$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa File: a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa (raw, json) Hash identifier: 4KhIA20OC5eFZfNunM1TGbYE8kOLETqacuqScJQ0moI= Subject key identifier: 0C:D6:B6:84:7F:9B:27:33:BA:F8:98:3E:89:76:77:E6:12:05:9C:F3 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16516AF2BEFE2D10FA9C480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:af:2b:ef:e2:d1:0f:a9:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=2f0f2533-a623-47e2-a0b8-44c546727ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:a2:43:ad:70:9d:60:18:80:42:f2:37:73: 9d:c7:82:e2:0e:4c:7c:83:ad:d7:1f:ba:c2:3d:3d: e4:04:35:84:1d:11:7c:c4:5c:08:2d:3c:f4:3d:0a: 84:09:84:32:87:d3:76:ca:4c:9b:25:87:b2:b2:10: b2:c3:39:e0:ef:d3:55:63:62:0b:64:9c:39:14:12: 2e:ee:e4:db:c1:ee:eb:86:28:c1:78:1b:21:39:17: 6e:1e:c8:9b:f7:0b:69:51:bc:d8:1b:da:30:f1:7f: c2:3d:4e:63:e1:ac:65:ae:1e:fa:9a:9a:11:72:b9: be:49:8a:87:84:92:c9:b7:55:b8:5e:e6:e0:97:99: 3f:8e:67:90:55:a8:c4:38:e1:a2:c1:f0:69:f8:d3: 15:8f:31:c0:f1:0b:9c:31:f8:59:9a:2b:c9:24:72: 3f:67:54:9e:3e:90:4f:52:ef:ea:68:76:88:1f:53: 89:db:32:5c:be:1a:bb:ff:16:0c:6c:01:fc:0b:ec: 8a:41:19:1c:8d:ef:71:b7:35:8e:d0:8a:00:67:6c: ca:6c:68:82:4a:a6:b8:2b:51:1f:84:f8:9d:6b:78: 0f:36:b7:7e:a5:4f:e1:73:d5:1a:5e:66:ec:5a:68: e6:f8:89:b8:e8:4b:fa:52:87:e2:dc:f0:99:31:94: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:B6:84:7F:9B:27:33:BA:F8:98:3E:89:76:77:E6:12:05:9C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2f:2b:20:60:c9:e6:58:15:2a:e5:cf:d5:35:f2:6e:2e:7f: 6f:50:cd:5d:0f:89:80:52:68:22:cc:eb:ac:a5:e0:d8:aa:c1: 3a:4c:28:3b:a7:4e:0b:17:d4:fc:2b:87:8e:2c:a7:5a:91:74: 7b:44:61:d4:cb:3e:b9:0d:a0:3a:b0:d2:23:28:d6:82:9c:a1: b3:92:9e:7d:7d:1c:da:7c:54:db:ce:f2:81:50:d4:79:44:90: 2e:19:31:02:7b:9e:de:2a:5a:53:b0:0a:a0:1c:8d:a4:b8:d8: 4c:06:67:a0:3c:a0:57:15:8f:da:a8:a7:4b:86:45:ae:e6:ff: f6:7d:3d:6b:39:2f:a4:aa:49:23:43:9d:b7:11:fc:82:ff:9a: 96:37:6d:c4:ed:d9:af:a3:4b:18:ce:65:ff:62:29:aa:df:f6: 78:1e:fb:7c:24:52:50:96:16:a1:f1:34:f6:67:0c:f8:dd:de: 8d:c6:6e:4c:68:fe:9b:fe:81:3b:0c:31:98:49:fe:a8:de:07: 9f:3e:2d:f0:87:1d:4a:a0:4c:4b:dc:2e:51:e3:6c:c9:1b:50: 32:cc:77:d1:00:30:0c:d2:7f:60:7c:f0:7d:9c:b9:8b:88:6d: 96:6a:9e:1a:f0:60:37:4e:96:8c:57:19:92:8b:97:60:31:e2: 28:8a:1b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRavK+/i0Q+pxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MmYwZjI1MzMtYTYyMy00N2UyLWEwYjgtNDRjNTQ2NzI3YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtCiQ61wnWAYgELyN3Odx4LiDkx8g63XH7rC PT3kBDWEHRF8xFwILTz0PQqECYQyh9N2ykybJYeyshCywzng79NVY2ILZJw5FBIu 7uTbwe7rhijBeBshORduHsib9wtpUbzYG9ow8X/CPU5j4axlrh76mpoRcrm+SYqH hJLJt1W4Xubgl5k/jmeQVajEOOGiwfBp+NMVjzHA8QucMfhZmivJJHI/Z1SePpBP Uu/qaHaIH1OJ2zJcvhq7/xYMbAH8C+yKQRkcje9xtzWO0IoAZ2zKbGiCSqa4K1Ef hPida3gPNrd+pU/hc9UaXmbsWmjm+Im46Ev6Uofi3PCZMZQxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzWtoR/myczuviYPol2d+YSBZzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTZiYThmMTgtY2I4ZC0z ZmQ3LWExYTUtNGFlZjI3ZGU5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUvKyBgyeZYFSrlz9U18m4uf29QzV0PiYBSaCLM66yl4NiqwTpMKDun TgsX1Pwrh44sp1qRdHtEYdTLPrkNoDqw0iMo1oKcobOSnn19HNp8VNvO8oFQ1HlE kC4ZMQJ7nt4qWlOwCqAcjaS42EwGZ6A8oFcVj9qop0uGRa7m//Z9PWs5L6SqSSND nbcR/IL/mpY3bcTt2a+jSxjOZf9iKarf9nge+3wkUlCWFqHxNPZnDPjd3o3Gbkxo /pv+gTsMMZhJ/qjeB58+LfCHHUqgTEvcLlHjbMkbUDLMd9EAMAzSf2B88H2cuYuI bZZqnhrwYDdOloxXGZKLl2Ax4iiKG3M= -----END CERTIFICATE-----Generated at Sun Jun 15 23:12:56 2025 by rpki-client