$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: yLTDtPrGDr4LKWVpGPCqXNSqN27wLXVC46d53Pdv5jc= Subject key identifier: 80:6D:9C:14:12:5B:AB:1C:73:C4:35:5C:40:38:00:AD:47:FD:87:18 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165162FC2A021EB3474E420 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:2f:c2:a0:21:eb:34:74:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=47347076-e5d8-45c3-abf3-6dfb1c355d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:65:11:af:2b:7f:1f:e5:d3:72:59:1f:5b: c7:f9:d6:a6:d6:cd:b7:40:97:da:bf:cf:bb:c3:38: b1:c0:0d:94:da:24:74:2f:1d:8d:87:50:03:8f:02: e7:3f:b4:dd:23:40:14:41:e9:1d:ed:c3:ff:7d:e5: 1c:a6:72:2f:37:f1:a8:7a:3c:f1:a0:49:b0:ba:b5: f8:ba:6f:ae:92:f3:e6:03:bb:0d:3a:74:57:4b:a0: ed:d9:8c:6c:68:50:6b:c0:5f:ee:bc:66:21:b5:ce: f4:59:57:42:04:f3:c4:0c:68:bb:ac:29:12:b3:ac: 09:da:f0:1f:b5:21:49:80:09:72:a8:0e:c3:b1:90: 0a:65:92:07:20:85:68:df:1d:f9:57:fd:3d:c4:14: 96:bc:40:b1:26:70:5e:72:e9:1b:23:78:17:aa:5c: 82:8e:47:45:91:13:35:5a:db:72:e2:fd:f2:91:8d: 07:57:c8:f4:96:f0:0f:05:bb:57:76:d3:9d:39:55: 30:8c:38:42:84:9b:e7:e8:32:d3:a7:af:1f:c6:3d: 38:94:ba:16:8b:9d:e1:0f:23:8c:0f:2f:ee:9c:df: a8:cd:c6:1a:5d:2b:b6:0b:13:56:95:b1:92:2c:0f: 4a:ca:ad:08:92:99:fb:aa:71:90:5f:a9:90:3b:0b: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6D:9C:14:12:5B:AB:1C:73:C4:35:5C:40:38:00:AD:47:FD:87:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f4:25:14:0e:73:0b:b4:b7:4b:df:44:1d:1d:1d:5a:06:98: 90:6a:6a:a6:aa:ee:6f:d1:22:79:e6:29:c6:0e:69:7a:4b:9e: 13:e4:8b:24:b3:88:76:b3:b5:4f:2a:d5:c8:84:49:71:ec:93: 02:0f:b6:b6:47:b6:32:cb:4c:c5:cc:2c:2a:a6:1d:2b:ae:6c: b8:fa:50:94:1b:1f:1d:ce:b0:21:d8:a0:3d:99:0c:9c:ab:de: ae:19:e0:84:a0:63:60:4a:52:a4:b6:41:2a:d2:c3:c2:83:87: b8:81:3e:c2:14:96:76:67:b1:03:df:dc:d6:97:8d:ca:d6:1d: 06:bd:2b:ba:cc:02:8d:3b:91:a4:91:d6:b2:dc:e8:6d:d3:92: 74:35:09:37:87:24:41:2f:23:e1:45:d3:51:6c:fd:dc:4c:d4: 68:75:b9:6f:f7:fa:8f:9a:85:7d:93:99:b7:e5:c8:08:8a:58: d8:0e:83:17:82:b1:a2:ae:46:86:8b:72:4f:c2:f0:33:b9:a7: 91:2f:40:1d:e9:9c:49:1b:3f:2b:4f:88:f0:15:ee:81:5f:a6: ec:29:d0:12:5e:38:61:82:a2:e2:a3:b5:6c:c2:17:2d:f9:06: 7e:c9:48:f9:59:76:1b:c6:b0:38:fe:5f:08:39:8a:64:e5:28: 89:7a:23:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRYvwqAh6zR05CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NDczNDcwNzYtZTVkOC00NWMzLWFiZjMtNmRmYjFjMzU1ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilllEa8rfx/l03JZH1vH+dam1s23QJfav8+7 wzixwA2U2iR0Lx2Nh1ADjwLnP7TdI0AUQekd7cP/feUcpnIvN/GoejzxoEmwurX4 um+ukvPmA7sNOnRXS6Dt2YxsaFBrwF/uvGYhtc70WVdCBPPEDGi7rCkSs6wJ2vAf tSFJgAlyqA7DsZAKZZIHIIVo3x35V/09xBSWvECxJnBecukbI3gXqlyCjkdFkRM1 Wtty4v3ykY0HV8j0lvAPBbtXdtOdOVUwjDhChJvn6DLTp68fxj04lLoWi53hDyOM Dy/unN+ozcYaXSu2CxNWlbGSLA9Kyq0Ikpn7qnGQX6mQOwun3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBtnBQSW6scc8Q1XEA4AK1H/YcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD0JRQOcwu0t0vfRB0dHVoGmJBqaqaq7m/RInnmKcYOaXpLnhPkiySz iHaztU8q1ciESXHskwIPtrZHtjLLTMXMLCqmHSuubLj6UJQbHx3OsCHYoD2ZDJyr 3q4Z4ISgY2BKUqS2QSrSw8KDh7iBPsIUlnZnsQPf3NaXjcrWHQa9K7rMAo07kaSR 1rLc6G3TknQ1CTeHJEEvI+FF01Fs/dxM1Gh1uW/3+o+ahX2TmbflyAiKWNgOgxeC saKuRoaLck/C8DO5p5EvQB3pnEkbPytPiPAV7oFfpuwp0BJeOGGCouKjtWzCFy35 Bn7JSPlZdhvGsDj+Xwg5imTlKIl6Iwo= -----END CERTIFICATE-----Generated at Mon Jun 16 16:43:57 2025 by rpki-client