm892KaKNvjkxdL2IisOMaSkCa5Zeskk+n gJVzRxtmGeNMZekp20OvTYX3cFHmTfqIHiTRylDwXJlEi8iUb8A5vV3iIH4KmZa6 e3yo1Zb1Eyj2KHNxyGZPa38zq9OrKO4DQNPeZCeXq14lTAkJ6jx2+JY8qvN+uGqE y4jxhTkNqFgHbZBtLwQ6yYSesdYLRSFIzSka8chE6r+zUDbGCzh4nGuBwQ46yyF1 xc+f+f9NjsVb9WLXyuC6afwzPcIVs0a0ITg3Wz14Fn6+JIzvbwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGDwUzlpyJEvH5McWDOgSHfucMO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEXV3lUaaqCvDwASkzfMV4UkNknEF7lQjN5vKEL54uA0u6mFFrhTIJ7h3 Xx+mmEghipr1M/kAO2tvuDv8EjuZPQsVPSw21ccrLOSRfvsoRCgr/5NKZWR5t8GO 4VUxVU6i03TEtUDmkaEgLPVG300iZP3pgFkxE+GYeuAPVT0a8Oj/3L6ENAkonHKV 8exiDCV3sOC/b+DHVuv1Lxu6WosQEZ5GCQjiCYxedeEmvLnvpzo0YBW84EQ9u+Ez 0Hwii0ihWyXAbFxmLr0T6sy8N8NA86kKwTxNXBuqf+fUnjletXvuR89i3YEbQ+OM NAZJTOBxF1CuX8lGEi3Gr5wB0y1/Eg== -----END CERTIFICATE-----Generated at Tue May 13 10:20:08 2025 by rpki-client