$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json) Hash identifier: KTah0KhxvBb3jLx4V1A4e10ZDpuJkrP2sU8fYZdbQYE= Subject key identifier: EA:FC:23:81:A9:8F:99:87:85:E1:56:03:55:BD:77:77:16:68:D8:ED Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165167F79D201CC59D46B00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:7f:79:d2:01:cc:59:d4:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3f257aff-d7c4-4e81-94cd-d512a463448f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:30:75:2b:58:8e:ac:9b:c0:27:7f:f0:bd: 58:aa:0c:3d:ae:42:bd:56:25:1b:be:c4:2a:ae:ea: bb:6d:1b:00:cd:4a:30:c6:9f:e3:d0:e0:18:86:11: b1:84:1b:29:49:9b:62:21:fb:55:7f:72:53:c8:e2: 87:07:53:84:3c:39:27:30:96:33:e6:d0:dd:66:53: 6d:10:3c:02:2e:69:a3:4d:2f:ff:04:02:b9:83:9e: 5a:10:ef:e4:4f:10:e7:ad:0e:5a:83:56:c5:05:56: fc:9b:37:f2:76:fd:04:a6:d8:50:19:3d:35:a4:eb: c9:24:61:31:e1:f0:27:f8:a8:26:7a:59:04:3f:19: ad:b2:b2:d9:e1:6c:40:56:07:23:77:eb:f8:64:75: ef:ff:d6:9d:9f:a5:bf:5a:9b:c3:cf:90:4d:67:f2: d6:89:f8:bd:dd:25:96:12:66:46:37:cf:d1:eb:70: b8:9d:e5:c0:24:01:76:15:32:21:f5:ca:63:b0:39: 30:29:d7:b7:37:8e:89:34:e7:7f:68:34:03:f5:4b: c4:ff:34:25:8c:bc:98:4b:f3:44:ec:55:57:68:a6: 4c:d7:2a:5d:62:e9:26:79:bc:af:a0:96:da:a1:06: f3:8f:d2:c3:16:f7:6f:7c:68:1a:09:14:1d:62:c0: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:23:81:A9:8F:99:87:85:E1:56:03:55:BD:77:77:16:68:D8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b3:b4:dc:e0:43:46:60:ed:31:2d:09:74:ba:22:40:45:94: da:b9:bf:da:56:fb:04:a1:11:eb:fc:37:fe:f7:7d:e2:29:7a: d4:01:51:6a:90:41:37:90:bc:c3:09:0f:46:d6:f0:9f:8e:1a: d9:0e:15:60:30:34:ec:b0:75:d0:88:c7:99:4d:b4:fc:9d:b7: 37:97:e4:3b:27:b5:d4:e7:e5:4a:b1:b2:64:a1:8a:b7:f6:d6: 43:f3:20:88:66:16:af:3f:da:9e:fb:38:fe:89:01:0d:6c:01: 9e:8c:7d:a7:02:26:76:6b:19:42:fe:84:02:20:2c:33:96:a0: f3:e0:12:1c:b4:d1:36:a6:d8:7d:f0:5a:64:3a:eb:8b:cb:71: b9:3c:67:47:c5:bf:f5:3f:75:df:5a:fa:65:9b:ca:2a:a5:80: c3:ff:35:b8:ab:5d:0c:97:cb:c6:3a:0f:ed:c0:e2:06:b1:ae: 5c:b0:33:ee:7a:1b:df:a2:1a:9a:ce:03:20:2b:97:29:d3:66: 27:19:7d:9a:00:aa:a3:d6:7a:6e:47:bb:91:0c:1a:43:6d:c1: 00:66:aa:34:78:37:83:0a:bd:8c:aa:5f:e5:01:a7:0e:e6:0c: 6b:58:a7:1c:54:dc:f6:cd:9b:94:00:ae:0f:84:47:bd:88:f0: 55:73:d1:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRZ/edIBzFnUawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk M2YyNTdhZmYtZDdjNC00ZTgxLTk0Y2QtZDUxMmE0NjM0NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxowdStYjqybwCd/8L1Yqgw9rkK9ViUbvsQq ruq7bRsAzUowxp/j0OAYhhGxhBspSZtiIftVf3JTyOKHB1OEPDknMJYz5tDdZlNt EDwCLmmjTS//BAK5g55aEO/kTxDnrQ5ag1bFBVb8mzfydv0EpthQGT01pOvJJGEx 4fAn+KgmelkEPxmtsrLZ4WxAVgcjd+v4ZHXv/9adn6W/WpvDz5BNZ/LWifi93SWW EmZGN8/R63C4neXAJAF2FTIh9cpjsDkwKde3N46JNOd/aDQD9UvE/zQljLyYS/NE 7FVXaKZM1ypdYukmebyvoJbaoQbzj9LDFvdvfGgaCRQdYsDUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr8I4Gpj5mHheFWA1W9d3cWaNjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODVlOWJmZGItMzJjYi0z M2ZkLWIzZjctYWYzZjY0ODViYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSztNzgQ0Zg7TEtCXS6IkBFlNq5v9pW+wShEev8N/73feIpetQBUWqQ QTeQvMMJD0bW8J+OGtkOFWAwNOywddCIx5lNtPydtzeX5DsntdTn5UqxsmShirf2 1kPzIIhmFq8/2p77OP6JAQ1sAZ6MfacCJnZrGUL+hAIgLDOWoPPgEhy00Tam2H3w WmQ664vLcbk8Z0fFv/U/dd9a+mWbyiqlgMP/NbirXQyXy8Y6D+3A4gaxrlywM+56 G9+iGprOAyArlynTZicZfZoAqqPWem5Hu5EMGkNtwQBmqjR4N4MKvYyqX+UBpw7m DGtYpxxU3PbNm5QArg+ER72I8FVz0a4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:24:11 2025 by rpki-client