$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa File: 098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa (raw, json) Hash identifier: yRYHgb4o/Q7FYmdmTpis4zants1f0drKtSq5fJ18/fo= Subject key identifier: D6:3F:82:1D:D9:F6:9D:3C:56:0E:39:CC:44:43:A6:E0:31:B5:26:87 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D1650DE120971315B3DC7A00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0d:e1:20:97:13:15:b3:dc:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=b3efc951-bb85-4dbc-97b0-ea46d3524e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:cc:45:fc:7c:13:d5:91:29:6f:de:fc:87: a6:1d:8e:39:fd:41:ec:28:4d:1f:ba:1d:2f:72:fa: c8:3a:21:7b:05:62:4a:9a:c0:a4:39:67:ae:02:16: 7f:46:4a:c3:27:f3:6c:ec:83:a9:4a:25:fa:0f:30: 54:79:89:40:fb:5c:19:14:1a:d8:f4:a0:72:48:13: c6:72:68:38:b3:f4:b8:e2:18:6d:bb:9f:ad:d1:09: 54:51:13:1c:8d:ee:8d:c0:cb:4c:d2:76:aa:69:65: 5b:1f:65:75:dd:14:4a:3f:25:e4:62:5b:50:91:dd: 0c:df:20:a0:fc:44:9a:28:7d:77:eb:47:5a:38:04: 42:a8:7f:e7:4c:b4:56:55:40:38:89:e4:5b:bf:4f: ed:36:24:06:84:56:d3:27:cd:a6:f7:68:df:7c:42: 1a:94:1c:1f:b9:60:1f:6f:25:1d:03:df:af:69:eb: 60:f1:12:3c:ee:11:4f:b5:3e:65:98:c1:dc:93:f0: d3:01:38:ea:e1:ab:1a:ce:27:55:16:20:71:f5:01: e3:17:d2:a8:61:76:65:d4:79:ff:ee:be:b4:f5:02: 8f:3c:7f:ae:8b:6c:0e:d4:2a:18:71:2d:52:38:d2: a6:08:7d:e0:f5:08:e8:40:2d:29:df:43:8a:5e:8c: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:82:1D:D9:F6:9D:3C:56:0E:39:CC:44:43:A6:E0:31:B5:26:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:15:5e:95:76:0a:e6:57:ee:3e:df:18:54:a9:77:bd:14:29: 09:70:6a:4c:3f:08:0f:36:60:85:c9:7f:4e:80:e6:a1:5d:df: 6c:91:01:93:cc:44:da:82:68:ef:77:f4:9c:4f:7d:59:09:1e: 69:66:d7:e2:4b:d7:13:59:d8:df:2f:0c:1b:b0:6b:b0:cf:91: 76:a9:75:7c:72:2d:0d:7a:db:b1:52:96:66:cb:b9:8a:a1:06: ce:dd:3e:69:9f:3c:6f:b8:94:94:21:7f:a2:b5:6e:1e:11:31: 61:de:df:9b:53:05:8b:4f:f4:b1:b6:de:5f:1c:4b:f1:06:e1: a7:fa:23:d9:54:40:f0:e0:9e:67:e2:82:45:b5:b0:d2:61:7d: a5:d1:d8:fc:a8:39:93:80:08:04:27:43:e1:62:57:cd:a6:98: 3e:ab:84:1e:60:01:d0:e4:f5:33:82:c3:7a:25:af:88:d1:2d: 97:47:40:2d:18:94:bf:2b:5c:e1:1a:db:bf:3d:22:f0:1f:ea: 18:8c:d6:e5:67:30:a0:4a:26:64:51:a3:dc:c0:4a:32:5a:7c: 13:9a:0c:1c:52:f7:21:47:50:4d:13:9f:ee:5b:60:0e:1f:bb: 05:7f:11:d4:4b:1c:6b:cb:73:75:d3:f1:ff:fa:4b:b4:5c:f3: cf:bc:03:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ3hIJcTFbPcegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YjNlZmM5NTEtYmI4NS00ZGJjLTk3YjAtZWE0NmQzNTI0ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ7MRfx8E9WRKW/e/IemHY45/UHsKE0fuh0v cvrIOiF7BWJKmsCkOWeuAhZ/RkrDJ/Ns7IOpSiX6DzBUeYlA+1wZFBrY9KBySBPG cmg4s/S44hhtu5+t0QlUURMcje6NwMtM0naqaWVbH2V13RRKPyXkYltQkd0M3yCg /ESaKH1360daOARCqH/nTLRWVUA4ieRbv0/tNiQGhFbTJ82m92jffEIalBwfuWAf byUdA9+vaetg8RI87hFPtT5lmMHck/DTATjq4asazidVFiBx9QHjF9KoYXZl1Hn/ 7r609QKPPH+ui2wO1CoYcS1SONKmCH3g9QjoQC0p30OKXoy41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY/gh3Z9p08Vg45zERDpuAxtSaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDk4YzBhNDAtMmE4My0z OWU3LTg4ZmItNGEwMjI2YTJiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4VXpV2CuZX7j7fGFSpd70UKQlwakw/CA82YIXJf06A5qFd32yRAZPM RNqCaO939JxPfVkJHmlm1+JL1xNZ2N8vDBuwa7DPkXapdXxyLQ1627FSlmbLuYqh Bs7dPmmfPG+4lJQhf6K1bh4RMWHe35tTBYtP9LG23l8cS/EG4af6I9lUQPDgnmfi gkW1sNJhfaXR2PyoOZOACAQnQ+FiV82mmD6rhB5gAdDk9TOCw3olr4jRLZdHQC0Y lL8rXOEa2789IvAf6hiM1uVnMKBKJmRRo9zASjJafBOaDBxS9yFHUE0Tn+5bYA4f uwV/EdRLHGvLc3XT8f/6S7Rc88+8A4g= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:45 2025 by rpki-client