$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json) Hash identifier: rZyIU0Xu+MkXFodrnhTI0heaSEkcgFujruKnIL7ZXjE= Subject key identifier: 13:9E:CF:41:B2:57:17:AD:A7:DC:F8:C8:64:51:6D:E7:C8:2F:BB:82 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515B4BBD2C23CFB7C4880 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:b4:bb:d2:c2:3c:fb:7c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=d5c6690b-b487-4d01-b48f-ec7d0b7863b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:f5:b7:a7:d5:da:e8:b8:88:d7:22:b6:cf: ef:ce:17:ec:57:4e:0f:98:dd:29:3d:56:55:cc:65: 59:cf:af:a6:b0:18:3f:e3:8a:d2:82:5c:42:51:8a: 23:e6:55:b4:ee:c8:d7:d1:ab:30:0d:84:bc:41:8a: 9b:d5:b9:28:2a:80:e8:ca:fe:a6:2c:1c:c5:dc:a7: b3:f7:3f:4b:0d:97:a2:3e:e8:e2:49:a8:45:83:ed: 18:9c:2e:a0:a8:1c:37:8e:4e:89:56:33:d3:ec:e9: 78:29:a9:45:ab:43:f9:a2:9c:70:e3:20:37:b1:3b: b6:aa:06:4f:b3:72:e9:3e:cc:8c:69:10:09:01:d9: 5d:91:3c:c9:a8:46:09:8e:d9:d1:af:44:73:1d:c8: ca:bb:77:17:e6:ff:82:10:83:42:f1:04:9e:d9:ba: bc:6b:c0:10:3e:78:0d:41:cc:41:c2:19:a3:4c:92: 52:0d:ef:f5:db:a8:b3:6c:09:90:aa:a9:fc:39:b6: 47:c9:01:60:1c:b9:a7:a0:1d:53:36:f8:b5:c5:11: b1:18:62:77:87:6e:af:b3:f5:99:d0:65:22:c7:bb: f4:14:5f:4a:a2:b1:8d:a5:d2:c8:c0:e0:55:b6:f2: fa:d7:32:b4:6b:ac:d7:e0:95:f7:ab:a1:62:6b:45: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9E:CF:41:B2:57:17:AD:A7:DC:F8:C8:64:51:6D:E7:C8:2F:BB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:75:e5:e5:82:77:ad:60:92:0e:10:0c:c5:66:c0:fb:a3:6c: d0:b3:1b:58:94:93:7e:93:2a:db:52:51:7a:20:a0:02:07:2c: 2e:21:ac:2d:5d:e3:ee:62:8a:10:c8:92:2b:cb:40:90:6f:01: c2:95:1e:44:cf:b0:ef:8a:9a:75:73:d9:29:ce:ed:6e:80:aa: 4a:c5:4a:b0:fb:de:b1:85:4e:30:85:91:b8:69:60:bb:fb:ff: 57:6b:fc:ae:9c:16:f1:1d:c4:6d:9a:88:9c:4e:f6:d9:4f:45: 55:3b:83:be:7c:a2:f0:4c:0a:4f:d2:75:fd:0b:35:f7:2a:d5: dd:2b:e6:e5:83:79:a2:7c:00:34:74:90:fd:7d:de:3f:4e:d4: ba:7f:51:6f:ef:8e:01:76:44:fc:11:d1:9a:d0:8f:9d:59:21: 5d:97:63:73:a9:9e:ef:b4:98:63:a2:ec:92:5d:f7:f8:41:76: f6:ae:c0:cd:b5:ac:6c:6f:18:c8:9b:36:f7:47:69:d0:2b:3f: 5b:32:63:ac:7f:d8:12:4f:52:0c:6f:e8:b9:2f:e9:97:a0:dc: f0:73:ce:73:f6:42:96:f2:1d:2f:f5:ae:8a:99:ff:38:73:12: c3:9b:a9:a7:f8:20:ba:a4:29:ab:f9:2a:40:21:bc:dd:f0:f0: 6e:79:6c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRW0u9LCPPt8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDVjNjY5MGItYjQ4Ny00ZDAxLWI0OGYtZWM3ZDBiNzg2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsr1t6fV2ui4iNcits/vzhfsV04PmN0pPVZV zGVZz6+msBg/44rSglxCUYoj5lW07sjX0aswDYS8QYqb1bkoKoDoyv6mLBzF3Kez 9z9LDZeiPujiSahFg+0YnC6gqBw3jk6JVjPT7Ol4KalFq0P5opxw4yA3sTu2qgZP s3LpPsyMaRAJAdldkTzJqEYJjtnRr0RzHcjKu3cX5v+CEINC8QSe2bq8a8AQPngN QcxBwhmjTJJSDe/126izbAmQqqn8ObZHyQFgHLmnoB1TNvi1xRGxGGJ3h26vs/WZ 0GUix7v0FF9KorGNpdLIwOBVtvL61zK0a6zX4JX3q6Fia0WMowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOez0GyVxetp9z4yGRRbefIL7uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTQ4ZTg5NjUtYzlkMC0z ODNlLTgyYzEtZmQ3MTNlNmEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV15eWCd61gkg4QDMVmwPujbNCzG1iUk36TKttSUXogoAIHLC4hrC1d 4+5iihDIkivLQJBvAcKVHkTPsO+KmnVz2SnO7W6AqkrFSrD73rGFTjCFkbhpYLv7 /1dr/K6cFvEdxG2aiJxO9tlPRVU7g758ovBMCk/Sdf0LNfcq1d0r5uWDeaJ8ADR0 kP193j9O1Lp/UW/vjgF2RPwR0ZrQj51ZIV2XY3Opnu+0mGOi7JJd9/hBdvauwM21 rGxvGMibNvdHadArP1syY6x/2BJPUgxv6Lkv6Zeg3PBzznP2QpbyHS/1roqZ/zhz EsObqaf4ILqkKav5KkAhvN3w8G55bGU= -----END CERTIFICATE-----Generated at Sun Jun 15 18:04:16 2025 by rpki-client