$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa File: 96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa (raw, json) Hash identifier: JnqdC9LebSzZHBNU6R4bxbuyq6OUYfyCOxPYMw9yoEE= Subject key identifier: DF:EF:14:04:8C:30:16:CC:0D:56:12:E2:EC:F5:41:20:42:61:B8:4B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165158DB31A81EB1BC77400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:8d:b3:1a:81:eb:1b:c7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=bafafd49-0d48-4764-bbde-95637aaf94a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:48:1b:2c:b0:07:f4:b1:d6:8e:eb:22:4e: 49:29:0f:e0:60:89:a7:e9:1d:22:42:3f:bb:5b:1a: 7e:9e:ce:c9:63:ba:00:4e:64:a2:e4:c1:b6:78:42: d6:4b:2e:72:17:f4:7b:9c:1c:0b:ad:65:47:71:85: 56:e1:b6:a4:31:51:53:37:5d:6f:e3:b4:f8:cb:69: b6:5a:48:dc:2a:ff:8d:4c:0d:cc:95:31:85:9d:f9: 78:6d:34:e7:ea:26:e1:81:cc:ce:ec:e6:c1:51:5c: 7f:82:eb:8d:13:7c:1b:9e:67:f6:36:95:e0:41:44: 73:b0:46:94:80:26:49:e7:1d:ec:ac:6d:30:ae:3b: 7d:9e:04:c1:4e:5e:a8:f5:e4:58:6e:63:35:80:4a: 47:85:e5:8f:94:d1:60:0c:df:a2:b2:1d:51:e2:c3: e2:38:07:08:7e:ab:56:52:b5:29:5b:57:1d:4a:31: b3:ed:9c:08:d4:18:4a:88:7c:5c:7f:f5:2a:51:bc: c8:90:75:6a:1b:1e:2d:f4:0f:2e:10:29:2e:06:ef: aa:13:d7:1d:00:71:03:4f:f6:c5:51:b1:73:bc:96: 1e:8b:7c:b8:19:5d:0e:ef:70:d7:1a:29:be:29:a5: 07:b6:56:2b:54:a1:90:cf:92:ce:c7:69:f3:d0:f6: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EF:14:04:8C:30:16:CC:0D:56:12:E2:EC:F5:41:20:42:61:B8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c2:66:ce:bb:16:4d:18:ef:42:42:9b:30:e8:f1:e3:37:e9: 44:4f:56:64:9a:b2:61:48:d0:2e:0b:5e:a0:e8:27:59:1e:a8: db:74:35:84:6b:a5:b3:74:c6:a6:dd:d4:4b:0c:b7:ac:0a:61: be:dc:cf:2f:5a:35:2d:0f:4b:06:4c:90:3a:1f:14:b9:39:ea: a4:ec:3b:90:ce:f8:70:76:b0:9b:cb:a9:53:35:ef:4c:3d:31: cf:6b:f2:b4:fa:35:37:98:5d:f7:b3:6f:0a:6e:6e:5d:7a:df: 66:32:95:38:e5:5f:82:73:83:aa:3e:f7:24:d1:0a:d4:9b:8f: 40:ad:81:52:2c:7c:0e:a0:d3:0a:48:88:be:77:8a:1a:1b:28: 70:2f:eb:11:e7:8a:7c:44:7b:69:6b:ea:aa:28:44:7f:0f:9f: 81:58:59:2a:43:5a:09:cf:60:92:15:32:8d:c3:05:3b:b4:db: 0e:5a:0f:57:6f:32:ea:e2:b2:d0:ed:0a:b8:98:2c:2b:8e:ca: cb:03:2c:f7:b5:51:10:b0:c7:22:db:15:73:e0:ea:bd:d2:6f: b8:0b:89:ac:21:44:1b:dc:cf:a2:08:db:8a:01:e2:3d:7b:93: 51:5d:e8:9b:4c:a5:fe:af:0d:e6:db:45:0d:f3:40:38:2a:a2: 2b:70:a1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRWNsxqB6xvHdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YmFmYWZkNDktMGQ0OC00NzY0LWJiZGUtOTU2MzdhYWY5NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKRIGyywB/Sx1o7rIk5JKQ/gYImn6R0iQj+7 Wxp+ns7JY7oATmSi5MG2eELWSy5yF/R7nBwLrWVHcYVW4bakMVFTN11v47T4y2m2 WkjcKv+NTA3MlTGFnfl4bTTn6ibhgczO7ObBUVx/guuNE3wbnmf2NpXgQURzsEaU gCZJ5x3srG0wrjt9ngTBTl6o9eRYbmM1gEpHheWPlNFgDN+ish1R4sPiOAcIfqtW UrUpW1cdSjGz7ZwI1BhKiHxcf/UqUbzIkHVqGx4t9A8uECkuBu+qE9cdAHEDT/bF UbFzvJYei3y4GV0O73DXGim+KaUHtlYrVKGQz5LOx2nz0PZW5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/vFASMMBbMDVYS4uz1QSBCYbhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTZmNTlkNWYtODFkNi0z ZDk4LWI2NmQtYzVlOTY3MzViM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3CZs67Fk0Y70JCmzDo8eM36URPVmSasmFI0C4LXqDoJ1keqNt0NYRr pbN0xqbd1EsMt6wKYb7czy9aNS0PSwZMkDofFLk56qTsO5DO+HB2sJvLqVM170w9 Mc9r8rT6NTeYXfezbwpubl1632YylTjlX4Jzg6o+9yTRCtSbj0CtgVIsfA6g0wpI iL53ihobKHAv6xHninxEe2lr6qooRH8Pn4FYWSpDWgnPYJIVMo3DBTu02w5aD1dv MuristDtCriYLCuOyssDLPe1URCwxyLbFXPg6r3Sb7gLiawhRBvcz6II24oB4j17 k1Fd6JtMpf6vDebbRQ3zQDgqoitwoYs= -----END CERTIFICATE-----Generated at Sun Jun 15 16:28:02 2025 by rpki-client