$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa File: 53da01e2-4fd1-3726-8525-261dfe0ace4c.roa (raw, json) Hash identifier: stxKhu20zDoAmj3ZjW+EaIEg/UyhqBKyeTSpJmWr3LY= Subject key identifier: 9D:3F:7B:FB:FE:BD:D4:93:96:47:BF:72:42:22:29:3C:11:AD:B8:27 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D1650E03CB5639AC71694FA0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0e:03:cb:56:39:ac:71:69:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=142bac4e-56a6-40be-aa6c-2f49f0530db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:6d:c0:29:03:ac:39:63:a3:64:5d:0f:7c: cc:7a:d5:2b:60:c5:b4:f9:c8:c0:55:43:55:a1:37: dc:a8:15:15:f6:54:dd:96:c6:a1:5a:fe:bc:49:a2: 0e:a3:ec:45:83:76:c6:07:88:cc:b7:92:d5:c4:5d: 0e:e8:c2:84:aa:7a:0e:7d:47:e4:75:02:64:37:51: 98:23:fc:97:b6:95:96:fe:48:2e:37:84:58:64:ac: d1:94:e9:e9:d3:fd:ed:48:0c:b4:f4:a0:5d:c7:c1: b9:ef:0f:03:0e:9a:4b:2b:d3:79:f9:33:b7:2d:76: 57:b7:6e:df:6d:71:f8:6f:f9:72:d2:6d:a3:0f:32: a6:cb:71:0e:cc:c1:e7:82:77:1f:d2:f0:c2:b0:ab: 46:14:32:42:06:df:01:cc:bf:b5:d1:e2:05:c2:eb: c7:bf:4b:29:e2:9e:b2:4b:ab:d1:3b:02:54:c7:22: 93:8b:45:5d:e9:a4:9d:6a:65:10:cf:9d:2b:fe:25: 3c:e4:e0:8a:92:55:e3:18:bc:e7:fa:26:13:6e:69: 66:8b:5b:29:e6:65:38:9a:56:c1:4f:73:04:66:d7: 45:1c:75:e3:45:04:4b:dc:e9:9b:04:32:cb:1f:43: 60:08:e2:1f:de:4a:87:6f:6f:f0:5f:48:a8:3d:aa: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:7B:FB:FE:BD:D4:93:96:47:BF:72:42:22:29:3C:11:AD:B8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:78:90:c2:06:39:b7:c3:37:73:8a:ec:00:5c:82:29:e3:d0: 43:72:fa:72:27:13:65:c4:e2:16:bd:27:0e:5c:38:e5:b9:42: 49:e2:5b:d9:ba:24:60:8d:26:92:12:6c:c8:94:8d:68:ad:4d: d9:5e:de:d3:03:79:f0:eb:45:63:3d:9d:37:b9:cb:15:1d:34: cb:56:c3:57:4a:be:08:46:38:91:a7:f4:b5:9f:a8:5e:96:b8: 04:98:bc:63:ac:f5:68:62:af:44:65:b2:e7:00:ac:8e:d7:9d: e3:9f:49:d5:1d:22:f9:38:07:cc:fe:f6:da:d7:bb:b4:50:7a: 0b:82:1a:94:10:0f:07:95:94:57:29:81:94:b0:2d:b9:e0:a2: c5:9f:36:b5:65:93:52:bd:53:6f:b6:f7:ee:e4:27:76:32:e4: 4d:6c:67:ca:2f:13:d0:fd:ee:fc:35:dd:1b:42:8b:bb:b5:d9: 84:fb:28:36:e3:45:13:83:a7:4d:fe:c2:3f:f6:07:6a:58:3e: d9:b5:a0:0e:54:31:31:10:93:93:b1:e0:bc:c6:c7:41:09:cd: 7d:eb:19:9b:f8:5e:30:c9:db:9c:96:2e:53:ff:b7:88:4c:8d: 0d:46:35:d2:8c:da:a1:32:0f:73:59:85:82:b1:8d:23:94:67: 67:35:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ4Dy1Y5rHFpT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTQyYmFjNGUtNTZhNi00MGJlLWFhNmMtMmY0OWYwNTMwZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNptwCkDrDljo2RdD3zMetUrYMW0+cjAVUNV oTfcqBUV9lTdlsahWv68SaIOo+xFg3bGB4jMt5LVxF0O6MKEqnoOfUfkdQJkN1GY I/yXtpWW/kguN4RYZKzRlOnp0/3tSAy09KBdx8G57w8DDppLK9N5+TO3LXZXt27f bXH4b/ly0m2jDzKmy3EOzMHngncf0vDCsKtGFDJCBt8BzL+10eIFwuvHv0sp4p6y S6vROwJUxyKTi0Vd6aSdamUQz50r/iU85OCKklXjGLzn+iYTbmlmi1sp5mU4mlbB T3MEZtdFHHXjRQRL3OmbBDLLH0NgCOIf3kqHb2/wX0ioPaonKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0/e/v+vdSTlke/ckIiKTwRrbgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTNkYTAxZTItNGZkMS0z NzI2LTg1MjUtMjYxZGZlMGFjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ4kMIGObfDN3OK7ABcginj0ENy+nInE2XE4ha9Jw5cOOW5QkniW9m6 JGCNJpISbMiUjWitTdle3tMDefDrRWM9nTe5yxUdNMtWw1dKvghGOJGn9LWfqF6W uASYvGOs9Whir0RlsucArI7XneOfSdUdIvk4B8z+9trXu7RQeguCGpQQDweVlFcp gZSwLbngosWfNrVlk1K9U2+29+7kJ3Yy5E1sZ8ovE9D97vw13RtCi7u12YT7KDbj RRODp03+wj/2B2pYPtm1oA5UMTEQk5Ox4LzGx0EJzX3rGZv4XjDJ25yWLlP/t4hM jQ1GNdKM2qEyD3NZhYKxjSOUZ2c1/KI= -----END CERTIFICATE-----Generated at Mon Jun 16 16:31:21 2025 by rpki-client