$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json) Hash identifier: 2gn30LcZKgrUO5bYkyxGOqDwsKIip5szQnAP5a0lB6k= Subject key identifier: 0B:38:D4:15:D6:68:66:C5:FC:91:38:9F:08:E0:EC:95:45:10:64:9B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE100579A43B7D276781C2E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:05:79:a4:3b:7d:27:67:81:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=514b5799-6d86-4588-8281-d726073446cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:0e:be:57:df:a1:66:a4:b4:dc:7f:13:81: fd:7b:37:38:b2:b1:e1:eb:30:b0:75:f8:34:51:4c: 5e:0f:05:b8:dc:89:3a:e6:b0:3a:0a:8f:77:c0:42: 7e:d0:39:99:ec:0a:e8:fe:13:2d:7b:52:77:c8:85: 02:c3:61:50:ea:b8:24:47:fa:73:97:69:aa:6c:a4: fc:7e:d0:ea:9b:06:13:18:eb:cd:6f:dc:b1:63:9c: 02:71:47:d7:49:e9:32:d9:ce:95:24:8e:b9:bb:18: 5b:c4:7c:76:d7:dc:61:3f:5c:c4:a7:61:e0:aa:f7: 9b:2a:c9:34:67:69:54:e9:eb:47:af:e1:1e:62:8c: f1:dc:cc:f0:4f:3b:ba:9d:64:8c:9a:a8:1f:27:48: fd:eb:91:d7:83:7b:fc:c4:29:4e:54:c1:ce:09:20: ac:e1:6c:61:25:0c:5c:f8:75:de:ec:db:c2:41:6c: a3:d2:36:ca:7e:a7:5f:0e:15:05:3d:cf:e7:ab:9b: c8:24:20:fe:0d:68:1b:9f:92:3e:62:fe:fd:dc:3a: f9:43:89:57:db:02:6c:4e:16:65:a6:cc:f1:ea:79: 0d:96:43:eb:f8:16:83:f9:5b:c0:d0:4c:33:bc:80: ea:dc:8d:b4:d2:2a:84:0a:dd:08:b9:fe:f2:ae:ec: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:D4:15:D6:68:66:C5:FC:91:38:9F:08:E0:EC:95:45:10:64:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d9:fc:52:7a:ab:7e:43:32:9c:e0:0c:3d:20:50:2b:76:5d: b1:38:0f:21:41:f0:4f:12:ea:5a:50:bc:bd:ce:2b:04:e8:ec: 06:01:d6:da:1a:c8:68:45:a3:41:8c:12:22:18:a7:2c:6c:10: 85:6c:97:55:23:12:73:31:90:79:1a:ee:c5:f5:87:c7:d8:6d: 56:29:db:b8:bc:c8:04:5e:69:04:d8:02:50:10:dc:a8:24:a0: 0a:4c:4a:92:72:4a:5c:eb:3e:d9:ec:25:ed:1e:bd:e4:f5:a3: 3a:87:2c:65:a8:49:28:e6:6e:9f:bf:4e:5d:7e:8e:fd:5c:7c: 4a:e2:df:fd:fe:a1:b3:81:5b:c4:ef:ff:db:7c:57:c3:5a:03: d8:1c:18:fd:3f:96:ab:ad:13:fa:02:31:d7:24:9e:81:52:76: f8:d2:0f:49:46:cd:1b:2f:e4:83:0a:2b:ac:a4:90:a7:b2:1f: e5:de:b0:7f:91:23:f9:0b:54:93:82:d6:8e:d2:0f:55:fa:7d: da:48:fe:25:c4:c9:40:b1:a5:29:fe:08:04:a6:9f:33:c7:ab: 71:91:66:5b:dd:ee:99:74:50:fe:83:16:74:9f:0f:1b:62:d1: 60:27:d1:9f:1a:6a:24:b9:23:32:a4:ec:b4:79:99:86:49:ec: 8d:1a:75:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAV5pDt9J2eBwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NTE0YjU3OTktNmQ4Ni00NTg4LTgyODEtZDcyNjA3MzQ0NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaAOvlffoWaktNx/E4H9ezc4srHh6zCwdfg0 UUxeDwW43Ik65rA6Co93wEJ+0DmZ7Aro/hMte1J3yIUCw2FQ6rgkR/pzl2mqbKT8 ftDqmwYTGOvNb9yxY5wCcUfXSeky2c6VJI65uxhbxHx219xhP1zEp2HgqvebKsk0 Z2lU6etHr+EeYozx3MzwTzu6nWSMmqgfJ0j965HXg3v8xClOVMHOCSCs4WxhJQxc +HXe7NvCQWyj0jbKfqdfDhUFPc/nq5vIJCD+DWgbn5I+Yv793Dr5Q4lX2wJsThZl pszx6nkNlkPr+BaD+VvA0EwzvIDq3I200iqECt0Iuf7yruw/1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs41BXWaGbF/JE4nwjg7JVFEGSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjQ5Yzk0M2QtYjg5YS0z YWNlLWI3MDMtZDI0ZWVkOGEwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPZ/FJ6q35DMpzgDD0gUCt2XbE4DyFB8E8S6lpQvL3OKwTo7AYB1toa yGhFo0GMEiIYpyxsEIVsl1UjEnMxkHka7sX1h8fYbVYp27i8yAReaQTYAlAQ3Kgk oApMSpJySlzrPtnsJe0eveT1ozqHLGWoSSjmbp+/Tl1+jv1cfEri3/3+obOBW8Tv /9t8V8NaA9gcGP0/lqutE/oCMdcknoFSdvjSD0lGzRsv5IMKK6ykkKeyH+XesH+R I/kLVJOC1o7SD1X6fdpI/iXEyUCxpSn+CASmnzPHq3GRZlvd7pl0UP6DFnSfDxti 0WAn0Z8aaiS5IzKk7LR5mYZJ7I0addY= -----END CERTIFICATE-----Generated at Mon Jun 16 16:28:14 2025 by rpki-client