$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa File: 9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa (raw, json) Hash identifier: td+G5JyVLDXFH80wU4KsOsliqyQ6ZricpwC0RB4d6ZA= Subject key identifier: 4F:9F:9D:15:B6:30:F3:08:DD:BB:9F:B8:8B:63:E9:67:9D:AC:BB:A6 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EBE1F490A774CF49A780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:eb:e1:f4:90:a7:74:cf:49:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=d543ce04-8263-44b0-ad48-983cbb25792c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:a3:56:b4:87:d6:b3:1b:54:34:01:76:52: 0a:4c:20:41:be:13:df:4b:47:aa:6c:c3:f3:5e:89: 6b:6a:a4:bd:2c:ed:26:b4:f5:92:e0:08:8a:ca:8f: d2:ec:dc:80:86:56:7c:80:e4:67:8c:74:ed:7e:88: 80:84:42:e7:11:36:d6:9e:b4:10:9c:20:70:56:cb: ca:90:d4:aa:2e:11:3f:94:dd:80:33:f9:65:84:d6: f2:49:82:d7:ff:8b:77:5a:a1:81:6c:1c:b4:42:59: fd:c8:b3:f1:ae:7d:14:83:c6:99:3e:c3:ad:7d:b5: 33:75:86:ac:2f:a0:83:7a:27:cd:39:06:41:fa:22: 1e:81:21:78:f8:70:84:22:3e:1c:68:5a:95:b6:43: 79:43:0f:e1:eb:e1:75:58:e3:51:87:31:eb:a2:32: 33:09:e3:d9:c0:ab:71:38:e0:23:24:31:c4:73:8c: 62:6e:d1:a2:79:69:ee:f6:1e:ea:24:3e:e4:d1:19: 51:7b:c1:59:54:f0:d2:1f:40:84:51:37:f3:c3:5a: a2:1a:03:ce:07:94:93:cf:ac:55:83:eb:5f:a7:b3: 79:1a:ef:14:70:ee:0f:02:3c:df:d1:04:55:4b:af: 95:9b:b9:ff:f8:4c:47:62:0b:fc:b9:9d:06:48:0c: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9F:9D:15:B6:30:F3:08:DD:BB:9F:B8:8B:63:E9:67:9D:AC:BB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d6:e9:a4:ce:78:3b:59:33:a9:61:21:7d:b8:18:2e:1b:59: 85:f2:36:c4:67:b3:7b:b5:3c:ba:22:a0:5f:59:ab:31:3d:1d: 87:2c:67:ef:5e:05:04:58:1b:5a:3f:f4:7d:3e:4c:a8:5e:58: 68:9b:c7:f9:97:a5:9e:c7:6d:c6:ac:fa:84:e2:1c:e7:4b:94: 47:d3:0b:ed:fa:c0:2e:84:d9:2c:01:a8:95:5c:a4:cc:91:00: fe:91:ba:bb:9f:cb:07:ea:7d:96:78:0c:6c:5f:1a:68:7a:ed: fa:59:78:00:46:1d:2c:f0:cf:64:e6:74:bf:8f:57:66:fc:17: 44:de:45:ab:7b:38:37:3e:e6:c4:5b:c0:9c:82:91:46:18:9c: 60:0d:15:d7:a5:82:d0:37:0d:72:52:ef:4a:37:f3:56:61:fa: 20:fb:30:77:f2:57:db:cd:ec:df:30:9f:75:16:ec:ee:02:08: 9c:5e:45:36:b8:00:cb:12:b6:df:e4:54:54:61:72:2e:ee:63: 68:6a:dc:51:ad:6b:13:ad:2f:64:04:3e:51:a5:0d:98:3b:48: 82:ba:c1:bf:86:a8:1d:52:91:62:d8:8b:e0:c4:58:4c:fd:29: 66:3b:06:a4:06:ac:44:7b:9b:20:55:ff:01:d8:1d:f8:9b:91: 98:57:59:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uvh9JCndM9Jp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDU0M2NlMDQtODI2My00NGIwLWFkNDgtOTgzY2JiMjU3OTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmjVrSH1rMbVDQBdlIKTCBBvhPfS0eqbMPz XolraqS9LO0mtPWS4AiKyo/S7NyAhlZ8gORnjHTtfoiAhELnETbWnrQQnCBwVsvK kNSqLhE/lN2AM/llhNbySYLX/4t3WqGBbBy0Qln9yLPxrn0Ug8aZPsOtfbUzdYas L6CDeifNOQZB+iIegSF4+HCEIj4caFqVtkN5Qw/h6+F1WONRhzHrojIzCePZwKtx OOAjJDHEc4xibtGieWnu9h7qJD7k0RlRe8FZVPDSH0CEUTfzw1qiGgPOB5STz6xV g+tfp7N5Gu8UcO4PAjzf0QRVS6+Vm7n/+ExHYgv8uZ0GSAwBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+fnRW2MPMI3bufuItj6WedrLumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWMzZWY5YzAtMDMwYi0z OGE3LTkzY2MtYzAwYzY5ODVkZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLW6aTOeDtZM6lhIX24GC4bWYXyNsRns3u1PLoioF9ZqzE9HYcsZ+9e BQRYG1o/9H0+TKheWGibx/mXpZ7Hbcas+oTiHOdLlEfTC+36wC6E2SwBqJVcpMyR AP6RurufywfqfZZ4DGxfGmh67fpZeABGHSzwz2TmdL+PV2b8F0TeRat7ODc+5sRb wJyCkUYYnGANFdelgtA3DXJS70o381Zh+iD7MHfyV9vN7N8wn3UW7O4CCJxeRTa4 AMsStt/kVFRhci7uY2hq3FGtaxOtL2QEPlGlDZg7SIK6wb+GqB1SkWLYi+DEWEz9 KWY7BqQGrER7myBV/wHYHfibkZhXWZY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:03 2025 by rpki-client