$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa File: 0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json) Hash identifier: 3ZmQD4HCmW8aU+sjBUsi/PzPA12jhij+EqfN28gt9EU= Subject key identifier: 26:09:54:91:F0:9A:72:DB:22:C7:55:0B:88:9C:AC:A9:1A:4F:79:8F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16516116B3CD8D4C3264AC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:11:6b:3c:d8:d4:c3:26:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3a766158-bdd4-4b5b-9266-9fe052fa000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:d0:30:c2:c7:7d:4a:73:30:47:7b:93:00: c3:9c:26:e6:c1:db:11:25:b1:9a:7d:62:84:16:ab: 37:a4:86:a8:60:59:22:0d:71:fb:7c:1a:c8:b6:72: 54:d0:ed:95:18:b7:7d:7f:53:50:36:30:0b:e0:a5: b2:e4:13:2e:17:e2:cf:5a:ea:0b:26:0e:0f:29:d6: a8:56:5a:f2:e3:62:75:f5:d2:45:ee:19:73:02:fc: 54:f7:31:91:13:68:b0:e4:69:71:80:28:ee:03:04: c5:7c:2c:6f:7d:ee:10:84:88:9e:01:b1:a7:8c:19: 1c:ce:5b:fd:cf:4e:4f:be:72:35:2f:aa:a8:46:d3: e4:1f:92:57:bd:40:d0:1a:39:af:e3:ca:d2:9e:f4: a3:fa:7f:4d:24:6d:f3:61:1b:b4:ff:f4:ac:ce:67: 58:08:d6:3a:5e:9a:33:8a:c9:65:93:6f:85:41:ed: bf:b8:0d:c3:df:5e:03:dd:37:ea:14:fc:32:7a:5d: fe:72:ae:3b:e1:b0:e9:f3:2c:70:e9:a2:74:6e:c5: f1:5c:f1:9d:9f:35:db:94:d3:bf:c7:14:84:4d:71: 18:f3:f0:de:d4:cf:31:96:86:c0:d9:f4:26:ca:9e: 37:1e:41:ca:a8:73:63:07:fd:51:d5:0a:03:1f:01: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:09:54:91:F0:9A:72:DB:22:C7:55:0B:88:9C:AC:A9:1A:4F:79:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b4:82:0b:5c:55:fd:1a:30:81:db:8a:8c:fa:eb:d3:e5:84: 55:99:60:12:3c:d6:84:18:fe:ad:b8:12:80:c6:d6:2a:77:06: 4e:b3:ce:90:2d:12:3b:70:cc:f1:75:55:31:6e:52:cd:d2:20: 70:3f:4d:df:d1:2c:dc:88:40:7d:1d:86:5c:9d:8e:36:17:58: 1c:97:33:63:bb:8b:6e:5f:b3:e2:14:f2:54:28:6d:d2:30:d7: 0a:7e:05:a3:5a:12:4c:33:db:d3:0e:21:3a:6b:22:a5:fa:2a: d0:eb:f0:5b:c7:ca:a4:d2:89:f2:2b:f9:50:6e:b1:e9:97:8e: 0a:be:d5:94:f0:cf:41:82:dc:91:8d:16:47:0b:3d:39:c5:01: fc:db:be:f5:17:b5:77:0b:f8:ec:c6:d9:d3:6d:59:52:83:83: 4b:2f:e9:b0:24:d1:95:42:58:7f:74:39:01:de:09:f9:70:fd: f7:98:03:31:fc:6a:1d:60:18:c9:e3:d4:aa:30:81:68:77:e6: 56:76:ab:40:a9:91:1e:f2:4a:14:a6:fd:19:85:b8:70:03:c4: e5:25:93:94:ca:16:3a:77:76:6b:4c:2a:12:1e:af:dc:f2:da: 74:f0:70:c7:04:4a:e7:92:1f:00:c1:80:a4:d9:8a:39:35:d9: 66:37:0c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRYRazzY1MMmSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk M2E3NjYxNTgtYmRkNC00YjViLTkyNjYtOWZlMDUyZmEwMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSnQMMLHfUpzMEd7kwDDnCbmwdsRJbGafWKE Fqs3pIaoYFkiDXH7fBrItnJU0O2VGLd9f1NQNjAL4KWy5BMuF+LPWuoLJg4PKdao Vlry42J19dJF7hlzAvxU9zGRE2iw5GlxgCjuAwTFfCxvfe4QhIieAbGnjBkczlv9 z05PvnI1L6qoRtPkH5JXvUDQGjmv48rSnvSj+n9NJG3zYRu0//SszmdYCNY6Xpoz isllk2+FQe2/uA3D314D3TfqFPwyel3+cq474bDp8yxw6aJ0bsXxXPGdnzXblNO/ xxSETXEY8/De1M8xlobA2fQmyp43HkHKqHNjB/1R1QoDHwEvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYJVJHwmnLbIsdVC4icrKkaT3mPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGRhOGVhNjQtYWU0ZS0z ZTc1LWE3ZmMtNjJiNmY0NDlkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa0ggtcVf0aMIHbioz669PlhFWZYBI81oQY/q24EoDG1ip3Bk6zzpAt EjtwzPF1VTFuUs3SIHA/Td/RLNyIQH0dhlydjjYXWByXM2O7i25fs+IU8lQobdIw 1wp+BaNaEkwz29MOITprIqX6KtDr8FvHyqTSifIr+VBusemXjgq+1ZTwz0GC3JGN FkcLPTnFAfzbvvUXtXcL+OzG2dNtWVKDg0sv6bAk0ZVCWH90OQHeCflw/feYAzH8 ah1gGMnj1KowgWh35lZ2q0CpkR7yShSm/RmFuHADxOUlk5TKFjp3dmtMKhIer9zy 2nTwcMcESueSHwDBgKTZijk12WY3DDA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:07:23 2025 by rpki-client