$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa File: 6e089eef-fbf2-3611-96fd-939251a6b7fa.roa (raw, json) Hash identifier: fJGrvvK0EoDwIURUy7YsBA5geNwaO0iktJb5ik4qJF4= Subject key identifier: CE:50:59:9F:54:8B:A6:52:31:FE:4E:6F:17:8F:ED:2F:65:2C:3F:B1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C7261E0E9C921D1C0E200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:61:e0:e9:c9:21:d1:c0:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e7196961-a5ff-4941-8863-c11c8b5748d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:de:02:01:25:bd:f5:f7:c6:2b:06:39:33: 99:80:28:25:e8:fa:90:12:ae:ef:2b:40:21:41:0d: 2e:f4:6d:e3:56:44:c3:69:52:0c:b1:16:3d:b1:47: 2e:83:b0:17:42:1d:22:40:57:69:e8:57:9a:db:b0: fb:52:39:fd:81:77:19:4a:43:aa:5d:23:3c:44:9e: 3d:10:7c:17:8d:cd:e1:9c:61:b3:fb:73:d8:db:5b: 6a:39:64:41:8a:b6:15:b5:70:61:0c:8a:77:5e:11: fe:21:8d:fe:24:5a:08:dc:9c:5e:35:33:18:09:e7: b9:e3:82:af:54:3e:c2:0b:d9:82:f7:f7:c5:a9:9d: 39:a0:38:8e:bb:fb:d6:9c:80:2c:83:08:07:23:08: 28:6a:08:a0:56:f1:2e:81:9e:4d:f9:cb:dd:5f:f0: 2c:ac:78:88:ca:46:72:8e:ec:9f:14:be:7a:0c:cf: 3e:1c:86:36:e6:aa:22:fc:af:6a:01:f1:f6:94:42: cf:3d:ea:a0:55:2b:a0:da:3d:db:08:00:05:83:93: 3e:db:e7:c3:45:44:95:71:94:90:46:b1:4a:f4:b4: 27:3b:a6:d0:0a:e3:76:ea:a7:3d:09:55:a1:db:ed: 3b:3c:fa:95:9b:52:43:bb:67:4f:ed:35:58:a3:46: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:59:9F:54:8B:A6:52:31:FE:4E:6F:17:8F:ED:2F:65:2C:3F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:8a:c0:63:3c:d3:47:48:5e:9c:ba:97:82:92:6d:06:fb: 94:1d:c9:ff:8c:b2:77:48:81:94:50:a9:ee:f1:ef:e1:8b:79: 8e:62:fc:e7:5c:d8:49:c4:a5:3d:8e:cf:16:1e:f7:f0:41:07: 3c:a7:7b:cd:3e:6f:50:8c:2d:65:2a:0a:1d:e7:5e:7b:d6:98: e9:aa:26:85:d2:29:d0:76:bf:50:9e:6f:60:cc:94:30:e7:88: a7:eb:63:7e:bc:e9:f3:5e:30:de:86:1f:4b:eb:89:d5:6c:0d: 10:da:d4:58:68:43:46:5f:aa:8f:28:da:c7:5b:9b:27:72:a9: 62:4a:8b:7e:9d:ab:14:01:eb:31:ac:cb:f8:5b:a4:0e:ee:49: a6:63:73:73:00:66:fa:c9:34:bb:d2:15:bf:4b:cf:48:16:3a: 38:8c:8f:e8:ab:69:b2:25:5a:d3:1c:0b:60:c3:43:9a:0d:88: 91:21:bd:79:8a:e9:e4:48:6f:5f:e7:1c:7f:07:5e:68:5d:ee: f1:28:20:93:ba:8e:ef:72:33:7b:39:0e:7a:91:10:89:a3:80: 9a:be:1e:66:4d:c0:21:92:e2:94:07:0b:dc:d9:58:e8:36:6f: 83:5d:dd:e7:56:64:fc:69:96:70:84:0c:84:f6:ee:34:00:05: 68:d8:ab:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHJh4OnJIdHA4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTcxOTY5NjEtYTVmZi00OTQxLTg4NjMtYzExYzhiNTc0OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TPeAgElvfX3xisGOTOZgCgl6PqQEq7vK0Ah QQ0u9G3jVkTDaVIMsRY9sUcug7AXQh0iQFdp6Fea27D7Ujn9gXcZSkOqXSM8RJ49 EHwXjc3hnGGz+3PY21tqOWRBirYVtXBhDIp3XhH+IY3+JFoI3JxeNTMYCee544Kv VD7CC9mC9/fFqZ05oDiOu/vWnIAsgwgHIwgoagigVvEugZ5N+cvdX/AsrHiIykZy juyfFL56DM8+HIY25qoi/K9qAfH2lELPPeqgVSug2j3bCAAFg5M+2+fDRUSVcZSQ RrFK9LQnO6bQCuN26qc9CVWh2+07PPqVm1JDu2dP7TVYo0YOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5QWZ9Ui6ZSMf5ObxeP7S9lLD+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNmUwODllZWYtZmJmMi0z NjExLTk2ZmQtOTM5MjUxYTZiN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn7isBjPNNHSF6cupeCkm0G+5Qdyf+MsndIgZRQqe7x7+GLeY5i/Odc 2EnEpT2OzxYe9/BBBzyne80+b1CMLWUqCh3nXnvWmOmqJoXSKdB2v1Ceb2DMlDDn iKfrY3686fNeMN6GH0vridVsDRDa1FhoQ0Zfqo8o2sdbmydyqWJKi36dqxQB6zGs y/hbpA7uSaZjc3MAZvrJNLvSFb9Lz0gWOjiMj+irabIlWtMcC2DDQ5oNiJEhvXmK 6eRIb1/nHH8HXmhd7vEoIJO6ju9yM3s5DnqREImjgJq+HmZNwCGS4pQHC9zZWOg2 b4Nd3edWZPxplnCEDIT27jQABWjYq9o= -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:41 2025 by rpki-client