$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json) Hash identifier: OCLPXtK8ievC60DhSYpv3/4sn7Hr89+FHKfxZqPxQ6w= Subject key identifier: BA:FE:63:A9:21:41:E5:A4:C3:1F:49:79:42:AA:1A:7F:EF:EC:2D:B1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000A490968BC9CB25D3B0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:a4:90:96:8b:c9:cb:25:d3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=2c5cd6ce-c06a-4627-9f58-3124c3361f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:0c:9e:75:34:4b:ee:19:4d:9b:8e:a4:93: 6d:6d:3b:3f:b2:df:46:53:b2:39:8f:fd:95:59:04: 00:eb:1a:ba:0f:9c:dd:23:39:0c:9b:ff:56:de:68: c7:bc:02:2b:66:e7:45:ea:24:e1:2a:6d:12:41:9c: 5d:21:5e:c9:6c:e4:47:20:05:36:75:51:62:f0:a9: d4:79:05:17:4a:2f:d5:5c:7a:53:26:ba:03:49:49: 6f:eb:3d:d1:52:18:1f:97:7e:22:44:5d:7c:01:a8: 2c:e8:45:77:84:5e:3d:d3:ae:08:5c:91:76:e6:fd: 09:0f:2d:7d:92:20:dc:97:5d:d2:e3:8f:04:83:40: 8e:2f:fa:f5:09:d5:1a:1b:f0:25:54:c6:03:39:20: b8:0c:45:1f:7b:0d:61:84:de:e9:52:72:c6:db:f6: dd:fe:e8:36:c7:1d:f4:6f:82:a9:d0:91:49:d6:3f: 08:fb:e3:b5:c7:da:31:a7:c2:44:15:1f:2d:4e:d5: 0d:d0:19:65:7f:09:f9:44:26:20:cd:60:17:a4:37: bd:ee:ed:39:90:4d:30:01:eb:3b:fc:9e:86:86:e8: db:a5:7a:63:63:56:68:71:0f:91:24:56:0c:6d:0f: a5:68:6e:f7:9b:35:35:97:75:2f:ab:46:06:c0:0e: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:63:A9:21:41:E5:A4:C3:1F:49:79:42:AA:1A:7F:EF:EC:2D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:62:56:b9:6c:0e:05:c7:b3:ab:f5:56:c1:3e:58:3e:53:76: 5b:bb:80:f8:0a:9a:6f:c4:f7:fa:0d:81:3f:fc:5d:68:00:cb: 73:2f:76:18:70:6f:f6:12:bf:d6:ec:27:e9:51:9e:f6:a5:70: 41:a0:ac:03:80:48:8e:b4:f9:34:62:e4:60:c2:00:57:b2:54: 43:9a:98:1f:35:8f:c1:1c:6b:e4:02:e9:b3:a5:d7:94:01:0b: 3b:51:0a:3c:7f:e8:09:aa:ad:bb:c4:e6:fb:4b:90:91:a4:1f: 31:4c:2a:b8:2c:77:0e:0c:ae:2f:ec:9b:5b:d8:e6:50:53:66: f8:b6:4d:94:17:cd:b9:c3:2e:36:f1:04:df:a8:53:27:09:4b: ab:c5:02:c2:bc:3d:e9:25:9c:91:29:40:6b:84:fa:f1:25:95: cb:d2:47:2e:65:68:b8:14:5e:aa:5a:39:40:88:86:cf:d3:7b: a1:25:79:c3:9d:b3:13:43:5d:da:d5:19:fa:09:8f:a5:df:c4: 7d:27:b9:e5:c3:91:4d:ec:a3:d3:2b:3d:9d:01:7a:ee:5d:46: f8:92:6b:fd:a1:7d:e6:c1:9d:ef:66:20:51:e8:17:05:a2:df: 8c:1a:ce:3f:70:7d:82:4a:6b:51:67:2e:64:b9:34:93:ff:cc: 05:8f:be:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EACkkJaLycsl07AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MmM1Y2Q2Y2UtYzA2YS00NjI3LTlmNTgtMzEyNGMzMzYxZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kMnnU0S+4ZTZuOpJNtbTs/st9GU7I5j/2V WQQA6xq6D5zdIzkMm/9W3mjHvAIrZudF6iThKm0SQZxdIV7JbORHIAU2dVFi8KnU eQUXSi/VXHpTJroDSUlv6z3RUhgfl34iRF18Aags6EV3hF49064IXJF25v0JDy19 kiDcl13S448Eg0COL/r1CdUaG/AlVMYDOSC4DEUfew1hhN7pUnLG2/bd/ug2xx30 b4Kp0JFJ1j8I++O1x9oxp8JEFR8tTtUN0Bllfwn5RCYgzWAXpDe97u05kE0wAes7 /J6GhujbpXpjY1ZocQ+RJFYMbQ+laG73mzU1l3Uvq0YGwA4EtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr+Y6khQeWkwx9JeUKqGn/v7C2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtiVrlsDgXHs6v1VsE+WD5Tdlu7gPgKmm/E9/oNgT/8XWgAy3Mvdhhw b/YSv9bsJ+lRnvalcEGgrAOASI60+TRi5GDCAFeyVEOamB81j8Eca+QC6bOl15QB CztRCjx/6AmqrbvE5vtLkJGkHzFMKrgsdw4Mri/sm1vY5lBTZvi2TZQXzbnDLjbx BN+oUycJS6vFAsK8PeklnJEpQGuE+vEllcvSRy5laLgUXqpaOUCIhs/Te6ElecOd sxNDXdrVGfoJj6XfxH0nueXDkU3so9MrPZ0Beu5dRviSa/2hfebBne9mIFHoFwWi 34wazj9wfYJKa1FnLmS5NJP/zAWPvik= -----END CERTIFICATE-----Generated at Sun Jun 15 20:29:03 2025 by rpki-client