$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa File: 72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa (raw, json) Hash identifier: EmrKVq8NaA5g2LbKX+/NMJFHfJ5ZKjWt8I4ydfSt7cU= Subject key identifier: 3D:E2:CC:3D:52:79:F3:D5:51:07:E0:3A:58:8A:04:27:A9:D7:88:0B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16516012B03D9F5431F3680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:01:2b:03:d9:f5:43:1f:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=04cf8a95-c02c-4cba-a121-0acbaa97c820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:8b:34:89:da:93:73:b5:7c:10:9f:c0:4b: 48:58:f7:b9:f2:aa:45:87:0d:31:f1:b1:41:1d:3c: b9:12:ba:74:fb:b1:e6:9e:45:22:1b:83:33:31:7b: 92:03:b5:a0:8d:fa:3a:ea:af:6c:df:b9:47:2e:a3: 26:b1:d8:61:de:f7:a0:dd:08:a1:94:f7:eb:f1:67: 73:5d:d4:2e:97:f8:eb:e9:e1:c7:14:78:63:d2:67: 33:4c:56:9a:d8:b3:db:56:b4:cf:56:f8:4f:55:6c: 73:c7:ac:7d:0f:8d:50:37:c5:bd:71:08:c1:66:ba: 04:5a:0f:ef:83:3a:38:63:0a:79:eb:54:db:45:3c: 13:49:f7:54:dd:a5:28:f0:1f:61:fc:04:d0:5c:98: 83:cc:8c:fd:30:64:e5:1f:5f:e6:6c:15:9f:7e:2d: da:9c:d3:a2:c7:75:19:1e:fc:a3:58:f2:5d:40:f4: b8:0a:e0:34:83:aa:5a:d8:5f:d0:14:87:17:3c:e7: 3c:13:13:42:d6:47:ec:55:2c:f8:48:f7:ce:25:03: 80:6d:2d:4d:5a:bb:79:e2:f8:ad:be:0a:2f:18:c1: 8a:b9:f9:bc:17:38:c7:e3:26:e4:df:9a:9b:a9:db: e9:96:12:b2:cb:20:fe:42:e3:28:23:a9:23:7f:b0: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:CC:3D:52:79:F3:D5:51:07:E0:3A:58:8A:04:27:A9:D7:88:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fa:4d:0e:3f:1d:3a:1e:70:41:34:b3:4f:80:8b:a4:33:96: 67:f7:d6:35:88:4c:81:03:c3:12:2a:89:4b:3b:8f:36:e1:a0: a2:30:8e:93:bf:2b:b1:3a:c3:7d:4c:38:58:c5:3e:c0:57:cd: c9:ca:4d:0b:06:c7:49:e6:77:d1:99:42:8a:a8:59:1e:71:53: a2:5c:de:76:c9:65:55:38:25:f1:1a:d2:09:ab:f1:b5:c5:91: 9d:5c:eb:99:d9:2f:9c:af:a2:22:01:be:01:70:dd:8a:bd:77: b0:58:c4:a5:5c:54:a7:8b:cd:a2:e8:86:c1:8e:bb:2a:93:d2: d2:01:71:c5:15:ed:b5:45:d0:ca:22:e6:d3:43:04:19:d1:e6: 6d:32:d1:fe:55:09:d5:02:5f:d9:8f:55:28:77:a2:50:ce:ab: ca:c7:27:77:d7:26:f4:57:1a:b9:0d:70:e6:f1:b1:6e:79:5e: bc:8d:7a:6f:3c:79:e5:29:89:63:d0:22:20:2a:bc:5f:06:cb: 6c:7b:41:cd:01:1f:7c:d5:df:e5:fc:a7:89:c0:56:90:ba:e3: a2:ab:52:02:b4:df:9b:0b:4f:e8:91:d6:22:6e:7e:9a:08:7d: 8b:d2:2e:ab:86:3b:c0:ec:a5:72:85:e8:e0:94:32:02:ff:c6: e5:4a:f6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRYBKwPZ9UMfNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDRjZjhhOTUtYzAyYy00Y2JhLWExMjEtMGFjYmFhOTdjODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfuLNInak3O1fBCfwEtIWPe58qpFhw0x8bFB HTy5Erp0+7HmnkUiG4MzMXuSA7Wgjfo66q9s37lHLqMmsdhh3veg3QihlPfr8Wdz XdQul/jr6eHHFHhj0mczTFaa2LPbVrTPVvhPVWxzx6x9D41QN8W9cQjBZroEWg/v gzo4Ywp561TbRTwTSfdU3aUo8B9h/ATQXJiDzIz9MGTlH1/mbBWffi3anNOix3UZ HvyjWPJdQPS4CuA0g6pa2F/QFIcXPOc8ExNC1kfsVSz4SPfOJQOAbS1NWrt54vit vgovGMGKufm8FzjH4ybk35qbqdvplhKyyyD+QuMoI6kjf7BEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3izD1SefPVUQfgOliKBCep14gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJkMzk3NmItZTZlZS0z ZjJhLWI3YmQtNWQxMTVhOTEyZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz6TQ4/HToecEE0s0+Ai6Qzlmf31jWITIEDwxIqiUs7jzbhoKIwjpO/ K7E6w31MOFjFPsBXzcnKTQsGx0nmd9GZQoqoWR5xU6Jc3nbJZVU4JfEa0gmr8bXF kZ1c65nZL5yvoiIBvgFw3Yq9d7BYxKVcVKeLzaLohsGOuyqT0tIBccUV7bVF0Moi 5tNDBBnR5m0y0f5VCdUCX9mPVSh3olDOq8rHJ3fXJvRXGrkNcObxsW55XryNem88 eeUpiWPQIiAqvF8Gy2x7Qc0BH3zV3+X8p4nAVpC646KrUgK035sLT+iR1iJufpoI fYvSLquGO8DspXKF6OCUMgL/xuVK9oM= -----END CERTIFICATE-----Generated at Sun Jun 15 17:59:55 2025 by rpki-client