$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json) Hash identifier: tVUh+w1wmeL3N1J3GRZ7qZjIPr7t1PQnh7OpIaGaMGw= Subject key identifier: B3:A3:38:25:7D:00:0D:1C:FB:67:2A:A0:8B:81:93:04:38:93:D7:C7 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EBD2353D5906B6A21900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:eb:d2:35:3d:59:06:b6:a2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=797ff9e8-659e-4742-800e-49a6e6df611c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:82:7a:5a:07:30:c0:6c:8e:8b:69:8b:ca: 09:7d:8d:0d:07:d4:30:20:06:23:af:9d:cb:e0:f8: e5:71:af:df:b5:6e:d7:01:40:4b:64:55:2e:29:38: d0:20:73:0a:3e:92:b4:c4:35:3a:11:0c:83:ad:16: 66:56:bf:92:1c:45:62:71:d0:3b:8e:6a:2c:99:0f: e4:a8:61:d8:8a:be:bf:14:d4:78:a8:ce:7d:42:01: dd:a6:5e:a9:cb:81:33:78:c9:a4:9a:de:95:26:96: 28:b6:a2:08:24:4a:26:1f:7d:b9:9b:bc:ba:83:28: 16:23:98:5a:04:16:98:73:90:a0:1d:b0:50:31:69: 03:a0:47:07:49:b7:02:3c:5a:8a:62:85:7a:b4:5e: 35:fa:df:59:8f:3f:09:2c:cc:8b:64:a6:dc:64:a1: e0:3d:39:96:e5:8f:03:22:86:3d:fb:5d:33:31:93: e9:0c:e6:25:36:dc:75:ca:04:58:58:57:2b:7e:c2: df:01:90:05:b5:54:3f:79:cb:ae:da:c0:0e:23:d6: 67:d1:ee:9c:37:c1:dd:f6:1f:83:c8:49:64:2d:5c: ef:64:64:e2:b1:b2:6e:d6:f2:d8:b3:28:93:b8:22: f7:9d:df:18:14:e2:0f:ad:69:90:30:3e:a8:22:0e: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:38:25:7D:00:0D:1C:FB:67:2A:A0:8B:81:93:04:38:93:D7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:13:0f:18:17:f3:e6:e3:a7:d1:4e:c0:1f:5f:9f:7f:73:2d: 25:e1:ae:c0:9c:d2:c3:af:d7:8a:82:88:8a:3c:de:76:21:d0: 27:ac:72:af:d4:82:66:3a:e9:3a:0e:cf:9b:26:14:8b:4d:61: f5:0c:9e:01:d3:c0:41:04:c9:48:52:24:33:0a:8a:48:c1:bd: df:ac:66:d3:13:0f:ad:e4:fc:5f:0f:3d:61:47:b4:48:dc:18: e6:fa:f5:ac:64:b3:7e:04:88:63:63:d1:1d:2d:c1:ee:54:4f: 45:f1:d6:69:5f:a8:9e:d5:da:16:89:26:27:f2:77:21:8f:cf: de:24:fe:0e:dd:60:50:7a:34:36:c0:0b:60:a7:38:bd:92:c5: 4e:a3:6c:a6:6b:5b:13:c4:86:f4:7d:3a:b7:f9:d2:43:06:2a: 98:06:67:ad:4e:87:31:58:34:1b:fc:e0:08:00:f9:59:c2:89: b1:88:bf:ef:7b:b5:bb:2e:73:0b:06:99:ad:03:c9:74:79:8d: 24:68:70:d0:3f:0b:6c:6a:2d:a4:d8:d5:08:92:d7:d3:a6:3e: 55:80:8a:77:7d:36:4b:f7:e8:08:ab:6b:3f:db:7e:57:11:ac: ef:9d:79:a7:db:3f:fc:f0:c6:71:9d:76:47:f5:70:09:e9:75: 18:f4:cd:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uvSNT1ZBraiGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk Nzk3ZmY5ZTgtNjU5ZS00NzQyLTgwMGUtNDlhNmU2ZGY2MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtuCeloHMMBsjotpi8oJfY0NB9QwIAYjr53L 4Pjlca/ftW7XAUBLZFUuKTjQIHMKPpK0xDU6EQyDrRZmVr+SHEVicdA7jmosmQ/k qGHYir6/FNR4qM59QgHdpl6py4EzeMmkmt6VJpYotqIIJEomH325m7y6gygWI5ha BBaYc5CgHbBQMWkDoEcHSbcCPFqKYoV6tF41+t9Zjz8JLMyLZKbcZKHgPTmW5Y8D IoY9+10zMZPpDOYlNtx1ygRYWFcrfsLfAZAFtVQ/ecuu2sAOI9Zn0e6cN8Hd9h+D yElkLVzvZGTisbJu1vLYsyiTuCL3nd8YFOIPrWmQMD6oIg6eVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOjOCV9AA0c+2cqoIuBkwQ4k9fHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiYjFlOGYtMTAyMC0z MWU0LWExZDUtNjliYTg4ZTkyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMTDxgX8+bjp9FOwB9fn39zLSXhrsCc0sOv14qCiIo83nYh0Cescq/U gmY66ToOz5smFItNYfUMngHTwEEEyUhSJDMKikjBvd+sZtMTD63k/F8PPWFHtEjc GOb69axks34EiGNj0R0twe5UT0Xx1mlfqJ7V2haJJifydyGPz94k/g7dYFB6NDbA C2CnOL2SxU6jbKZrWxPEhvR9Orf50kMGKpgGZ61OhzFYNBv84AgA+VnCibGIv+97 tbsucwsGma0DyXR5jSRocNA/C2xqLaTY1QiS19OmPlWAind9Nkv36Airaz/bflcR rO+deafbP/zwxnGddkf1cAnpdRj0zWQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:01:36 2025 by rpki-client