$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json) Hash identifier: kOXghWy+Kf6WGmaGDO0LzLgMgZF4+hViAWuyddaYlDo= Subject key identifier: FC:C8:EB:5C:09:C4:44:2D:0D:6D:8B:BD:6E:44:95:17:8A:EF:1B:A0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6ED10F959231F23438200 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 199.91.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ed:10:f9:59:23:1f:23:43:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=8c9dcbc3-c762-4500-9a28-a049bdb749d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:3c:7e:ef:ec:dc:e8:9c:1e:af:04:70:00: 68:18:9f:ab:26:8c:25:6d:5c:fb:1e:f1:7a:4b:fa: c3:5e:6a:43:5b:1a:b2:84:dc:88:85:0d:85:e1:b5: f3:08:33:ed:1c:c3:43:4f:da:4a:22:f9:4b:b9:7f: a3:3e:c3:92:3b:09:00:c3:6a:04:0d:e1:77:0e:75: a8:03:6d:f7:0b:44:9d:8d:e0:15:a7:54:4b:f2:01: 25:f3:97:84:82:41:d0:60:5f:3e:af:74:cc:26:c5: 79:93:05:6e:64:9c:be:c1:b6:74:25:b3:29:a8:fb: b5:3b:1c:c0:56:93:45:fa:6f:68:98:e3:b3:d3:aa: 0d:9d:a1:c4:fc:99:05:ff:d3:ed:71:a8:8a:3b:7f: dd:cb:ed:13:47:0f:9e:33:88:82:b0:3e:e7:36:94: 4a:e3:49:e5:b0:05:8e:5a:ff:be:f3:96:77:86:b7: 8f:87:82:14:33:2f:d0:22:e5:90:0e:f1:c3:ac:41: 4d:c0:78:ad:b2:51:56:33:41:ce:c8:80:21:56:ec: 6f:24:a7:ad:11:09:f4:8e:7e:dc:fa:4d:42:6e:32: be:e9:98:21:cd:a3:0c:c2:96:ee:e0:b1:3a:a8:95: 93:d5:72:d0:a1:59:b5:c8:8a:6a:24:16:2a:44:c3: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C8:EB:5C:09:C4:44:2D:0D:6D:8B:BD:6E:44:95:17:8A:EF:1B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d2:ad:10:1a:47:9d:d8:c4:8d:8e:df:70:37:a9:cd:5f:1b: a2:2e:58:05:4a:43:40:7b:07:86:a1:a3:23:48:5b:b7:8f:4d: 28:4f:45:46:2d:fc:03:71:46:da:ff:da:3b:f7:e8:dd:50:10: 94:ec:47:18:e9:7a:59:3f:e9:31:39:0c:24:27:a2:7a:26:a1: 0e:58:b9:e1:dc:da:cf:0a:25:ba:63:fd:0d:28:9a:85:3a:8a: 63:c6:7a:0e:53:d6:e5:89:da:1a:2d:62:a5:3b:76:90:27:fb: d6:6e:d0:b2:cb:60:94:eb:ae:4c:de:f2:2a:86:5f:11:0e:c2: d7:a6:11:d9:9a:0a:cf:f0:81:33:0b:2f:41:c0:e8:ae:5a:fb: d8:2d:55:0e:d2:1c:b7:dc:9b:fe:5b:7e:70:59:fe:18:ec:8e: 5a:dc:7b:15:c3:e4:50:1a:a8:ba:25:db:08:17:f0:0d:fe:cf: 63:9f:9f:07:14:63:6a:68:f3:af:eb:e3:b1:a7:fe:b0:83:06: 3a:b3:96:06:74:c9:f6:d8:15:a7:c1:30:fe:1c:d9:90:4e:89: fb:a3:49:dd:c9:f5:f0:5b:c3:82:ca:4e:e7:4c:5e:70:5d:5c: 50:70:7e:e9:12:e3:9e:dc:ee:9c:64:22:ca:76:98:58:b3:9d: 5a:a1:bd:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u0Q+VkjHyNDggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk OGM5ZGNiYzMtYzc2Mi00NTAwLTlhMjgtYTA0OWJkYjc0OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEw8fu/s3OicHq8EcABoGJ+rJowlbVz7HvF6 S/rDXmpDWxqyhNyIhQ2F4bXzCDPtHMNDT9pKIvlLuX+jPsOSOwkAw2oEDeF3DnWo A233C0SdjeAVp1RL8gEl85eEgkHQYF8+r3TMJsV5kwVuZJy+wbZ0JbMpqPu1OxzA VpNF+m9omOOz06oNnaHE/JkF/9PtcaiKO3/dy+0TRw+eM4iCsD7nNpRK40nlsAWO Wv++85Z3hrePh4IUMy/QIuWQDvHDrEFNwHitslFWM0HOyIAhVuxvJKetEQn0jn7c +k1CbjK+6ZghzaMMwpbu4LE6qJWT1XLQoVm1yIpqJBYqRMNbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzI61wJxEQtDW2LvW5ElReK7xugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjSrRAaR53YxI2O33A3qc1fG6IuWAVKQ0B7B4ahoyNIW7ePTShPRUYt /ANxRtr/2jv36N1QEJTsRxjpelk/6TE5DCQnonomoQ5YueHc2s8KJbpj/Q0omoU6 imPGeg5T1uWJ2hotYqU7dpAn+9Zu0LLLYJTrrkze8iqGXxEOwtemEdmaCs/wgTML L0HA6K5a+9gtVQ7SHLfcm/5bfnBZ/hjsjlrcexXD5FAaqLol2wgX8A3+z2OfnwcU Y2po86/r47Gn/rCDBjqzlgZ0yfbYFafBMP4c2ZBOifujSd3J9fBbw4LKTudMXnBd XFBwfukS457c7pxkIsp2mFiznVqhvTo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:36 2025 by rpki-client