$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa File: 1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json) Hash identifier: OtsqNVmNi9dSDipkoICAZx58SshHVMp8pil5C1spnvA= Subject key identifier: 6D:CC:7D:3F:F0:D7:9E:B6:6B:53:CF:13:49:9D:0E:04:20:FF:2B:24 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D1650E115D59BC1101F45080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0e:11:5d:59:bc:11:01:f4:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=119f113f-05d5-4c4d-ac92-d75f6ddccfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:0f:43:12:9e:cf:c7:d7:e9:3f:a9:c6:cc: 1a:e8:01:fd:80:0f:10:dd:b7:64:a6:96:28:f8:54: 04:11:df:69:eb:de:84:21:e2:bb:1a:7d:05:11:65: b5:f2:c5:bb:b5:ee:68:0a:45:e1:dd:f1:e5:83:90: 6a:31:e7:19:80:7d:db:d2:db:2c:dc:45:85:ec:c8: 7f:83:68:f0:b7:70:5a:05:f7:5d:85:e9:1f:6a:b1: 03:1d:f4:1a:c5:f6:94:7d:02:3c:6c:ca:3f:67:8a: e8:05:95:47:26:75:dd:14:4c:e3:52:a5:40:68:75: d8:aa:be:47:bc:a5:cb:49:f6:81:9c:10:3b:b8:28: 5c:15:f4:19:ba:e3:f9:30:ce:95:76:39:01:7e:6c: 05:15:b0:f2:5d:af:2a:05:62:a7:fd:89:c8:bd:b5: f9:70:5b:89:b0:a2:04:15:3f:08:1b:c4:36:c9:f2: 73:2a:be:02:59:b4:8d:98:f7:86:30:da:00:e5:82: 80:f3:9a:76:c2:87:1e:8a:ba:d0:3e:1e:49:52:f9: 37:9c:5b:4e:15:27:5f:04:4e:0d:b3:3a:a3:b6:68: 84:70:1e:05:ac:09:17:33:95:72:7f:87:fa:0a:3d: 60:99:80:f6:cd:6d:8a:6c:c4:af:92:c3:18:1b:f3: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CC:7D:3F:F0:D7:9E:B6:6B:53:CF:13:49:9D:0E:04:20:FF:2B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7f:39:56:1c:c0:89:1a:3d:88:3a:71:1c:5f:1e:5f:ab:69: ba:8d:fa:40:31:1f:ea:18:35:1c:cf:de:f3:83:1d:5a:85:94: 69:73:48:1f:aa:e2:fe:ec:ff:c4:4d:b7:c3:6a:4f:84:b7:c9: 8f:1a:4f:4c:4c:08:e1:9a:55:50:ac:12:2c:68:6d:1b:0b:50: d6:52:4b:81:71:f6:a6:08:9e:06:29:87:cc:35:0c:df:fa:d2: b9:98:2f:48:c9:fb:65:d2:d3:77:d8:ee:7f:1b:7e:fb:a5:15: 72:ce:67:31:da:b5:43:75:ea:ee:29:e9:d0:bb:96:d0:59:4d: 0d:9a:ae:b5:30:1b:99:e8:da:75:95:c6:3a:7f:3c:cf:80:92: 20:74:38:48:1f:0d:a1:96:f4:44:98:63:35:fc:7e:f5:5a:13: 3a:ae:31:f9:11:5e:31:cf:4b:74:47:02:2f:b0:d5:93:1a:dd: d1:fa:4f:fb:bd:cb:8e:a2:ce:23:0d:d3:76:88:01:60:9f:20: f8:f6:99:e7:62:90:0f:16:7c:a7:0c:5b:50:74:e1:b5:06:32: d6:07:06:42:6d:9c:da:3f:05:37:7c:ef:9e:95:e2:a5:30:e7: 47:b3:ad:64:c3:e7:a2:e8:22:bc:c9:09:dc:9e:b1:e4:93:f3: 3c:be:22:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ4RXVm8EQH0UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTE5ZjExM2YtMDVkNS00YzRkLWFjOTItZDc1ZjZkZGNjZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47MPQxKez8fX6T+pxswa6AH9gA8Q3bdkppYo +FQEEd9p696EIeK7Gn0FEWW18sW7te5oCkXh3fHlg5BqMecZgH3b0tss3EWF7Mh/ g2jwt3BaBfddhekfarEDHfQaxfaUfQI8bMo/Z4roBZVHJnXdFEzjUqVAaHXYqr5H vKXLSfaBnBA7uChcFfQZuuP5MM6VdjkBfmwFFbDyXa8qBWKn/YnIvbX5cFuJsKIE FT8IG8Q2yfJzKr4CWbSNmPeGMNoA5YKA85p2woceirrQPh5JUvk3nFtOFSdfBE4N szqjtmiEcB4FrAkXM5Vyf4f6Cj1gmYD2zW2KbMSvksMYG/N3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3MfT/w1562a1PPE0mdDgQg/yskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWJiZTY5ZWMtOTY4Ni0z MzdkLWE2MDktZTVjYjk1MWRjNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt/OVYcwIkaPYg6cRxfHl+rabqN+kAxH+oYNRzP3vODHVqFlGlzSB+q 4v7s/8RNt8NqT4S3yY8aT0xMCOGaVVCsEixobRsLUNZSS4Fx9qYIngYph8w1DN/6 0rmYL0jJ+2XS03fY7n8bfvulFXLOZzHatUN16u4p6dC7ltBZTQ2arrUwG5no2nWV xjp/PM+AkiB0OEgfDaGW9ESYYzX8fvVaEzquMfkRXjHPS3RHAi+w1ZMa3dH6T/u9 y46iziMN03aIAWCfIPj2medikA8WfKcMW1B04bUGMtYHBkJtnNo/BTd8756V4qUw 50ezrWTD56LoIrzJCdyeseST8zy+Ijo= -----END CERTIFICATE-----Generated at Tue Jun 17 04:02:15 2025 by rpki-client