$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa File: 08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa (raw, json) Hash identifier: rywEnhZgADCY5rUC9x+qW45dbEXoEIfoQAXiV+PSx1I= Subject key identifier: 2C:47:AB:2B:A6:18:AF:87:B4:07:83:BD:98:1D:1C:7B:7D:9B:9C:5B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D1651599A211FEC32580C200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:99:a2:11:fe:c3:25:80:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=722c1c08-98eb-4cf3-b3e7-80d08227d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:bf:57:b6:de:68:7d:dd:4d:da:8a:ae:e9: 68:9c:00:7a:69:b4:4c:95:da:4c:4e:77:cb:87:38: ec:61:60:9f:25:43:a1:2c:39:a6:73:8c:cd:4f:c1: 37:fb:8b:f7:19:94:da:8e:4d:72:b4:a1:8e:a0:d2: d9:0f:72:0d:41:eb:6e:0c:3f:32:85:02:09:a7:9b: da:5a:59:95:b0:ee:c6:6d:0e:fe:63:d4:19:ac:3e: 61:f8:8b:04:2d:8e:3b:21:d2:4f:c8:1c:16:2b:57: 09:08:15:4a:06:81:55:dd:ff:de:b9:f9:e4:ab:b6: d6:6d:ee:26:67:32:cf:61:92:54:cd:00:73:71:b0: 15:bc:cf:06:16:b4:06:bc:29:ca:ee:e9:db:c2:1a: 21:50:f8:36:b3:1c:46:6a:5e:f8:09:da:14:ca:09: f7:78:3d:ce:cb:12:71:f7:45:21:c9:e0:1f:ad:a4: f3:1f:4f:ad:f7:84:3c:5f:3d:18:03:0a:15:85:9c: 23:9c:70:1d:ed:df:9a:8f:23:e6:13:43:13:50:73: 44:5f:b8:57:cb:74:b6:fa:d7:0c:db:72:bd:eb:8e: 1a:b6:40:ad:f7:23:df:93:72:e1:0d:40:bd:27:7d: 03:40:ac:76:97:6c:99:8f:22:c9:90:ea:4c:33:0d: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:AB:2B:A6:18:AF:87:B4:07:83:BD:98:1D:1C:7B:7D:9B:9C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:26:3a:39:b3:6a:e4:6e:28:7e:fd:3a:a0:64:73:c8:3a:c5: b2:80:2a:63:81:16:25:3b:1b:0e:db:26:ca:04:b5:c7:26:f4: 9d:5e:fa:29:23:2f:fa:6b:4e:28:db:d4:bd:27:fb:8f:11:02: 5b:e3:94:4f:6b:0c:b4:f8:13:0b:f8:d9:14:62:5d:11:7d:22: ee:55:bd:d5:47:be:7c:ae:17:5e:99:ea:8d:d7:44:79:46:4c: 62:43:14:27:5f:04:a6:e2:e8:11:b3:45:6c:42:bb:2c:8a:da: 4f:3f:ff:fb:a9:4e:b4:cf:53:c4:07:0a:87:cf:db:57:ff:f0: 1e:82:fd:a7:51:64:87:2d:73:6f:87:28:ac:01:2c:89:d3:26: 71:c8:d2:c7:fd:3d:22:c1:75:ef:51:e0:6c:77:b7:fa:54:dc: 4b:61:1a:a2:2a:53:61:50:25:89:3f:6c:57:ff:61:0e:86:df: 63:6a:fd:dd:95:1f:cb:a7:fa:39:c9:ea:7b:62:49:0d:f2:ff: ac:f2:c1:55:74:69:78:33:f1:61:7d:8c:e8:a3:9a:ec:3e:9f: 28:31:58:c9:24:96:a0:26:82:87:44:40:46:d1:10:c9:73:f9: e8:28:ed:b7:fa:89:fe:87:b6:80:f2:13:fd:98:58:72:8f:45: 31:8e:78:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRWZohH+wyWAwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzIyYzFjMDgtOThlYi00Y2YzLWIzZTctODBkMDgyMjdkNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsG/V7beaH3dTdqKrulonAB6abRMldpMTnfL hzjsYWCfJUOhLDmmc4zNT8E3+4v3GZTajk1ytKGOoNLZD3INQetuDD8yhQIJp5va WlmVsO7GbQ7+Y9QZrD5h+IsELY47IdJPyBwWK1cJCBVKBoFV3f/eufnkq7bWbe4m ZzLPYZJUzQBzcbAVvM8GFrQGvCnK7unbwhohUPg2sxxGal74CdoUygn3eD3OyxJx 90UhyeAfraTzH0+t94Q8Xz0YAwoVhZwjnHAd7d+ajyPmE0MTUHNEX7hXy3S2+tcM 23K9644atkCt9yPfk3LhDUC9J30DQKx2l2yZjyLJkOpMMw0ILwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxHqyumGK+HtAeDvZgdHHt9m5xbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDhhZDdhZTEtNGJmYS0z ZDFjLTk2YWMtYTllMmNlYTE0MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkmOjmzauRuKH79OqBkc8g6xbKAKmOBFiU7Gw7bJsoEtccm9J1e+ikj L/prTijb1L0n+48RAlvjlE9rDLT4Ewv42RRiXRF9Iu5VvdVHvnyuF16Z6o3XRHlG TGJDFCdfBKbi6BGzRWxCuyyK2k8///upTrTPU8QHCofP21f/8B6C/adRZIctc2+H KKwBLInTJnHI0sf9PSLBde9R4Gx3t/pU3EthGqIqU2FQJYk/bFf/YQ6G32Nq/d2V H8un+jnJ6ntiSQ3y/6zywVV0aXgz8WF9jOijmuw+nygxWMkklqAmgodEQEbREMlz +ego7bf6if6HtoDyE/2YWHKPRTGOeGY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:28 2025 by rpki-client