$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa File: 07b02d75-59da-34dd-b4df-1d319f43a1fe.roa (raw, json) Hash identifier: Cwi34lb1REBJSx/MmHNkkFCJVDsqUSRCfH1yy7fajWM= Subject key identifier: B8:7C:2A:19:F3:4B:AA:1C:71:99:01:D1:E5:A2:74:F4:3C:8A:F0:79 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849393E79F2B4BDEF41E8783D80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 397182 IP address blocks: 149.96.192.0/24 maxlen: 26 149.96.193.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:79:f2:b4:bd:ef:41:e8:78:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=c365e742-c7c0-4cce-9863-34fbeb8e5d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:2b:97:6d:e3:20:62:7f:da:4d:86:12:df: 2d:53:4c:25:e4:88:1e:85:36:cc:62:ec:74:74:67: 5a:6b:68:70:cc:77:c1:04:81:b5:09:29:b9:27:7f: 10:eb:03:b6:b6:70:c1:ff:5c:f7:84:bc:b1:40:8d: 20:86:99:77:42:36:8b:41:e5:aa:de:24:a1:2a:a4: 37:97:44:f4:2c:40:09:39:cc:e5:29:d7:60:f1:5b: c2:0c:ae:99:5c:66:4c:c2:f5:35:0c:bf:fd:27:2e: f1:0a:b7:07:f0:68:5f:8a:c9:df:86:68:49:1c:ee: 37:af:e7:5c:cd:47:15:44:21:e5:dd:b9:d9:8c:df: b5:99:a8:da:c7:93:5a:a7:23:4a:bc:cf:ad:19:4a: e8:e5:86:a6:d6:8f:e0:97:0d:38:ec:e0:65:14:50: cd:9c:20:38:a1:b1:90:d8:d4:04:6b:25:88:4d:73: 7e:a2:d4:27:67:31:a2:ba:c1:a2:4f:bb:0c:17:99: 56:89:c3:6c:cf:c1:af:7e:19:54:41:f3:68:a8:f7: 78:6a:d7:12:d0:8c:4b:18:4c:93:88:89:9c:c6:b5: d5:e4:18:9d:99:a5:a7:f4:43:1f:41:96:55:7d:56: 53:0d:44:7f:c3:e4:a6:f8:c2:80:50:03:12:e3:88: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7C:2A:19:F3:4B:AA:1C:71:99:01:D1:E5:A2:74:F4:3C:8A:F0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/07b02d75-59da-34dd-b4df-1d319f43a1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2e:af:05:de:fa:7d:f2:8d:7a:5c:94:7b:d0:54:91:61:e7: 96:bf:83:9b:27:fa:cf:60:d8:7b:3d:5c:06:57:21:3a:28:89: 94:54:cc:1b:6f:89:09:7d:d7:fb:49:b6:db:2b:7d:54:a8:33: 21:ce:ec:29:0e:83:9a:7c:38:9c:79:04:59:b0:05:d2:c9:4c: 0b:52:f2:0d:eb:01:fe:f7:e2:79:02:5c:d0:d2:7a:e3:00:bf: 48:04:f1:63:82:0d:d1:f1:03:60:6c:3f:7e:57:d5:6a:05:87: b8:0b:5f:a6:52:2f:03:fc:cf:70:18:04:bd:9b:e0:ac:95:dc: f5:8c:6c:43:24:44:76:53:95:cd:05:79:b6:28:b4:2e:68:e8: a1:f1:bb:ad:12:86:1e:2f:99:9c:22:80:e4:1a:f1:c9:98:f9: 5f:60:49:b4:be:ed:58:03:d1:b5:05:e7:aa:11:dd:37:7e:2e: dc:c7:0f:2a:67:44:bb:68:26:4d:68:5d:f5:3f:79:eb:a6:e2: b0:f1:43:24:6e:ce:8a:76:73:35:95:2f:56:d7:bf:1b:20:8d: e7:f3:27:a9:1c:76:4e:6b:2e:d0:b1:73:34:1c:f9:71:96:05: 22:27:8c:02:80:c5:67:2d:e1:81:ab:fc:2f:22:6e:82:00:41: c7:69:5b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnnytL3vQeh4PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YzM2NWU3NDItYzdjMC00Y2NlLTk4NjMtMzRmYmViOGU1ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocrl23jIGJ/2k2GEt8tU0wl5IgehTbMYux0 dGdaa2hwzHfBBIG1CSm5J38Q6wO2tnDB/1z3hLyxQI0ghpl3QjaLQeWq3iShKqQ3 l0T0LEAJOczlKddg8VvCDK6ZXGZMwvU1DL/9Jy7xCrcH8GhfisnfhmhJHO43r+dc zUcVRCHl3bnZjN+1majax5NapyNKvM+tGUro5Yam1o/glw047OBlFFDNnCA4obGQ 2NQEayWITXN+otQnZzGiusGiT7sMF5lWicNsz8GvfhlUQfNoqPd4atcS0IxLGEyT iImcxrXV5BidmaWn9EMfQZZVfVZTDUR/w+Sm+MKAUAMS44jSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh8KhnzS6occZkB0eWidPQ8ivB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDdiMDJkNzUtNTlkYS0z NGRkLWI0ZGYtMWQzMTlmNDNhMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlWDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMurwXe+n3yjXpclHvQVJFh55a/g5sn+s9g2Hs9XAZXITooiZRUzBtv iQl91/tJttsrfVSoMyHO7CkOg5p8OJx5BFmwBdLJTAtS8g3rAf734nkCXNDSeuMA v0gE8WOCDdHxA2BsP35X1WoFh7gLX6ZSLwP8z3AYBL2b4KyV3PWMbEMkRHZTlc0F ebYotC5o6KHxu60Shh4vmZwigOQa8cmY+V9gSbS+7VgD0bUF56oR3Td+LtzHDypn RLtoJk1oXfU/eeum4rDxQyRuzop2czWVL1bXvxsgjefzJ6kcdk5rLtCxczQc+XGW BSInjAKAxWct4YGr/C8iboIAQcdpW1k= -----END CERTIFICATE-----Generated at Sun Apr 27 11:26:25 2025 by rpki-client