$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa File: b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa (raw, json) Hash identifier: l3qECV3Aq+2mdS3pORiWtSLIcNYLK9Uem1nlJ0lXwSA= Subject key identifier: 5A:4D:B9:F5:BC:8F:35:39:7D:E4:BA:B6:4F:CF:25:E2:CC:88:A9:C0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE100048FE783E150A107480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:48:fe:78:3e:15:0a:10:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=ab0beaab-4398-4c9f-9cc6-a450410793ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:16:68:80:3f:1a:59:a4:e0:2f:08:6b:5c: 68:ad:18:3c:d1:c4:c8:aa:03:ee:42:a1:0f:30:dc: 27:05:f1:5d:97:f2:aa:1c:af:38:97:b6:5d:6e:b6: 9f:2b:53:1c:00:a7:9f:c6:7b:11:9f:84:fe:c6:72: 51:92:a8:59:c3:3f:a8:0d:23:55:85:21:8a:66:80: 36:93:8c:63:7a:5c:80:21:43:cc:27:45:a9:cf:ef: 37:69:3b:7e:71:53:00:9d:6f:3f:3f:98:55:35:03: 0e:a6:ce:16:69:6a:1c:cb:7e:d0:ca:8c:c7:ae:3d: 31:cf:39:39:d9:1a:49:d1:60:06:17:b7:15:54:ad: 46:26:c8:04:25:67:a0:ce:10:eb:84:c2:cf:cc:73: 10:38:59:de:95:0d:b0:b0:a9:0d:16:18:66:d2:3b: c3:0c:f1:80:df:ef:38:74:1d:bb:7c:53:ac:f5:78: f1:66:6e:a1:64:e8:71:bb:d0:68:6c:6a:6d:9d:1b: c3:43:b4:b2:3e:cc:89:36:24:3f:30:36:38:a5:21: ea:8a:c2:70:fc:b9:e4:80:c1:84:79:cb:6c:ef:72: b4:74:53:4b:13:d3:5a:d8:ab:4f:db:dd:41:cc:d7: b1:0f:4f:72:85:92:70:2d:bf:bc:33:89:95:f5:97: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4D:B9:F5:BC:8F:35:39:7D:E4:BA:B6:4F:CF:25:E2:CC:88:A9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b1eb1255-1a13-3922-a41f-ed04595b9aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:99:cc:88:e1:4e:69:63:0b:55:e3:0d:58:a7:ac:99:d3:ed: f9:d6:53:78:d7:da:41:cd:69:ff:d4:84:d8:4a:41:4a:0d:cc: bb:f3:4d:84:87:3d:04:49:28:f9:59:cd:e9:a3:72:ea:1f:55: 64:32:f6:89:93:ac:20:85:cf:e2:94:93:71:10:7f:6f:55:6e: e7:12:9e:c9:c8:a6:0e:a0:c3:4f:9c:b3:0e:4f:db:35:cf:c1: a0:a8:d8:71:6d:68:4f:34:79:82:96:ed:9f:57:2d:82:db:9a: f9:70:a6:22:e1:01:c0:1b:b5:16:71:d2:4e:27:72:bc:3a:a5: 53:3d:5b:31:31:aa:84:06:73:15:7d:65:88:b3:7e:c8:95:2b: 71:d7:b5:39:fd:52:2f:88:84:d7:57:d6:ff:b1:4c:d2:5b:95: 58:73:03:15:5f:be:aa:27:25:ab:79:cf:b5:0e:69:17:a4:75: 92:86:6d:a0:ce:1b:bd:f9:e6:b1:0e:0c:34:75:5c:d7:9f:04: 7c:45:1b:05:2b:c0:d6:7d:9c:d3:29:f6:4d:66:35:c4:24:e2: 84:2a:03:e2:76:be:b9:6c:1a:43:1a:4f:20:7e:13:1c:ac:70: 77:2b:ab:65:5b:ab:61:b1:ef:51:7c:1b:09:23:46:cb:dd:e7: 34:22:86:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EABI/ng+FQoQdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWIwYmVhYWItNDM5OC00YzlmLTljYzYtYTQ1MDQxMDc5M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwIWaIA/Glmk4C8Ia1xorRg80cTIqgPuQqEP MNwnBfFdl/KqHK84l7ZdbrafK1McAKefxnsRn4T+xnJRkqhZwz+oDSNVhSGKZoA2 k4xjelyAIUPMJ0Wpz+83aTt+cVMAnW8/P5hVNQMOps4WaWocy37QyozHrj0xzzk5 2RpJ0WAGF7cVVK1GJsgEJWegzhDrhMLPzHMQOFnelQ2wsKkNFhhm0jvDDPGA3+84 dB27fFOs9XjxZm6hZOhxu9BobGptnRvDQ7SyPsyJNiQ/MDY4pSHqisJw/LnkgMGE ects73K0dFNLE9Na2KtP291BzNexD09yhZJwLb+8M4mV9ZembQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpNufW8jzU5feS6tk/PJeLMiKnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjFlYjEyNTUtMWExMy0z OTIyLWE0MWYtZWQwNDU5NWI5YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKZzIjhTmljC1XjDVinrJnT7fnWU3jX2kHNaf/UhNhKQUoNzLvzTYSH PQRJKPlZzemjcuofVWQy9omTrCCFz+KUk3EQf29VbucSnsnIpg6gw0+csw5P2zXP waCo2HFtaE80eYKW7Z9XLYLbmvlwpiLhAcAbtRZx0k4ncrw6pVM9WzExqoQGcxV9 ZYizfsiVK3HXtTn9Ui+IhNdX1v+xTNJblVhzAxVfvqonJat5z7UOaRekdZKGbaDO G7355rEODDR1XNefBHxFGwUrwNZ9nNMp9k1mNcQk4oQqA+J2vrlsGkMaTyB+Exys cHcrq2Vbq2Gx71F8GwkjRsvd5zQihqs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:23:50 2025 by rpki-client