$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json) Hash identifier: hu1WqhcEkAxjr6teAnwP3ALLS3/nQ6m+YnqA7pEVzgU= Subject key identifier: 63:86:0D:B0:E5:F8:B2:4A:AB:5E:E1:68:3B:7C:D1:ED:19:08:7E:3A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE0FFFEC4005AF651842FA30 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ff:ec:40:05:af:65:18:42:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=18af34e3-638b-4d3b-825c-ab5348522272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:0f:78:2f:e1:6d:01:05:8a:43:31:2a:df: 23:30:82:f6:5e:d7:ff:e0:fa:7b:33:aa:17:27:ed: b4:9b:02:7f:0c:3b:0f:60:e3:be:81:5f:be:eb:8c: 2f:7b:e0:4c:d4:03:17:ad:6d:e5:45:9f:a1:99:2a: d0:f7:13:4c:a6:7d:97:7d:6a:fb:ae:d2:51:c3:96: 61:5f:ff:bc:c8:99:bf:8e:f1:b0:4d:30:fb:72:6f: 35:6f:d0:3e:c9:7a:13:c7:45:4e:dc:4d:65:d6:d9: 6e:26:b8:11:29:53:3a:6b:b9:73:35:de:fb:9a:89: 31:5c:0d:bb:64:52:2f:23:fb:6d:dc:24:55:db:67: 93:08:e1:02:ed:ac:9f:4f:28:90:30:ec:ab:dd:4e: 8f:ef:74:d6:90:fb:74:5e:f4:a5:cb:b9:f3:44:ca: 64:b9:c8:89:8f:ee:36:f9:17:42:80:84:df:99:c2: ca:e1:89:e5:fe:f6:c0:4e:2d:50:3c:22:3d:8c:f2: db:03:0e:e2:75:b2:a6:17:a4:c9:61:50:a7:6c:70: 5d:90:c8:38:59:3c:77:82:dc:1c:92:29:2b:0f:16: 77:1d:50:82:60:96:7f:54:e7:9d:be:e1:80:52:55: b3:d9:8f:e3:6f:ba:7a:54:79:16:79:e9:12:52:4c: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:0D:B0:E5:F8:B2:4A:AB:5E:E1:68:3B:7C:D1:ED:19:08:7E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:11:cb:b5:1c:b0:45:f5:ba:7b:46:15:04:9d:e6:c9:8a:3b: 27:43:33:ef:d2:08:be:53:4a:b1:ed:88:89:61:6c:e2:1f:f6: fd:77:15:1c:50:da:44:94:18:f6:13:a7:97:9e:55:a6:20:9f: b3:55:e7:60:6d:e7:31:3b:1b:0a:a7:8a:83:a6:fb:e6:45:3a: 62:65:ea:87:dc:0a:ab:e8:ff:e3:0f:31:22:04:c7:c4:13:b1: df:e1:99:c8:7a:a2:fe:80:99:db:0c:50:bc:58:42:f3:b8:57: 02:ef:b4:ec:bf:10:32:9c:ee:38:53:5d:2e:8f:87:08:8c:3a: ad:dd:55:d7:bd:e1:fc:cf:77:10:dd:50:cc:62:8d:44:f1:36: a6:e6:1b:f2:f8:0e:87:ba:fe:04:a6:73:4f:65:54:c8:20:5f: 86:fc:4f:1e:8a:76:a2:06:28:bd:e2:4d:a6:f2:4d:4a:54:2a: 60:6d:a6:2a:93:f8:df:9f:89:b0:f8:c5:41:41:c3:cb:f6:8c: 87:37:0d:ef:4c:63:ae:e6:a5:19:b2:5c:ae:af:40:13:7d:10: 1b:a6:c0:67:ef:5c:5f:92:0b:94:97:4f:8a:2f:8e:0f:18:5a: fe:71:46:b7:39:56:1b:e4:25:a2:50:69:c9:47:14:6e:f5:9c: f0:d1:27:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D//sQAWvZRhC+jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MThhZjM0ZTMtNjM4Yi00ZDNiLTgyNWMtYWI1MzQ4NTIyMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMwPeC/hbQEFikMxKt8jMIL2Xtf/4Pp7M6oX J+20mwJ/DDsPYOO+gV++64wve+BM1AMXrW3lRZ+hmSrQ9xNMpn2XfWr7rtJRw5Zh X/+8yJm/jvGwTTD7cm81b9A+yXoTx0VO3E1l1tluJrgRKVM6a7lzNd77mokxXA27 ZFIvI/tt3CRV22eTCOEC7ayfTyiQMOyr3U6P73TWkPt0XvSly7nzRMpkuciJj+42 +RdCgITfmcLK4Ynl/vbATi1QPCI9jPLbAw7idbKmF6TJYVCnbHBdkMg4WTx3gtwc kikrDxZ3HVCCYJZ/VOedvuGAUlWz2Y/jb7p6VHkWeekSUkybYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOGDbDl+LJKq17haDt80e0ZCH46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiYjFlOGYtMTAyMC0z MWU0LWExZDUtNjliYTg4ZTkyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYRy7UcsEX1untGFQSd5smKOydDM+/SCL5TSrHtiIlhbOIf9v13FRxQ 2kSUGPYTp5eeVaYgn7NV52Bt5zE7GwqnioOm++ZFOmJl6ofcCqvo/+MPMSIEx8QT sd/hmch6ov6AmdsMULxYQvO4VwLvtOy/EDKc7jhTXS6PhwiMOq3dVde94fzPdxDd UMxijUTxNqbmG/L4Doe6/gSmc09lVMggX4b8Tx6KdqIGKL3iTabyTUpUKmBtpiqT +N+fibD4xUFBw8v2jIc3De9MY67mpRmyXK6vQBN9EBumwGfvXF+SC5SXT4ovjg8Y Wv5xRrc5VhvkJaJQaclHFG71nPDRJyA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:23:57 2025 by rpki-client