$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa File: af6fa4e3-42aa-3436-a412-9f9c477db93d.roa (raw, json) Hash identifier: r/HtGV8TUt7WSx0lBBYx482QSKA1r7PhPz9/wwYuFPE= Subject key identifier: BF:35:65:AE:FE:0F:BB:A1:A5:23:9D:18:03:07:68:C4:F2:0F:3F:56 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515813AF2F6FACA5D8B80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 199.91.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:81:3a:f2:f6:fa:ca:5d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=90c84890-a283-4804-9267-6b7909389b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:f7:e5:3b:26:55:a1:61:47:d0:e7:44:ec: 63:ce:ab:1b:03:5f:a4:96:de:4f:6e:b5:61:d0:79: b7:85:57:78:49:52:0a:c1:62:73:5c:0a:33:84:a2: be:06:45:df:d5:06:74:8f:24:1d:9c:b4:b2:36:06: ac:9a:1b:df:12:f7:45:2d:5c:27:02:60:47:92:07: 7a:a4:fd:66:c7:e6:cc:50:c9:26:0a:c9:e5:b8:82: e8:c6:20:cf:13:35:ba:8b:68:9c:18:2a:54:f9:b1: 10:af:53:82:4e:88:34:f2:da:3a:02:c0:25:e6:c2: ad:25:19:6b:93:a1:12:19:9b:c5:42:d2:60:37:f1: 36:58:16:c6:56:ac:0f:10:43:2d:ba:6f:63:65:6b: 31:b8:3b:97:6d:1e:99:45:ab:0b:4f:cb:32:ff:d5: 83:e8:16:a3:7e:24:8f:dd:67:c2:38:71:89:1c:ab: 06:69:dd:de:f9:13:c1:8d:d1:f2:49:bb:aa:50:e0: 48:a6:49:5f:b6:ce:7a:96:ef:cf:2d:1c:59:d6:e4: cc:f0:28:1c:03:f3:4a:3f:4f:d5:ca:6b:63:38:a0: 91:4c:82:51:93:57:b6:88:06:88:2d:55:a4:51:3c: 11:ad:3b:9f:ea:95:0c:98:1d:64:4c:2e:14:c4:d9: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:35:65:AE:FE:0F:BB:A1:A5:23:9D:18:03:07:68:C4:F2:0F:3F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:82:8d:c8:7b:c2:36:d2:39:9a:1a:b4:27:af:19:5f:be:79: 4c:cf:ec:87:a9:d4:0d:f1:30:50:7c:73:23:95:15:f7:2f:23: 20:0a:76:5a:fc:ef:67:ea:25:ce:30:e3:81:17:b6:aa:03:da: e7:94:a1:e4:4b:52:bb:39:5e:3d:87:e6:77:ff:c6:57:c2:aa: 73:14:5c:91:6a:07:b2:cd:d5:c0:40:b8:9a:b1:63:9b:9b:51: 76:e7:ad:7f:b7:f3:82:e2:24:5f:52:75:91:5c:8d:9f:c7:85: 99:14:02:03:9d:a0:22:4f:9b:bb:91:5e:a6:b2:4a:a3:5b:87: 7c:f6:e6:f6:00:2a:e8:ef:b8:74:98:d7:bf:a9:53:6a:be:23: fc:6d:8d:4b:29:59:23:bc:33:08:5c:38:0d:f6:7c:99:96:37: ce:e4:15:ec:ae:95:52:3c:85:13:72:84:72:e1:fd:fa:82:86: c6:cf:7e:24:a4:99:46:99:fb:49:88:e3:91:20:36:2f:d6:34: 48:dc:54:48:68:7f:b8:e3:4a:8b:c2:b8:58:2b:a3:eb:1f:18: c0:8c:b2:d0:3e:24:4e:f3:a2:0d:30:5e:c1:61:16:2f:b2:19: 84:fb:d1:ef:1d:f3:de:48:8e:80:f8:f0:22:c4:ab:fe:50:0f: 09:4f:31:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRWBOvL2+spdi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OTBjODQ4OTAtYTI4My00ODA0LTkyNjctNmI3OTA5Mzg5YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2735TsmVaFhR9DnROxjzqsbA1+klt5PbrVh 0Hm3hVd4SVIKwWJzXAozhKK+BkXf1QZ0jyQdnLSyNgasmhvfEvdFLVwnAmBHkgd6 pP1mx+bMUMkmCsnluILoxiDPEzW6i2icGCpU+bEQr1OCTog08to6AsAl5sKtJRlr k6ESGZvFQtJgN/E2WBbGVqwPEEMtum9jZWsxuDuXbR6ZRasLT8sy/9WD6BajfiSP 3WfCOHGJHKsGad3e+RPBjdHySbuqUOBIpklfts56lu/PLRxZ1uTM8CgcA/NKP0/V ymtjOKCRTIJRk1e2iAaILVWkUTwRrTuf6pUMmB1kTC4UxNmvOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL81Za7+D7uhpSOdGAMHaMTyDz9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYWY2ZmE0ZTMtNDJhYS0z NDM2LWE0MTItOWY5YzQ3N2RiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKCjch7wjbSOZoatCevGV++eUzP7Iep1A3xMFB8cyOVFfcvIyAKdlr8 72fqJc4w44EXtqoD2ueUoeRLUrs5Xj2H5nf/xlfCqnMUXJFqB7LN1cBAuJqxY5ub UXbnrX+384LiJF9SdZFcjZ/HhZkUAgOdoCJPm7uRXqaySqNbh3z25vYAKujvuHSY 17+pU2q+I/xtjUspWSO8MwhcOA32fJmWN87kFeyulVI8hRNyhHLh/fqChsbPfiSk mUaZ+0mI45EgNi/WNEjcVEhof7jjSovCuFgro+sfGMCMstA+JE7zog0wXsFhFi+y GYT70e8d895IjoD48CLEq/5QDwlPMZQ= -----END CERTIFICATE-----Generated at Sun Jun 15 22:02:08 2025 by rpki-client