$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: oLkltDgv3KnCpoXZEASJILFtum0eSYLvIWCX+YcYKBw= Subject key identifier: 99:F4:56:19:8F:83:EA:50:D3:BC:88:42:C3:82:FD:25:F0:CF:D8:32 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515A8CC2D9A53C3099A80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:a8:cc:2d:9a:53:c3:09:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=564c01f5-e7cf-406e-bebc-abf1a216ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:e9:16:c9:5f:8c:2c:c1:83:36:b3:b4:55: a1:59:b1:96:a0:4d:fa:40:07:80:a7:5e:1f:e0:30: 3f:9d:6b:fa:d7:70:d2:e6:23:83:41:23:99:3a:cc: da:39:c8:00:a1:3a:8d:8c:65:b3:26:87:02:40:19: 93:29:66:09:4e:f6:36:ed:a2:31:d9:52:12:b5:4c: da:35:4e:41:32:12:6c:62:aa:47:c3:6c:95:00:01: f5:15:d7:c9:d0:db:81:9e:b0:45:d1:86:64:bf:c0: fc:89:fa:08:67:87:3c:2a:7f:3f:30:94:17:7f:c8: 45:67:13:22:a5:18:46:61:2b:36:67:54:ea:6b:14: e6:93:2c:b1:71:11:20:c9:f4:cb:6d:16:d5:f3:7b: da:b2:44:08:78:2c:84:2d:c3:a8:ca:d5:71:db:b5: b1:cc:e9:af:d3:23:b0:39:d7:f8:2b:f5:49:68:e7: 2c:84:cf:1e:8c:db:de:a5:a4:98:3f:45:21:63:ef: 5e:f8:54:ee:01:4a:43:e1:21:44:3f:8e:bb:89:b1: 44:5c:ae:52:bb:55:84:c5:99:65:55:50:2d:96:3c: 6a:3a:7e:fc:d6:18:16:f2:8a:2d:d1:75:2f:d3:7e: 03:2c:c0:a5:38:21:38:db:c2:a6:01:55:d8:15:4b: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:56:19:8F:83:EA:50:D3:BC:88:42:C3:82:FD:25:F0:CF:D8:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0c:9a:86:73:cb:3c:c6:8f:b7:b7:24:37:c1:4b:21:b2:17: e7:d5:4b:62:a3:4a:c9:1b:15:61:59:ae:8e:a7:21:38:59:29: 8f:40:de:7c:8f:b1:9a:37:12:8e:e5:95:e6:60:4a:61:1a:19: fb:62:98:26:03:5b:b4:7d:18:08:ab:d4:af:38:63:7b:c4:98: 59:a2:1c:b7:bb:d2:b9:0b:26:d4:c5:58:c9:97:c2:bb:21:64: d0:04:2e:50:ff:d7:30:67:03:d2:a8:c4:6e:40:f1:7c:3e:95: 1a:47:7e:ae:79:08:70:5c:46:01:25:30:1b:b8:21:93:f5:8e: 6b:53:03:8e:9f:8b:03:5f:89:22:d2:a8:a7:a5:0a:6b:9c:fa: 07:45:fc:15:43:36:5d:dc:eb:0f:74:c0:17:21:0b:35:41:ee: 37:ac:82:95:e2:81:1d:c6:5d:18:d9:fd:22:37:ae:2f:ee:89: 24:7f:07:c2:d5:5e:9f:b7:ab:bc:a8:57:b0:c2:2a:bb:22:27: 34:54:bc:92:e9:ff:24:f2:5c:41:4c:e7:93:ec:53:cd:bd:0f: 25:35:d9:db:8f:2c:c3:05:34:a4:ea:e1:86:e8:30:a8:7f:1d: 83:a0:54:00:41:ca:18:d6:d4:0c:f0:89:84:08:4f:53:9f:f3: db:f1:78:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRWozC2aU8MJmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NTY0YzAxZjUtZTdjZi00MDZlLWJlYmMtYWJmMWEyMTZmZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvznpFslfjCzBgzaztFWhWbGWoE36QAeAp14f 4DA/nWv613DS5iODQSOZOszaOcgAoTqNjGWzJocCQBmTKWYJTvY27aIx2VIStUza NU5BMhJsYqpHw2yVAAH1FdfJ0NuBnrBF0YZkv8D8ifoIZ4c8Kn8/MJQXf8hFZxMi pRhGYSs2Z1TqaxTmkyyxcREgyfTLbRbV83vaskQIeCyELcOoytVx27WxzOmv0yOw Odf4K/VJaOcshM8ejNvepaSYP0UhY+9e+FTuAUpD4SFEP467ibFEXK5Su1WExZll VVAtljxqOn781hgW8oot0XUv034DLMClOCE428KmAVXYFUt8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn0VhmPg+pQ07yIQsOC/SXwz9gyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEMmoZzyzzGj7e3JDfBSyGyF+fVS2KjSskbFWFZro6nIThZKY9A3nyP sZo3Eo7lleZgSmEaGftimCYDW7R9GAir1K84Y3vEmFmiHLe70rkLJtTFWMmXwrsh ZNAELlD/1zBnA9KoxG5A8Xw+lRpHfq55CHBcRgElMBu4IZP1jmtTA46fiwNfiSLS qKelCmuc+gdF/BVDNl3c6w90wBchCzVB7jesgpXigR3GXRjZ/SI3ri/uiSR/B8LV Xp+3q7yoV7DCKrsiJzRUvJLp/yTyXEFM55PsU829DyU12duPLMMFNKTq4YboMKh/ HYOgVABByhjW1AzwiYQIT1Of89vxeNs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:32 2025 by rpki-client