$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa File: 1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json) Hash identifier: 2se2FwZEpdrJ3oCOnlWkXiSa9VhOh6TRfNNse3pw8yM= Subject key identifier: 72:65:F9:BC:60:5A:81:72:06:F4:80:34:87:83:27:96:27:89:5A:EF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C6C2F2926456ED187C580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6c:2f:29:26:45:6e:d1:87:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e964034e-e6af-4c07-b684-6460de0c37c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:b9:6f:2b:31:01:02:14:db:d2:67:ff:3f: 13:e9:80:0b:94:83:ae:bc:36:8c:0c:de:0a:4a:f8: 04:a2:65:ee:4f:8a:07:4b:15:34:85:8b:f4:d4:33: bc:16:8a:80:75:ad:c4:d2:63:fe:40:7c:27:c7:5b: 02:f3:41:45:b5:d2:a8:57:a3:08:25:d1:de:76:c2: ad:4a:ec:b8:b1:52:e9:4f:93:f9:4d:44:52:72:6e: 86:78:5b:7a:bd:08:bf:b5:3a:ae:86:cd:d1:ef:fd: b6:cb:7c:77:01:4a:43:ca:10:29:cc:5e:8b:0a:a1: bb:bb:e2:7b:ad:20:0e:fd:79:b7:08:b7:a3:13:0d: 61:0b:5d:7b:55:74:a5:b0:4f:fc:68:9e:a7:dd:bc: 09:70:a5:35:56:a2:17:4f:3a:d7:bd:12:16:26:21: 88:63:23:de:6e:35:96:2a:03:74:a1:aa:90:4d:5a: 05:4a:ce:88:a1:b7:a4:f0:34:05:fa:38:bb:b0:6d: aa:81:2d:70:e0:e4:bc:61:d9:95:5b:a9:07:00:9d: 83:74:6d:73:60:82:98:32:07:61:69:1f:fc:83:f5: 9d:e3:31:0b:39:38:da:b5:3f:34:98:f4:1e:f7:3f: 80:ce:63:31:99:ec:d5:49:ee:dc:f3:ae:b6:1c:0f: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:65:F9:BC:60:5A:81:72:06:F4:80:34:87:83:27:96:27:89:5A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:27:67:38:f7:d4:92:61:a7:dc:e6:d4:60:2b:fa:89:00:c8: d6:97:cc:33:6b:ad:9d:c1:77:18:01:90:ec:56:65:4f:f7:fd: d1:2c:32:c2:71:44:7a:ae:13:2b:31:8e:be:8c:d3:5a:55:ea: 4c:3d:80:99:6c:9e:79:18:09:a5:39:b4:35:86:d3:fa:7e:c2: b0:54:05:85:43:86:05:f0:d5:52:f0:16:e7:33:91:5a:27:b6: 55:cd:53:e3:e2:78:b1:29:9f:66:f2:27:bc:9f:dd:b5:d5:a2: 4f:1b:51:95:80:2a:70:bf:03:09:25:ee:2f:04:67:02:1f:41: 7d:ec:94:41:03:ae:6f:e0:45:3b:86:a8:96:1f:65:24:19:a1: 10:0c:66:81:6d:3c:a8:83:6d:07:23:0d:29:f9:d2:29:4b:a3: fa:ba:01:e6:88:c3:a2:d5:41:58:b6:ec:fa:ad:a2:75:ed:f1: b5:91:6c:1f:a1:6b:ae:af:50:32:a2:54:5e:38:e2:eb:20:a4: 6e:c6:20:b2:b1:0f:5c:56:6a:e6:a2:08:ce:20:99:49:5a:b5: 6a:12:b0:98:11:4e:9f:9a:df:bc:4c:1d:9e:66:d1:37:7d:b6: 90:40:9a:ef:d3:21:ca:3e:1e:91:ed:7b:14:82:f2:7b:d5:6a: 54:70:1b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGwvKSZFbtGHxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTk2NDAzNGUtZTZhZi00YzA3LWI2ODQtNjQ2MGRlMGMzN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk25bysxAQIU29Jn/z8T6YALlIOuvDaMDN4K SvgEomXuT4oHSxU0hYv01DO8FoqAda3E0mP+QHwnx1sC80FFtdKoV6MIJdHedsKt Suy4sVLpT5P5TURScm6GeFt6vQi/tTquhs3R7/22y3x3AUpDyhApzF6LCqG7u+J7 rSAO/Xm3CLejEw1hC117VXSlsE/8aJ6n3bwJcKU1VqIXTzrXvRIWJiGIYyPebjWW KgN0oaqQTVoFSs6Iobek8DQF+ji7sG2qgS1w4OS8YdmVW6kHAJ2DdG1zYIKYMgdh aR/8g/Wd4zELOTjatT80mPQe9z+AzmMxmezVSe7c8662HA9u5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJl+bxgWoFyBvSANIeDJ5YniVrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWJiZTY5ZWMtOTY4Ni0z MzdkLWE2MDktZTVjYjk1MWRjNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQnZzj31JJhp9zm1GAr+okAyNaXzDNrrZ3BdxgBkOxWZU/3/dEsMsJx RHquEysxjr6M01pV6kw9gJlsnnkYCaU5tDWG0/p+wrBUBYVDhgXw1VLwFuczkVon tlXNU+PieLEpn2byJ7yf3bXVok8bUZWAKnC/Awkl7i8EZwIfQX3slEEDrm/gRTuG qJYfZSQZoRAMZoFtPKiDbQcjDSn50ilLo/q6AeaIw6LVQVi27PqtonXt8bWRbB+h a66vUDKiVF444usgpG7GILKxD1xWauaiCM4gmUlatWoSsJgRTp+a37xMHZ5m0Td9 tpBAmu/TIco+HpHtexSC8nvValRwGxc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:26:16 2025 by rpki-client