$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa File: 360e10fa-f988-3a0a-9f89-c316d0bc3547.roa (raw, json) Hash identifier: Ka1QaZbJr71dD0ZLXOXB59tVZZ6ioesSkMmkhq4PX3E= Subject key identifier: D4:00:BC:3D:7D:1C:18:47:B1:3B:2B:25:4C:02:22:D1:C4:1F:D4:37 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1005E35CA422592C84BDC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:05:e3:5c:a4:22:59:2c:84:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=355de8f5-4690-4d06-a775-42b18b195eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:75:9c:7f:d0:35:a2:5a:d6:ef:d9:72:34: 80:51:fc:c8:34:31:26:49:f4:21:05:fe:2a:7e:d7: 81:7f:0f:b1:14:1d:d8:77:bc:c4:19:af:28:ca:85: f6:db:2b:d5:fd:c8:dc:eb:b0:9a:a2:4c:1b:18:76: f0:b7:5c:64:6d:24:3e:50:85:d2:3b:0a:60:57:11: aa:5b:0e:fa:8c:26:d5:c8:62:62:5e:73:9d:c6:82: 60:20:c1:37:61:43:3f:0a:68:03:e6:63:8d:95:07: b3:01:57:68:e1:18:11:04:28:3e:dc:c4:3a:70:ad: 22:2c:82:17:e5:43:85:fc:20:b5:dc:16:45:2c:ce: 62:8e:a3:9e:cf:37:d0:cd:be:2d:a9:3b:5f:90:72: f7:4d:16:7b:80:fd:3f:99:e0:59:9e:a5:8b:67:66: 51:db:ec:d6:27:78:9f:85:0a:ac:b4:e8:8e:da:ea: b4:85:fb:de:88:e7:8b:91:5c:13:0d:0a:47:b1:0c: c3:31:b0:78:92:43:20:1d:f8:fc:f1:45:1d:f0:db: 5c:81:86:86:43:d5:d5:98:75:19:11:13:bf:c8:26: 88:a7:d1:66:ce:3e:62:ea:29:05:e7:7e:f6:80:d9: 79:d2:ff:87:99:92:53:a8:14:97:2e:cb:47:2b:6c: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:BC:3D:7D:1C:18:47:B1:3B:2B:25:4C:02:22:D1:C4:1F:D4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360e10fa-f988-3a0a-9f89-c316d0bc3547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2b:04:71:dd:f6:b8:6a:76:40:58:93:98:c9:0b:7f:b7:a2: 3b:9b:69:00:b0:88:73:70:fe:ec:3c:89:fb:42:d0:69:78:bd: c5:11:2a:07:e7:fa:4e:25:8b:60:9c:3e:85:3a:4d:d0:57:90: 27:59:2d:bc:74:c1:91:9f:8b:61:51:5b:e9:07:84:7d:a7:a4: c5:4d:f5:88:13:cd:ef:d3:d7:b7:b6:ba:25:9e:fd:35:29:f2: a0:53:8f:87:62:04:32:63:fd:83:74:04:fe:55:e7:57:c9:8d: ea:f1:86:53:e3:96:78:76:1c:e9:71:17:03:e4:32:b6:1c:84: df:5a:4c:dc:29:94:c3:cd:3c:f6:ab:e5:49:de:8b:aa:31:14: eb:02:2d:ed:cc:00:f3:f6:57:0f:06:ef:bd:a7:17:94:09:1d: de:41:db:db:cc:97:10:6f:2c:70:e8:8d:55:0e:fa:bd:b9:50: f5:1c:7b:1e:b7:5b:6e:ff:03:f2:1d:2e:01:08:f0:f8:51:40: fa:6c:ad:88:f4:79:10:2c:2e:25:3b:60:8c:8b:d1:a7:a5:42: ba:ea:17:02:aa:d7:9f:8c:b2:af:40:c9:09:1f:6a:0f:5a:93: c0:9e:ba:f8:a0:e1:75:d2:64:ca:cf:ed:9e:db:0e:23:e6:5f: d2:87:b7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAXjXKQiWSyEvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzU1ZGU4ZjUtNDY5MC00ZDA2LWE3NzUtNDJiMThiMTk1ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2l1nH/QNaJa1u/ZcjSAUfzINDEmSfQhBf4q fteBfw+xFB3Yd7zEGa8oyoX22yvV/cjc67CaokwbGHbwt1xkbSQ+UIXSOwpgVxGq Ww76jCbVyGJiXnOdxoJgIME3YUM/CmgD5mONlQezAVdo4RgRBCg+3MQ6cK0iLIIX 5UOF/CC13BZFLM5ijqOezzfQzb4tqTtfkHL3TRZ7gP0/meBZnqWLZ2ZR2+zWJ3if hQqstOiO2uq0hfveiOeLkVwTDQpHsQzDMbB4kkMgHfj88UUd8NtcgYaGQ9XVmHUZ ERO/yCaIp9Fmzj5i6ikF5372gNl50v+HmZJTqBSXLstHK2wwzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQAvD19HBhHsTsrJUwCItHEH9Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMzYwZTEwZmEtZjk4OC0z YTBhLTlmODktYzMxNmQwYmMzNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0rBHHd9rhqdkBYk5jJC3+3ojubaQCwiHNw/uw8iftC0Gl4vcURKgfn +k4li2CcPoU6TdBXkCdZLbx0wZGfi2FRW+kHhH2npMVN9YgTze/T17e2uiWe/TUp 8qBTj4diBDJj/YN0BP5V51fJjerxhlPjlnh2HOlxFwPkMrYchN9aTNwplMPNPPar 5Unei6oxFOsCLe3MAPP2Vw8G772nF5QJHd5B29vMlxBvLHDojVUO+r25UPUcex63 W27/A/IdLgEI8PhRQPpsrYj0eRAsLiU7YIyL0aelQrrqFwKq15+Msq9AyQkfag9a k8Ceuvig4XXSZMrP7Z7bDiPmX9KHtwY= -----END CERTIFICATE-----Generated at Mon Jun 16 17:07:38 2025 by rpki-client