$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: Sk/N25a1b91MHMuJJT5enBCRYk6qbqu1/vF3u77Zf10= Subject key identifier: FF:40:00:E4:9C:A2:09:80:90:A9:0B:71:7C:6A:5A:58:84:0B:E4:10 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515D0E6172DD168AC2F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:d0:e6:17:2d:d1:68:ac:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=6095e8cb-e5d7-4235-a838-2e425f3a79eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:a5:fe:e8:0e:56:e9:5a:d9:95:20:42:b0: 01:45:33:82:89:48:22:bf:75:d6:d4:11:2a:8e:4a: c3:18:12:8d:ef:38:11:72:1b:0f:7e:2b:49:09:2e: a5:13:df:2e:5a:2e:42:e6:cf:54:74:fc:72:5f:62: ce:d3:7a:2c:56:37:58:5c:73:eb:05:27:65:d1:d3: 6b:cf:2e:64:e2:fa:f2:c4:d1:80:92:81:9e:98:e8: fe:ae:c6:d8:9b:e9:b6:34:a0:a2:5a:54:ca:e8:94: 15:64:ba:b8:ef:c4:fe:06:b0:19:33:61:de:88:29: 22:ff:08:73:31:1d:73:98:af:bd:4f:e8:57:2d:af: d9:5a:db:df:df:97:7c:4a:18:dc:02:33:05:a2:e4: 6c:6d:22:12:5f:a0:44:21:39:a0:68:1b:2c:55:d6: 9d:bf:67:7f:06:df:f4:09:aa:42:3a:a0:a3:94:1c: 15:2b:51:4b:a7:ea:ca:26:81:6b:3b:28:8d:cf:f8: 61:23:c6:fe:2b:10:cf:a8:4f:38:70:13:08:24:38: ef:80:c4:a5:ca:34:7d:e7:c3:c5:ab:98:10:9b:a5: e1:42:98:49:0e:d6:bb:8d:a8:f0:65:c7:80:5d:dd: ab:4b:10:2a:e0:84:81:1c:63:9f:b6:72:ca:db:c0: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:40:00:E4:9C:A2:09:80:90:A9:0B:71:7C:6A:5A:58:84:0B:E4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:96:e4:fb:d9:4d:f3:aa:0b:a0:03:15:39:00:f8:79:7a:35: 67:67:68:d1:c8:73:82:45:67:72:43:a0:e7:c1:ea:90:9f:6b: 99:07:dc:ca:35:e7:e6:bc:c6:6e:76:9d:2d:78:45:a5:56:dd: a4:e3:c9:85:53:b3:1a:41:f8:77:83:36:98:65:5c:11:92:9f: 5e:ee:0e:ec:f5:5c:96:91:6b:5a:41:74:7f:db:41:cb:17:9a: 41:45:27:0f:03:7f:46:1d:ae:42:e3:1a:66:b9:c8:0f:f8:fa: 66:ae:d5:a4:2d:ab:8b:9f:65:df:34:79:e5:ef:2d:8c:5c:d9: 8a:5b:39:66:d7:31:23:32:7b:f7:11:4b:e6:3a:8b:3e:7f:af: c2:3d:e9:f5:ce:91:4d:98:fc:32:84:1e:1f:1d:8b:34:05:1b: 50:ff:7d:0e:37:cf:e2:1f:a9:2e:a4:33:70:6d:a3:df:ec:15: 09:11:a4:61:9a:c7:07:c0:11:36:f9:48:23:c5:de:e8:63:8c: 4b:b1:d2:19:80:ac:f5:86:c9:03:e4:ac:d5:11:ba:5a:79:0b: 1d:f0:81:ef:de:6e:00:c5:91:90:0e:46:3f:bd:9c:09:71:c8: 81:3c:2b:b1:d8:f1:67:39:af:f7:51:83:49:25:df:65:14:e5: 56:f7:21:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRXQ5hct0WisL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NjA5NWU4Y2ItZTVkNy00MjM1LWE4MzgtMmU0MjVmM2E3OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGml/ugOVula2ZUgQrABRTOCiUgiv3XW1BEq jkrDGBKN7zgRchsPfitJCS6lE98uWi5C5s9UdPxyX2LO03osVjdYXHPrBSdl0dNr zy5k4vryxNGAkoGemOj+rsbYm+m2NKCiWlTK6JQVZLq478T+BrAZM2HeiCki/whz MR1zmK+9T+hXLa/ZWtvf35d8ShjcAjMFouRsbSISX6BEITmgaBssVdadv2d/Bt/0 CapCOqCjlBwVK1FLp+rKJoFrOyiNz/hhI8b+KxDPqE84cBMIJDjvgMSlyjR958PF q5gQm6XhQphJDta7jajwZceAXd2rSxAq4ISBHGOftnLK28CK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9AAOScogmAkKkLcXxqWliEC+QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeW5PvZTfOqC6ADFTkA+Hl6NWdnaNHIc4JFZ3JDoOfB6pCfa5kH3Mo1 5+a8xm52nS14RaVW3aTjyYVTsxpB+HeDNphlXBGSn17uDuz1XJaRa1pBdH/bQcsX mkFFJw8Df0YdrkLjGma5yA/4+mau1aQtq4ufZd80eeXvLYxc2YpbOWbXMSMye/cR S+Y6iz5/r8I96fXOkU2Y/DKEHh8dizQFG1D/fQ43z+IfqS6kM3Bto9/sFQkRpGGa xwfAETb5SCPF3uhjjEux0hmArPWGyQPkrNURulp5Cx3wge/ebgDFkZAORj+9nAlx yIE8K7HY8Wc5r/dRg0kl32UU5Vb3IYw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:57 2025 by rpki-client