$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa File: 4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa (raw, json) Hash identifier: dGBgGSRBn3VxoYMrCtLdkYBRTfoKpMZ7pwuARl+7+Kk= Subject key identifier: 03:9F:15:30:1A:14:BD:EA:03:7E:7B:22:23:B6:2D:B1:7B:D7:BA:04 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE10056B06C18B5735F43540 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:05:6b:06:c1:8b:57:35:f4:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=ad1ad4d9-9442-40d7-9bfb-03d66d63eb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:1a:ce:8c:fd:98:b7:11:f3:b6:ef:ae:ac: 02:02:3f:35:57:93:03:34:78:71:a3:71:a1:65:cd: 6a:04:80:ba:c5:0d:b1:73:67:08:64:e8:98:e6:ec: 5d:1b:91:22:1e:e6:08:73:e7:6e:05:b8:10:85:fd: 1b:b8:09:94:00:d2:62:06:5f:37:89:10:61:41:99: 1c:99:b9:5f:a8:f0:f2:e0:e1:84:0d:c0:3d:39:cd: 6f:90:f7:b2:96:b8:ea:5a:22:ba:29:3f:67:88:1c: 96:15:b0:f0:89:ad:9f:11:c6:e5:0c:48:dd:ab:74: fc:90:25:3b:b8:a4:39:8d:3b:12:78:08:83:f1:bf: 80:04:13:ba:cc:13:99:0b:52:56:4c:93:e6:0f:c2: a6:31:a8:b5:d6:32:6b:6b:71:3d:9d:1b:82:26:25: 3c:c0:6d:30:02:3d:ef:7e:77:2b:8b:46:35:79:72: a1:cb:2f:1a:cd:d8:55:3a:5e:a4:43:c6:0d:96:21: 98:95:76:d9:0a:f5:79:65:b0:43:a8:22:eb:dd:86: 0a:c9:cb:ee:2c:bd:e5:52:99:06:51:60:ec:74:79: b1:64:67:29:f9:1b:35:74:97:90:cb:0c:40:0a:95: 14:82:27:e6:7b:16:32:f1:50:48:8f:a1:be:31:ff: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9F:15:30:1A:14:BD:EA:03:7E:7B:22:23:B6:2D:B1:7B:D7:BA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0f:a9:9c:c8:1d:37:76:d7:c6:98:13:cb:00:9e:90:93:b8: f2:d4:85:c3:c7:a4:cb:61:64:6d:aa:b0:50:b2:8a:99:7a:00: e1:eb:a7:f9:69:e0:45:8a:24:f6:f8:46:99:fa:c9:e4:6b:d3: 33:9b:82:7d:5b:a2:cf:b1:7f:38:97:5b:4a:32:3e:1a:b8:20: ab:8b:ca:c6:b0:c9:f5:4a:ea:31:9f:11:48:cb:dd:c9:76:7c: 0d:79:6a:0e:5c:42:57:f8:ac:2b:d3:35:b3:c7:e1:74:b7:38: 92:f0:80:12:cd:46:ae:8a:78:26:87:2e:5a:e2:4a:64:e6:5c: 3a:9c:b8:46:be:51:55:d4:90:5e:8f:93:95:b9:8d:59:0c:00: 19:17:44:bf:29:46:12:ec:50:c8:9c:4f:b8:a7:69:48:cf:84: e1:dd:23:ea:63:f7:f6:8d:c1:23:f0:21:de:4a:98:2d:0c:e3: d0:43:e1:a1:93:0c:97:6d:d9:1a:2e:50:5c:0b:43:96:79:74: 32:35:d1:f1:f3:6a:18:be:58:27:41:1e:80:18:d5:08:86:33: fb:7c:ff:82:dc:6f:ae:a4:bd:0a:f2:26:50:6d:61:d6:e0:b9: ed:aa:b3:f4:22:25:3c:1f:92:a1:b0:f0:99:fc:fa:c8:09:1f: 78:59:01:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAVrBsGLVzX0NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWQxYWQ0ZDktOTQ0Mi00MGQ3LTliZmItMDNkNjZkNjNlYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdAazoz9mLcR87bvrqwCAj81V5MDNHhxo3Gh Zc1qBIC6xQ2xc2cIZOiY5uxdG5EiHuYIc+duBbgQhf0buAmUANJiBl83iRBhQZkc mblfqPDy4OGEDcA9Oc1vkPeylrjqWiK6KT9niByWFbDwia2fEcblDEjdq3T8kCU7 uKQ5jTsSeAiD8b+ABBO6zBOZC1JWTJPmD8KmMai11jJra3E9nRuCJiU8wG0wAj3v fncri0Y1eXKhyy8azdhVOl6kQ8YNliGYlXbZCvV5ZbBDqCLr3YYKycvuLL3lUpkG UWDsdHmxZGcp+Rs1dJeQywxACpUUgifmexYy8VBIj6G+Mf+NZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOfFTAaFL3qA357IiO2LbF717oEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNGE2MGFiNDktNDFjOC0z MTUyLThmM2QtZjYxZWFjZmMzMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQPqZzIHTd218aYE8sAnpCTuPLUhcPHpMthZG2qsFCyipl6AOHrp/lp 4EWKJPb4Rpn6yeRr0zObgn1bos+xfziXW0oyPhq4IKuLysawyfVK6jGfEUjL3cl2 fA15ag5cQlf4rCvTNbPH4XS3OJLwgBLNRq6KeCaHLlriSmTmXDqcuEa+UVXUkF6P k5W5jVkMABkXRL8pRhLsUMicT7inaUjPhOHdI+pj9/aNwSPwId5KmC0M49BD4aGT DJdt2RouUFwLQ5Z5dDI10fHzahi+WCdBHoAY1QiGM/t8/4Lcb66kvQryJlBtYdbg ue2qs/QiJTwfkqGw8Jn8+sgJH3hZAY0= -----END CERTIFICATE-----Generated at Mon Jun 16 05:38:55 2025 by rpki-client