$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa File: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (raw, json) Hash identifier: Bb4OgO4ZFVm+GkMERmqcq940L9zklfj1k9zliDVXuRI= Subject key identifier: 1C:C3:38:94:8A:6D:09:96:FD:D8:3F:92:D8:D3:9D:72:89:BB:44:A5 Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Certificate serial: 010D0C9F43285849955F1286B6FC1DBB9D0EC100 Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14237 IP address blocks: 216.152.248.0/21 maxlen: 24 2606:e580::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:12:86:b6:fc:1d:bb:9d:0e:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=b5f89b32-6c4c-45d1-a9eb-fc474fb8af6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:3e:65:b4:9f:ab:d6:3c:86:01:b4:72:e6: 4f:15:2f:7a:66:c8:3d:97:01:67:28:fb:a0:64:b2: 2f:c7:6a:a8:18:7b:a4:c9:f4:da:f7:bf:6a:64:1a: 10:1d:fd:94:94:41:f2:ef:4f:6f:71:99:46:2b:e7: f1:1a:69:05:23:fc:ba:f1:62:2d:39:fd:7b:54:c5: ee:bf:a3:41:df:9e:6d:0d:75:df:5f:2d:7e:8d:b6: 35:cc:47:0b:ff:68:54:3d:58:96:6d:c1:bd:d7:89: f6:d7:85:61:0b:80:df:9d:40:1b:e5:57:63:c5:12: c9:1f:84:d6:2b:57:86:0c:a2:c0:01:8b:90:eb:54: ca:f6:ba:e5:d2:f9:54:6a:6d:24:53:cf:54:4a:ea: 23:42:8e:c3:18:b7:e7:61:6f:1f:af:15:da:70:95: f2:89:98:a9:b2:f5:e4:d5:8a:a2:7e:2b:be:9b:ff: f0:f6:66:c2:3a:b5:7c:6a:d3:9a:b8:a8:b3:d3:d9: 5c:eb:96:3b:38:41:9e:f7:09:17:52:00:02:b4:e7: bb:03:09:f1:5e:d2:98:4f:81:fb:03:25:5f:de:3f: a1:84:f7:92:fd:1f:e6:ae:ec:6e:b7:c6:39:4f:3d: d7:65:8f:51:fb:53:c4:ff:6f:a8:df:cd:90:bd:93: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:38:94:8A:6D:09:96:FD:D8:3F:92:D8:D3:9D:72:89:BB:44:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl X509v3 Authority Key Identifier: keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e3:4b:d5:d4:44:39:f8:60:ca:a1:51:d9:c6:33:52:3a:90: a9:f2:e1:74:c4:97:3a:29:43:9a:fc:bf:9e:c5:c6:8e:87:b7: eb:ca:1e:d1:e4:98:32:e0:17:ee:d4:5c:7d:47:e0:50:bc:ee: 54:94:57:c9:90:24:6e:88:d0:b0:c3:8d:a1:dc:6b:dd:2a:4c: 36:be:2b:79:b7:0e:b3:4f:53:a7:db:f2:70:52:5c:ef:20:e6: 4f:b0:b1:81:1f:52:1c:8f:71:2f:b6:af:3f:07:47:ee:1d:08: 66:d5:98:2e:f0:a0:5a:d0:b2:ab:55:19:37:12:66:cb:00:a9: bc:fa:90:e4:33:68:6c:48:dd:0c:54:16:9f:8d:17:bb:59:04: f7:b0:2f:71:6e:0d:2b:e2:29:3d:07:a9:ed:92:9a:8f:88:68: 79:23:2a:5c:ee:bd:97:c4:ab:62:5e:7e:2e:83:ee:21:27:6c: b1:7f:d1:67:cb:36:06:20:38:82:9f:f9:57:7e:d4:04:fe:36: 08:9a:2e:75:a8:7f:70:45:9b:ed:12:ed:d1:7e:f6:86:5a:1e: 38:a6:51:5b:cc:ff:7b:6d:88:8f:86:f8:2d:49:43:8b:66:51: 4d:47:a4:54:87:e9:57:14:a2:90:c7:58:5c:96:85:b0:f8:e3: 21:7b:3c:34 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmVXxKGtvwdu50OwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5 MDYzMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YjVmODliMzItNmM0Yy00NWQxLWE5ZWItZmM0NzRmYjhhZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvs+ZbSfq9Y8hgG0cuZPFS96Zsg9lwFnKPug ZLIvx2qoGHukyfTa979qZBoQHf2UlEHy709vcZlGK+fxGmkFI/y68WItOf17VMXu v6NB355tDXXfXy1+jbY1zEcL/2hUPViWbcG914n214VhC4DfnUAb5VdjxRLJH4TW K1eGDKLAAYuQ61TK9rrl0vlUam0kU89USuojQo7DGLfnYW8frxXacJXyiZipsvXk 1Yqifiu+m//w9mbCOrV8atOauKiz09lc65Y7OEGe9wkXUgACtOe7AwnxXtKYT4H7 AyVf3j+hhPeS/R/mruxut8Y5Tz3XZY9R+1PE/2+o382QvZNhFwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBzDOJSKbQmW/dg/ktjTnXKJu0SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWJl MmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMGI1NDFlYTUtZTdmZi0z YTAwLWFjMzktYWJhYjQ0ZWE1OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODliZTJlZmEtM2MyZi00NmQyLWI1 ZTctY2I4ZDk1MzY5MDYzLzg5YmUyZWZhLTNjMmYtNDZkMi1iNWU3LWNiOGQ5NTM2 OTA2My5jcmwwHwYDVR0jBBgwFoAUK65SecIQTmcFGTwFTLgn7hyllaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhk OTUzNjkwNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2Jj4MA0E AgACMAcDBQAmBuWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAvjS9XURDn4YMqhUdnGM1I6kKny4XTElzop Q5r8v57Fxo6Ht+vKHtHkmDLgF+7UXH1H4FC87lSUV8mQJG6I0LDDjaHca90qTDa+ K3m3DrNPU6fb8nBSXO8g5k+wsYEfUhyPcS+2rz8HR+4dCGbVmC7woFrQsqtVGTcS ZssAqbz6kOQzaGxI3QxUFp+NF7tZBPewL3FuDSviKT0Hqe2Smo+IaHkjKlzuvZfE q2Jefi6D7iEnbLF/0WfLNgYgOIKf+Vd+1AT+NgiaLnWof3BFm+0S7dF+9oZaHjim UVvM/3ttiI+G+C1JQ4tmUU1HpFSH6VcUopDHWFyWhbD44yF7PDQ= -----END CERTIFICATE-----Generated at Sat May 10 23:21:07 2025 by rpki-client