$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: aPov5QGrAjZCCQbtYJEp35RL1hImcs14cspX1YM9TVU= Subject key identifier: 25:99:0F:B6:7C:98:14:FC:FA:7D:F1:46:7E:A2:F9:E3:A3:58:86:4C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C71C903B12D013D983B00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:71:c9:03:b1:2d:01:3d:98:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=57f947c3-70ff-4192-a8da-735ec42c0beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:fc:68:a1:00:3f:36:ef:6d:43:3c:bd:6e: 00:ee:ba:8b:d7:57:55:9b:f2:f5:38:96:f3:30:a3: 97:74:df:1f:5b:51:c0:fb:9b:21:3b:67:7e:98:6b: ba:61:75:4d:d5:df:f6:11:20:b9:4c:3a:bd:a3:df: eb:0a:ad:d0:12:0c:e6:55:6b:fc:74:1d:24:ea:c2: ea:c3:9e:45:aa:87:34:89:de:2b:8a:cb:1d:d3:ca: d1:35:f7:10:5a:11:fd:1c:70:e4:dd:10:8d:17:2c: ad:c9:63:cb:c3:b9:ed:39:51:93:45:1b:a3:ac:b7: 5c:54:e6:a3:1e:24:28:5e:e6:65:06:2c:05:7d:8d: 0f:54:e4:9b:b9:44:ea:ce:f7:33:fa:be:50:f7:c2: ca:af:bf:e4:90:d1:a1:39:0a:55:f0:c9:51:8c:a6: 0d:b4:3c:40:73:a4:1f:ac:aa:05:6c:35:83:d7:c2: a4:66:25:d9:98:3b:05:fa:40:00:58:7b:6f:d3:d2: e1:77:4a:d3:06:cd:98:cf:7f:e6:b7:37:06:ce:c6: b5:f3:dc:0d:61:2b:68:af:74:2d:c2:1b:a6:21:18: c9:ac:24:4b:b5:97:0b:45:36:6f:14:fd:db:a9:3c: af:5a:1e:86:ef:39:86:de:d3:c5:8d:07:fb:3e:af: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:99:0F:B6:7C:98:14:FC:FA:7D:F1:46:7E:A2:F9:E3:A3:58:86:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:20:8c:53:19:de:4f:fc:c4:7d:2d:1f:d9:85:2a:28:5d:35: 35:4d:05:81:5f:c1:16:77:09:98:4b:27:f1:da:e1:ec:94:c8: 54:b9:76:70:b8:d3:cc:d8:1a:14:9b:c0:74:ab:f4:a2:67:cd: 84:40:84:f5:6c:70:46:cc:da:9b:55:fe:c7:79:9d:65:b8:03: 95:28:c9:16:34:35:81:21:25:6d:93:61:a7:ab:54:75:66:9a: d0:68:eb:bd:86:bf:fe:c2:cb:c7:b9:ea:fa:38:bd:aa:06:b9: aa:da:93:e9:d4:19:e4:ec:a1:17:a3:35:a3:24:4f:6e:3b:98: 07:6c:58:59:ed:f2:f1:1a:cc:4d:3a:b8:8b:63:e6:0b:eb:9b: 66:62:03:5f:41:42:df:c4:57:96:2a:6a:f6:90:41:f0:6b:a4: 1e:87:ca:c8:b0:8d:f4:08:50:c3:f4:72:2f:e7:b4:1a:72:30: 53:7c:8f:ad:ca:c4:26:60:88:8f:4b:69:6e:87:e2:ae:d6:37: b4:cd:0d:8f:fe:a3:96:24:c8:a5:16:df:7d:ed:59:db:4e:af: 24:67:70:09:b9:2a:ff:c7:e5:55:e9:be:af:06:0c:3b:60:b3: 1f:bd:91:08:b5:44:42:f3:cb:d1:4a:a9:12:6a:8a:4b:8e:43: f1:90:f1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHHJA7EtAT2YOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NTdmOTQ3YzMtNzBmZi00MTkyLWE4ZGEtNzM1ZWM0MmMwYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKD8aKEAPzbvbUM8vW4A7rqL11dVm/L1OJbz MKOXdN8fW1HA+5shO2d+mGu6YXVN1d/2ESC5TDq9o9/rCq3QEgzmVWv8dB0k6sLq w55Fqoc0id4rissd08rRNfcQWhH9HHDk3RCNFyytyWPLw7ntOVGTRRujrLdcVOaj HiQoXuZlBiwFfY0PVOSbuUTqzvcz+r5Q98LKr7/kkNGhOQpV8MlRjKYNtDxAc6Qf rKoFbDWD18KkZiXZmDsF+kAAWHtv09Lhd0rTBs2Yz3/mtzcGzsa189wNYStor3Qt whumIRjJrCRLtZcLRTZvFP3bqTyvWh6G7zmG3tPFjQf7Pq97SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWZD7Z8mBT8+n3xRn6i+eOjWIZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAgjFMZ3k/8xH0tH9mFKihdNTVNBYFfwRZ3CZhLJ/Ha4eyUyFS5dnC4 08zYGhSbwHSr9KJnzYRAhPVscEbM2ptV/sd5nWW4A5UoyRY0NYEhJW2TYaerVHVm mtBo672Gv/7Cy8e56vo4vaoGuarak+nUGeTsoRejNaMkT247mAdsWFnt8vEazE06 uItj5gvrm2ZiA19BQt/EV5YqavaQQfBrpB6HysiwjfQIUMP0ci/ntBpyMFN8j63K xCZgiI9LaW6H4q7WN7TNDY/+o5YkyKUW333tWdtOryRncAm5Kv/H5VXpvq8GDDtg sx+9kQi1RELzy9FKqRJqikuOQ/GQ8Rs= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:36 2025 by rpki-client