$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa File: 0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa (raw, json) Hash identifier: icQ3uvEFPxR2tUKeN4C+tUgSxIOeicE5mwMPXF4o3QY= Subject key identifier: DB:13:9E:AA:57:73:F0:89:23:C1:06:E4:B7:49:E9:5B:BE:57:F9:89 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C7247E0FE24BEF07DE000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:47:e0:fe:24:be:f0:7d:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=3814e4e3-348a-444d-8a03-33a8f950c487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:af:a3:d8:d5:b5:ef:80:4a:27:80:10:22: 09:da:4d:9e:2a:42:eb:ee:53:7d:e4:1b:9b:ac:df: 41:fd:db:fe:fd:b1:d8:d8:9c:7a:1a:10:fd:b5:8c: f2:cc:23:9b:0a:04:ec:64:96:fb:b5:46:09:2a:35: 09:7a:01:ab:9d:d3:b4:c6:f5:ba:97:1f:0e:04:ae: 21:f3:b0:ab:00:02:69:2f:1b:9c:95:ac:69:a5:c4: dc:ad:2f:4f:e2:7f:16:81:e8:bd:ef:3b:f8:fc:cf: 93:1a:61:d3:1a:73:d6:b9:b0:0d:42:eb:4e:da:26: 5e:7c:5a:6a:e9:30:49:75:81:02:9c:de:1e:ce:aa: 9b:4f:0d:64:4d:65:ce:73:cf:bc:78:3c:1a:fa:6c: 83:79:a4:80:63:4d:00:77:c4:3d:1e:0c:31:f2:36: d3:e9:ed:e8:6f:8d:77:c0:b6:a6:ae:9c:2c:7b:d0: 58:07:98:3a:16:2d:01:e0:e5:8a:ed:e2:f6:80:ef: 85:2b:2c:5d:5b:14:79:db:cd:84:e3:88:7f:4d:f2: 90:fb:2b:e2:c1:21:bb:9e:c6:65:4b:f7:15:3b:a2: 3a:9d:b0:ad:34:3c:b3:37:68:6c:f7:91:9a:d9:61: 4d:6d:31:d7:af:00:79:31:2d:76:98:ee:77:3e:2d: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:9E:AA:57:73:F0:89:23:C1:06:E4:B7:49:E9:5B:BE:57:F9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:57:f9:93:9e:a8:d3:93:b7:3d:ba:26:b3:03:2b:42:f0:45: 06:14:2c:a0:5c:f9:76:61:fc:a8:eb:05:b7:b7:62:a5:ad:01: da:74:e2:c7:00:28:49:88:a6:10:e9:47:02:9a:55:47:15:b8: 79:30:f6:14:4b:5c:5f:4b:d2:f0:28:0d:a2:2e:ac:c9:64:d3: 31:85:6c:27:86:e4:82:bb:d9:c7:80:65:ae:77:57:6a:05:18: 10:ad:4a:71:4b:35:f5:55:72:19:37:24:d5:48:d5:f8:a1:4b: 97:25:f2:62:34:c7:ff:7d:bb:cb:9d:e5:02:a9:e3:02:73:6b: 0f:23:c7:8b:93:98:c0:f0:82:20:f9:28:c8:e5:9f:51:b2:a2: d5:9c:c9:ef:c6:8a:5c:bf:2f:ca:fb:8e:35:cd:d6:4e:21:27: fb:b1:c5:cd:2d:dc:62:10:a7:4c:89:16:c3:e4:55:bb:50:30: 50:d9:52:2c:73:d0:8d:7c:14:b7:57:20:9a:46:75:b1:16:da: 80:72:62:13:eb:98:0f:27:3b:9f:04:0e:97:99:d7:8c:4c:ad: 2b:b4:e2:42:a7:59:22:8a:92:de:f5:84:b7:13:3b:5a:aa:c2: 7c:bb:48:ec:a7:5b:ea:22:17:15:73:2f:1f:f9:10:2c:c0:ac: ff:c2:86:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHJH4P4kvvB94AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MzgxNGU0ZTMtMzQ4YS00NDRkLThhMDMtMzNhOGY5NTBjNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cavo9jVte+ASieAECIJ2k2eKkLr7lN95Bub rN9B/dv+/bHY2Jx6GhD9tYzyzCObCgTsZJb7tUYJKjUJegGrndO0xvW6lx8OBK4h 87CrAAJpLxuclaxppcTcrS9P4n8Wgei97zv4/M+TGmHTGnPWubANQutO2iZefFpq 6TBJdYECnN4ezqqbTw1kTWXOc8+8eDwa+myDeaSAY00Ad8Q9Hgwx8jbT6e3ob413 wLamrpwse9BYB5g6Fi0B4OWK7eL2gO+FKyxdWxR5282E44h/TfKQ+yviwSG7nsZl S/cVO6I6nbCtNDyzN2hs95Ga2WFNbTHXrwB5MS12mO53Pi0cTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsTnqpXc/CJI8EG5LdJ6Vu+V/mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGJhZjI5MTgtYmNkZi0z ZmQ2LWIyYmItNzVhMmI3MTg4NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlX+ZOeqNOTtz26JrMDK0LwRQYULKBc+XZh/KjrBbe3YqWtAdp04scA KEmIphDpRwKaVUcVuHkw9hRLXF9L0vAoDaIurMlk0zGFbCeG5IK72ceAZa53V2oF GBCtSnFLNfVVchk3JNVI1fihS5cl8mI0x/99u8ud5QKp4wJzaw8jx4uTmMDwgiD5 KMjln1GyotWcye/Gily/L8r7jjXN1k4hJ/uxxc0t3GIQp0yJFsPkVbtQMFDZUixz 0I18FLdXIJpGdbEW2oByYhPrmA8nO58EDpeZ14xMrSu04kKnWSKKkt71hLcTO1qq wny7SOynW+oiFxVzLx/5ECzArP/ChlI= -----END CERTIFICATE-----Generated at Sun Apr 27 18:16:27 2025 by rpki-client