$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa File: 984d31cc-6f63-319f-b84b-b508e59b50d9.roa (raw, json) Hash identifier: fJUuSNttza7hRlr3103nB4HtxSsJdCgLEXr3FWGpOkA= Subject key identifier: 96:2C:19:D5:36:3B:D3:69:11:0D:E1:E8:13:04:86:6E:28:9D:60:62 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D165165F8136DD3438BD7700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:5f:81:36:dd:34:38:bd:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=1b9528ac-195b-4ea4-b771-aad5f2c054fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:ac:0f:58:8c:d4:db:79:e0:f9:fd:ce:b8: 32:43:18:32:fa:0f:3c:ca:f9:e4:b5:4f:77:1e:eb: 9d:a8:36:c1:e8:cb:27:9e:12:23:3f:2a:e4:03:02: 42:02:67:74:fc:12:b8:17:54:b4:39:5f:cd:79:a8: 7f:87:14:e0:20:39:c2:2a:c9:49:a1:69:6e:e6:cc: 1d:af:00:96:25:c9:40:79:a5:a9:aa:71:3a:10:8a: 67:fb:9b:fb:09:f5:2d:c7:59:f7:9c:ef:53:0c:39: a4:ca:e8:4f:a2:b4:2c:5d:b9:72:e8:9b:a6:53:2c: 86:ec:ad:e0:e9:25:a7:ea:cd:2d:2c:3b:da:eb:21: ae:63:6e:f5:74:fd:00:60:7a:18:24:c5:e6:77:95: e4:83:8a:20:44:ce:38:ed:68:f7:71:f2:fc:74:33: 34:f8:2a:5d:de:2b:eb:f0:c7:23:d3:19:1d:f6:f2: 74:39:9d:7f:a3:ed:58:b2:3b:94:34:04:b0:cd:82: 4a:5a:8b:b9:2c:90:ca:2e:68:7f:7b:5e:04:ec:c1: fb:62:b5:12:d0:02:6f:89:de:2b:2e:18:31:21:76: a4:34:2b:60:fd:5e:b2:f6:4c:a3:ec:b3:73:93:a0: 04:0b:7a:72:b8:4e:fc:dc:c4:e4:46:c4:c0:05:d3: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:19:D5:36:3B:D3:69:11:0D:E1:E8:13:04:86:6E:28:9D:60:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:2c:2e:59:9c:a0:af:55:3b:73:9e:05:2e:b0:86:02:df: 8b:e3:36:23:62:81:a5:b5:0e:c8:3c:ae:b0:d9:65:cb:a7:c3: d7:7f:b7:d5:0c:26:5e:6d:0f:8b:e6:cd:1f:bc:4d:73:a0:c0: d2:32:65:b8:43:b7:b9:6e:80:fb:21:d4:56:e4:89:29:05:24: b5:25:b9:e6:9d:cb:6d:ac:cc:6b:f6:5f:eb:52:88:57:6f:bc: 86:f0:90:c7:de:9c:68:13:1d:3b:9b:bc:78:5b:20:ef:d4:14: 26:fe:2c:48:a7:58:e0:f4:a8:0f:7e:15:fc:13:3d:32:72:11: 6a:a7:a9:25:ca:98:d4:de:ce:19:f5:f7:0c:67:29:1f:e8:0d: 6a:f1:6c:f9:3b:9e:47:a1:2c:98:6d:d1:35:da:0b:ae:fb:b9: 25:52:f6:b6:13:80:5a:4e:98:21:10:ef:13:c7:4d:2f:d7:2a: 4a:23:5f:0a:16:71:c2:39:41:57:37:bb:32:2d:11:97:5b:ac: 7b:1c:15:24:9d:4b:f4:8c:32:f8:fa:8c:d3:83:00:23:d4:9e: 90:fb:46:88:53:9d:7d:96:73:55:2d:27:c1:43:9c:87:b9:47: a5:e2:de:d7:1b:47:ae:3a:db:5a:25:75:7f:f2:7e:44:03:4d: 32:88:a7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRZfgTbdNDi9dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MWI5NTI4YWMtMTk1Yi00ZWE0LWI3NzEtYWFkNWYyYzA1NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YysD1iM1Nt54Pn9zrgyQxgy+g88yvnktU93 HuudqDbB6MsnnhIjPyrkAwJCAmd0/BK4F1S0OV/Neah/hxTgIDnCKslJoWlu5swd rwCWJclAeaWpqnE6EIpn+5v7CfUtx1n3nO9TDDmkyuhPorQsXbly6JumUyyG7K3g 6SWn6s0tLDva6yGuY271dP0AYHoYJMXmd5Xkg4ogRM447Wj3cfL8dDM0+Cpd3ivr 8Mcj0xkd9vJ0OZ1/o+1YsjuUNASwzYJKWou5LJDKLmh/e14E7MH7YrUS0AJvid4r LhgxIXakNCtg/V6y9kyj7LNzk6AEC3pyuE783MTkRsTABdMqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYsGdU2O9NpEQ3h6BMEhm4onWBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTg0ZDMxY2MtNmY2My0z MTlmLWI4NGItYjUwOGU1OWI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvELC5ZnKCvVTtzngUusIYC34vjNiNigaW1Dsg8rrDZZcunw9d/t9UM Jl5tD4vmzR+8TXOgwNIyZbhDt7lugPsh1FbkiSkFJLUlueady22szGv2X+tSiFdv vIbwkMfenGgTHTubvHhbIO/UFCb+LEinWOD0qA9+FfwTPTJyEWqnqSXKmNTezhn1 9wxnKR/oDWrxbPk7nkehLJht0TXaC677uSVS9rYTgFpOmCEQ7xPHTS/XKkojXwoW ccI5QVc3uzItEZdbrHscFSSdS/SMMvj6jNODACPUnpD7RohTnX2Wc1UtJ8FDnIe5 R6Xi3tcbR64621oldX/yfkQDTTKIpyc= -----END CERTIFICATE-----Generated at Tue Jun 17 00:31:44 2025 by rpki-client