$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa File: 50124269-513e-3754-85b0-ec7e4cf8e5c6.roa (raw, json) Hash identifier: 1wHYzjl6+FYdnUvOlqENeJ1r6+or8PVkZqCaloSKOJU= Subject key identifier: DC:64:8E:61:90:3D:D9:A8:10:93:75:A3:85:CF:FB:F6:64:8A:C1:C9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EC94479DE25E9A8A5500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 199.91.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ec:94:47:9d:e2:5e:9a:8a:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=eb705d37-6968-4bc2-ba41-20eeb3700766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:f7:4c:d9:8b:92:91:44:55:49:32:8a:b5: 96:2d:50:63:03:11:95:dd:cd:2d:58:ae:ec:3b:81: ff:67:91:bc:d8:c4:ef:f3:c0:60:22:1a:88:0d:64: 91:a7:90:05:a5:c7:77:66:6a:73:95:0d:ed:60:4d: f8:ea:d3:56:f6:87:a9:e5:66:5c:cc:fb:dd:3d:7a: 4b:58:19:47:d3:86:e7:73:27:90:6a:8e:ce:97:d4: 41:06:57:8d:bc:c7:f9:f3:37:d5:e8:d6:8a:2c:ed: 1b:15:cc:19:98:bd:5f:e2:12:16:d0:f2:1f:19:c4: 06:4d:83:d5:fc:4b:fd:a2:a1:55:58:05:56:3f:d9: 40:65:0b:0c:e2:59:6d:94:90:4e:50:1f:f5:4e:0a: b1:ec:49:0a:63:6f:f9:ff:e7:c1:a8:9d:b0:75:5a: 2e:09:ab:0f:91:ce:e2:a2:b5:0d:e0:50:b1:03:5e: dd:48:8c:e2:3c:13:f1:78:d4:ca:86:6f:84:cf:6c: 1a:be:88:95:99:e2:bb:42:59:ba:95:85:94:98:f2: 18:ed:5f:a3:d0:9e:49:21:d6:ca:80:f5:bb:80:40: 98:d4:d2:43:33:5f:a8:cd:28:88:c8:95:7e:1e:48: 84:cc:d1:a4:83:01:18:6f:1d:7c:a1:23:ad:fe:e6: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:64:8E:61:90:3D:D9:A8:10:93:75:A3:85:CF:FB:F6:64:8A:C1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f9:83:e4:7a:7f:de:01:8d:8c:5e:ee:b5:07:9e:42:10:6c: 85:48:1c:55:5c:52:95:b7:bb:20:c3:f2:95:ea:5f:b1:62:af: 96:96:f9:37:c1:6b:90:08:bc:eb:73:6e:70:b2:5d:6c:d3:b8: d6:45:fc:66:56:fc:c7:0b:52:17:37:8d:e1:33:4b:a2:08:42: a5:45:11:06:dd:ee:f9:fe:70:9a:32:11:86:c8:ce:c9:57:6a: f6:40:01:cc:43:67:6f:35:89:28:33:01:a0:82:75:ba:c8:00: 45:60:8b:c4:24:e0:bd:2a:6a:c3:10:66:30:ad:46:58:06:b6: ec:14:22:63:71:10:44:26:78:de:7e:13:1e:d0:e2:8d:14:4f: e6:3c:c6:fb:2b:77:c4:47:1d:5c:74:9f:b9:c6:d7:b9:d9:7e: 71:d2:f7:fe:6c:e2:76:c8:45:ad:01:23:ed:dd:e0:3d:c8:12: 1c:78:88:44:79:56:87:a0:5c:f4:73:61:61:2f:03:4e:7c:c1: a9:3c:48:0a:17:ba:d2:1c:de:a6:4d:88:6a:28:7b:9a:0b:19: a1:cd:67:5f:66:2e:a4:5a:7f:aa:62:db:f2:85:3b:69:c6:45: a5:2e:b5:f8:b9:6a:4f:f5:c8:bf:c7:9d:5a:cd:de:70:2a:71: 24:b7:0c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uyUR53iXpqKVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZWI3MDVkMzctNjk2OC00YmMyLWJhNDEtMjBlZWIzNzAwNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumr3TNmLkpFEVUkyirWWLVBjAxGV3c0tWK7s O4H/Z5G82MTv88BgIhqIDWSRp5AFpcd3ZmpzlQ3tYE346tNW9oep5WZczPvdPXpL WBlH04bncyeQao7Ol9RBBleNvMf58zfV6NaKLO0bFcwZmL1f4hIW0PIfGcQGTYPV /Ev9oqFVWAVWP9lAZQsM4lltlJBOUB/1Tgqx7EkKY2/5/+fBqJ2wdVouCasPkc7i orUN4FCxA17dSIziPBPxeNTKhm+Ez2wavoiVmeK7Qlm6lYWUmPIY7V+j0J5JIdbK gPW7gECY1NJDM1+ozSiIyJV+HkiEzNGkgwEYbx18oSOt/ubmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxkjmGQPdmoEJN1o4XP+/ZkisHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTAxMjQyNjktNTEzZS0z NzU0LTg1YjAtZWM3ZTRjZjhlNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz5g+R6f94BjYxe7rUHnkIQbIVIHFVcUpW3uyDD8pXqX7Fir5aW+TfB a5AIvOtzbnCyXWzTuNZF/GZW/McLUhc3jeEzS6IIQqVFEQbd7vn+cJoyEYbIzslX avZAAcxDZ281iSgzAaCCdbrIAEVgi8Qk4L0qasMQZjCtRlgGtuwUImNxEEQmeN5+ Ex7Q4o0UT+Y8xvsrd8RHHVx0n7nG17nZfnHS9/5s4nbIRa0BI+3d4D3IEhx4iER5 VoegXPRzYWEvA058wak8SAoXutIc3qZNiGooe5oLGaHNZ19mLqRaf6pi2/KFO2nG RaUutfi5ak/1yL/HnVrN3nAqcSS3DNA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:28 2025 by rpki-client