$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa File: 8095b80c-f559-3348-96e7-8524fb77cdb9.roa (raw, json) Hash identifier: 7IyOeabNCXVLcpcJ+6XwJA29KssDgsrckoKhP5jewpQ= Subject key identifier: 32:B6:64:55:29:A9:45:9C:A7:9D:D9:CD:6F:99:80:2B:15:AD:BB:F2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE100007E948823482049A40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:07:e9:48:82:34:82:04:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=4432eddd-b7d5-4a31-b3bc-bb0ab86d2806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:8f:ce:f2:a2:51:05:e9:2a:c2:0c:2c:1f: 7d:5e:2d:66:1b:c6:12:b5:1a:5f:93:f8:1c:fe:59: b7:13:45:b7:09:41:d8:57:f0:e1:dc:11:d8:db:63: 32:73:45:fe:c8:3b:cf:8a:01:88:0d:bd:41:86:9c: bc:37:97:15:08:fb:99:2e:1a:63:4c:81:58:a3:e8: f8:c1:37:2e:d7:83:02:f5:3a:8b:94:71:0b:76:2b: d4:59:6d:fc:d7:29:86:a8:5d:52:4b:a6:db:fc:2e: bc:20:34:ca:53:cf:e7:96:c6:ae:f2:03:f5:bf:98: cf:13:7b:04:c4:2f:bb:a7:23:c6:d6:73:fb:ed:62: 20:2c:2b:18:e4:d3:91:7f:aa:fb:4a:24:04:32:e4: 8c:04:87:f3:9e:74:f2:27:c8:3b:d5:01:39:86:41: 84:e3:83:24:12:d2:90:e9:fe:03:ed:68:25:83:38: f1:d0:29:55:fb:56:44:c8:54:fc:98:60:4f:25:5e: a2:16:6e:9a:1d:62:0e:a7:e0:3a:77:2e:e8:0d:68: 41:fd:c0:24:7f:dc:ab:45:c3:57:34:58:09:2d:5a: 50:0e:e3:80:d3:40:24:07:3c:19:ca:8f:29:49:71: 38:a7:dc:ff:e0:1e:14:17:44:86:d6:59:56:c7:9f: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:64:55:29:A9:45:9C:A7:9D:D9:CD:6F:99:80:2B:15:AD:BB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c3:2e:8e:d5:b7:4d:d6:80:f2:86:d0:a6:d5:2e:d4:17:07: 5d:f6:4c:fc:0c:bd:6e:a1:68:14:94:58:34:d7:f5:8b:97:75: 64:8d:61:56:cd:4e:4a:8c:be:e5:d2:4e:96:be:8c:d2:97:b5: 60:7a:9c:97:03:c5:20:86:6a:99:ac:51:5f:1d:da:ab:ab:83: 16:e9:60:0c:ad:00:5c:28:fc:7f:0a:f6:c8:c4:7a:8c:4f:2d: 69:7f:69:0a:81:51:16:8e:a9:1a:43:e8:7a:07:86:11:3b:5b: 66:59:cb:94:83:5c:08:67:c5:43:ce:c7:be:31:9b:86:c5:a2: 86:56:7d:9f:20:fb:5c:b7:db:47:2b:13:e7:1c:a4:c4:51:ae: 50:21:de:1c:94:b9:cd:19:84:41:1f:b4:64:13:99:c4:30:6b: 54:93:e9:54:88:df:a5:5e:58:5c:73:09:d5:92:11:32:eb:4e: 1f:a1:81:d5:18:cf:78:60:57:0a:0d:8a:c8:65:c3:97:f3:c7: c6:e7:16:49:cb:bb:d7:fa:31:7a:6a:d3:e2:f0:a9:ef:14:21: 24:e7:80:9f:60:ac:5b:a8:f6:b2:8f:ea:b2:90:98:3c:b4:48: 80:f4:21:70:36:19:38:11:5f:36:be:e1:ce:83:cf:09:bb:65: 30:af:03:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAAH6UiCNIIEmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDQzMmVkZGQtYjdkNS00YTMxLWIzYmMtYmIwYWI4NmQyODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfePzvKiUQXpKsIMLB99Xi1mG8YStRpfk/gc /lm3E0W3CUHYV/Dh3BHY22Myc0X+yDvPigGIDb1Bhpy8N5cVCPuZLhpjTIFYo+j4 wTcu14MC9TqLlHELdivUWW381ymGqF1SS6bb/C68IDTKU8/nlsau8gP1v5jPE3sE xC+7pyPG1nP77WIgLCsY5NORf6r7SiQEMuSMBIfznnTyJ8g71QE5hkGE44MkEtKQ 6f4D7Wglgzjx0ClV+1ZEyFT8mGBPJV6iFm6aHWIOp+A6dy7oDWhB/cAkf9yrRcNX NFgJLVpQDuOA00AkBzwZyo8pSXE4p9z/4B4UF0SG1llWx5/s6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK2ZFUpqUWcp53ZzW+ZgCsVrbvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODA5NWI4MGMtZjU1OS0z MzQ4LTk2ZTctODUyNGZiNzdjZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3DLo7Vt03WgPKG0KbVLtQXB132TPwMvW6haBSUWDTX9YuXdWSNYVbN TkqMvuXSTpa+jNKXtWB6nJcDxSCGapmsUV8d2qurgxbpYAytAFwo/H8K9sjEeoxP LWl/aQqBURaOqRpD6HoHhhE7W2ZZy5SDXAhnxUPOx74xm4bFooZWfZ8g+1y320cr E+ccpMRRrlAh3hyUuc0ZhEEftGQTmcQwa1ST6VSI36VeWFxzCdWSETLrTh+hgdUY z3hgVwoNishlw5fzx8bnFknLu9f6MXpq0+Lwqe8UISTngJ9grFuo9rKP6rKQmDy0 SID0IXA2GTgRXza+4c6Dzwm7ZTCvAwM= -----END CERTIFICATE-----Generated at Sun Jun 15 23:29:32 2025 by rpki-client