$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa File: 0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa (raw, json) Hash identifier: gjMXS1+w5eKJUc+typfCek7iDSMFNo6uuddLuLe9l38= Subject key identifier: 84:B9:C9:32:38:2E:1E:FE:02:5E:AA:7B:5F:6B:FA:F6:01:CE:46:6E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16516200B22707B1A44ECC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:20:0b:22:70:7b:1a:44:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=dd06d52b-cb78-4374-a2db-38cd7aa2994a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:9d:ef:f2:dc:e4:66:43:68:c1:4e:84:71: 47:9f:25:c3:76:2a:b5:2f:b1:a3:0a:8b:d0:bf:f2: a9:b3:b2:58:d6:04:87:fa:2d:e0:50:f6:66:0c:f6: d6:48:bc:40:4c:a1:b6:9e:13:32:3c:7a:ce:d4:30: 7d:27:5b:a3:70:81:73:11:8d:89:62:ca:16:3b:a9: c8:b0:06:92:bb:7c:ff:60:e4:98:ef:25:09:81:20: 1f:b2:c5:bb:43:68:c9:da:44:eb:57:7d:8c:33:94: c8:16:28:d1:1b:ee:e4:f9:f7:57:b1:18:c3:c6:6d: 7e:1f:79:96:e9:34:7a:2b:36:43:80:bf:24:80:69: 09:78:44:56:24:a6:c9:06:76:55:0d:a4:bb:ff:c1: ed:7d:2c:c9:b3:09:05:82:05:08:49:c5:d1:61:00: 8c:92:44:ac:a4:e9:cd:0f:13:70:59:b2:c5:7e:c0: 25:cc:4c:8d:79:23:d0:2a:9e:e2:06:95:83:2e:ba: af:b2:d3:9c:03:94:94:b4:f3:8b:f2:a6:13:51:b1: d1:f8:25:76:81:2c:e7:b6:0d:b8:9d:a6:a1:ae:e7: 99:ad:9b:c3:87:74:48:4c:28:1e:6c:df:8a:bd:9d: 02:47:04:a8:d7:a2:45:0e:50:15:e5:82:04:ed:8c: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:C9:32:38:2E:1E:FE:02:5E:AA:7B:5F:6B:FA:F6:01:CE:46:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:31:46:cc:ec:30:d5:1e:de:42:87:62:a2:bf:3c:08:ff:5b: c2:42:66:81:82:24:75:15:a4:2f:18:12:5b:ad:56:8f:f2:b2: 8c:1e:8e:39:57:02:14:78:34:0b:f0:10:6c:7b:aa:a8:fa:71: 8e:f2:61:3e:97:78:21:e0:40:ee:e1:63:a2:25:3d:75:55:2d: 91:5e:da:00:86:57:f4:30:ea:12:08:f5:cd:2d:c7:12:19:a5: 36:20:3b:8e:30:f1:57:e2:97:89:58:9a:17:72:af:73:d9:f9: 39:a4:12:c2:5e:67:81:16:84:2c:18:80:76:81:ff:d8:bc:8b: 37:66:da:db:d1:f7:51:ac:d2:3b:74:7f:ec:c4:fa:b4:e7:49: 86:1c:9f:1c:d2:4f:dd:dd:9d:6c:bd:28:a2:35:15:c3:82:2c: 65:9e:33:f8:85:98:c3:e2:e7:c4:4a:b9:89:89:1b:e9:e8:17: 04:a6:2f:3e:ce:7f:e8:1e:db:20:36:e5:5d:82:2a:7f:0d:62: 1d:72:7a:08:a9:86:1f:59:73:49:27:18:06:19:17:00:7a:8f: 4d:58:16:a7:7c:af:84:e8:e1:9a:2a:cb:e0:13:76:ca:6d:17: 2a:55:71:d6:0a:a0:35:25:eb:1d:e5:0d:39:7d:94:f7:62:00: f4:05:c8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRYgCyJwexpE7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGQwNmQ1MmItY2I3OC00Mzc0LWEyZGItMzhjZDdhYTI5OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllqd7/Lc5GZDaMFOhHFHnyXDdiq1L7GjCovQ v/Kps7JY1gSH+i3gUPZmDPbWSLxATKG2nhMyPHrO1DB9J1ujcIFzEY2JYsoWO6nI sAaSu3z/YOSY7yUJgSAfssW7Q2jJ2kTrV32MM5TIFijRG+7k+fdXsRjDxm1+H3mW 6TR6KzZDgL8kgGkJeERWJKbJBnZVDaS7/8HtfSzJswkFggUIScXRYQCMkkSspOnN DxNwWbLFfsAlzEyNeSPQKp7iBpWDLrqvstOcA5SUtPOL8qYTUbHR+CV2gSzntg24 naahrueZrZvDh3RITCgebN+KvZ0CRwSo16JFDlAV5YIE7YxmwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS5yTI4Lh7+Al6qe19r+vYBzkZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGJhZjI5MTgtYmNkZi0z ZmQ2LWIyYmItNzVhMmI3MTg4NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkxRszsMNUe3kKHYqK/PAj/W8JCZoGCJHUVpC8YElutVo/ysowejjlX AhR4NAvwEGx7qqj6cY7yYT6XeCHgQO7hY6IlPXVVLZFe2gCGV/Qw6hII9c0txxIZ pTYgO44w8Vfil4lYmhdyr3PZ+TmkEsJeZ4EWhCwYgHaB/9i8izdm2tvR91Gs0jt0 f+zE+rTnSYYcnxzST93dnWy9KKI1FcOCLGWeM/iFmMPi58RKuYmJG+noFwSmLz7O f+ge2yA25V2CKn8NYh1yegiphh9Zc0knGAYZFwB6j01YFqd8r4To4Zoqy+ATdspt FypVcdYKoDUl6x3lDTl9lPdiAPQFyF4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:37 2025 by rpki-client