$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json) Hash identifier: vSMlCyOla3k54dx1c5hZyBCYalwPYgcZD7CyZ8y9+Og= Subject key identifier: 28:EB:57:4A:5E:33:DB:F0:F6:1D:16:9E:D4:4E:1E:DF:07:16:3C:C0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE0FFFCC4CC75ACD94000300 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ff:cc:4c:c7:5a:cd:94:00:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=a0159542-753a-47fd-9eaf-fe4daf9a5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:b5:4f:5e:1e:7c:4f:31:ba:92:fd:2e:d9: 0f:55:49:81:75:0c:b6:a4:9c:4a:a8:27:e9:67:78: de:1b:2b:0c:8f:bc:62:fe:ff:3b:65:21:d4:20:a7: 04:d2:85:e5:58:2d:65:4a:b0:27:34:67:cf:51:ea: 5f:a5:cc:e2:d8:c0:62:42:bb:3f:db:22:d7:56:5a: 08:c4:da:fc:d3:40:fb:d3:6c:15:8c:ac:d0:3d:e8: e8:57:69:78:c2:ea:c9:99:1b:35:8a:05:e5:3f:e4: f3:4c:a3:76:e5:7e:53:eb:2f:bc:93:4a:60:74:2e: 9f:ad:e7:23:f5:3f:46:bd:08:ec:b5:40:95:07:57: 3c:5c:99:f3:c3:47:a4:af:f0:7f:50:d9:14:e8:f6: a7:54:8a:93:68:f8:68:d6:ab:c5:9e:93:e8:77:7a: 0d:64:b4:7e:79:d6:1e:e4:5e:b1:c7:07:d3:68:c8: fa:42:2e:43:46:06:a5:5c:c1:a8:16:1a:28:64:1c: 42:c2:18:08:31:ba:b3:df:0c:99:1b:e3:86:cf:6b: 77:6a:70:eb:45:aa:b5:d3:0f:62:93:2d:f1:0a:ef: e2:40:86:e0:91:81:07:5f:45:e6:85:b2:03:9c:43: d4:8c:8d:f8:54:64:65:2e:21:e1:8d:e8:ed:fb:9b: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:57:4A:5E:33:DB:F0:F6:1D:16:9E:D4:4E:1E:DF:07:16:3C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:04:25:b2:f5:de:09:68:bc:dc:e1:12:a0:de:f1:9a:e7:62: db:6b:28:7b:56:79:f0:6f:dc:16:6f:98:3b:08:10:cf:8e:c1: 64:3d:83:aa:75:ab:d1:85:41:3d:8b:75:d5:16:aa:d5:87:d7: c6:54:6c:84:de:8d:b5:43:e7:bb:c8:f9:3b:c2:c9:be:e5:fd: da:d8:b2:9b:5d:bc:00:d3:72:b9:56:30:63:bb:fd:72:90:06: fe:47:74:83:db:dc:4d:c9:e0:8c:29:cd:c6:9e:b0:b1:39:30: a1:01:ac:42:af:e0:d8:69:24:59:f4:28:f6:f1:a2:79:b7:04: c6:7c:d5:22:d8:c2:ad:15:7f:54:cf:d2:04:b6:84:14:d9:09: c8:86:f7:a3:33:c8:38:36:ce:90:2e:80:c0:78:be:14:90:98: 3d:8c:ec:48:6a:f7:2e:ba:aa:18:b8:83:51:a4:0f:ad:97:a5: df:4a:2f:51:a0:be:19:57:31:0d:33:f3:3b:5d:14:e5:93:0e: e1:fa:95:b6:5c:73:00:58:b5:2e:1f:ca:60:36:73:9e:67:04: 98:eb:8c:f9:3b:08:2a:3a:57:ca:f1:4a:92:d7:73:08:af:d3: 86:8b:b6:49:99:50:b9:7c:b2:fe:50:af:9c:ef:88:ac:d1:25: 4d:f0:ed:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D//MTMdazZQAAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YTAxNTk1NDItNzUzYS00N2ZkLTllYWYtZmU0ZGFmOWE1YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPS1T14efE8xupL9LtkPVUmBdQy2pJxKqCfp Z3jeGysMj7xi/v87ZSHUIKcE0oXlWC1lSrAnNGfPUepfpczi2MBiQrs/2yLXVloI xNr800D702wVjKzQPejoV2l4wurJmRs1igXlP+TzTKN25X5T6y+8k0pgdC6frecj 9T9GvQjstUCVB1c8XJnzw0ekr/B/UNkU6PanVIqTaPho1qvFnpPod3oNZLR+edYe 5F6xxwfTaMj6Qi5DRgalXMGoFhooZBxCwhgIMbqz3wyZG+OGz2t3anDrRaq10w9i ky3xCu/iQIbgkYEHX0XmhbIDnEPUjI34VGRlLiHhjejt+5s1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjrV0peM9vw9h0WntROHt8HFjzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYjY3MmMyNGUtYWMzYS0z YTczLTkzNjktYWYzZmRlNDc5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAEJbL13glovNzhEqDe8ZrnYttrKHtWefBv3BZvmDsIEM+OwWQ9g6p1 q9GFQT2LddUWqtWH18ZUbITejbVD57vI+TvCyb7l/drYsptdvADTcrlWMGO7/XKQ Bv5HdIPb3E3J4IwpzcaesLE5MKEBrEKv4NhpJFn0KPbxonm3BMZ81SLYwq0Vf1TP 0gS2hBTZCciG96MzyDg2zpAugMB4vhSQmD2M7Ehq9y66qhi4g1GkD62Xpd9KL1Gg vhlXMQ0z8ztdFOWTDuH6lbZccwBYtS4fymA2c55nBJjrjPk7CCo6V8rxSpLXcwiv 04aLtkmZULl8sv5Qr5zviKzRJU3w7aE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:07 2025 by rpki-client