$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa File: e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa (raw, json) Hash identifier: Utkj9M9Wyf+JOiIOWoz36JQ9tFL0SGEn2STFwv/zJpk= Subject key identifier: BB:C7:FC:38:DC:35:24:18:D6:69:BF:5B:F1:89:25:D9:6A:9B:D4:7A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16515C3E4348D8467511400 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:c3:e4:34:8d:84:67:51:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=44aa1025-0fdd-4a91-b932-dbef1ba6ac6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:07:18:9a:cf:8b:40:d3:0b:2b:0f:b6:f8: ec:26:41:c5:db:62:d0:fc:c5:39:16:6c:04:28:61: 12:52:88:67:db:27:21:88:72:ae:fe:4b:08:b5:f4: f8:bb:fc:cc:81:79:26:b3:35:60:86:92:80:a0:57: 30:5d:11:f8:55:69:44:18:c0:8c:ba:e0:d5:4c:d4: eb:f0:55:a1:42:32:a2:cc:8d:e8:b4:4c:61:86:fe: 98:3d:6a:51:79:a0:11:f7:2e:9c:15:e3:8b:f2:5e: 97:d6:3c:ee:c9:67:9f:92:d4:f0:1c:b6:84:6b:e3: 82:30:0f:52:25:e2:79:cf:a0:37:0f:20:15:37:1c: 3f:e4:f4:ab:af:5e:c4:7b:3d:38:d5:9e:bb:84:10: bd:6d:62:9a:28:7d:d3:0e:a3:bb:94:26:99:7a:04: e8:c3:0e:5b:e4:c4:08:80:a4:15:0d:15:1a:5c:f8: 4d:19:ab:26:06:11:32:5f:5c:29:0a:cf:20:a6:e9: db:fe:1b:72:e2:fa:51:4a:65:cd:eb:d6:f7:5d:94: c3:5e:b1:9f:20:8a:55:32:98:6e:bc:8a:73:7d:06: 1a:53:9e:fc:e0:78:d9:51:9e:9d:c9:f8:32:57:5e: a6:f9:73:b7:da:63:39:31:80:41:1f:00:ba:c7:c0: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:FC:38:DC:35:24:18:D6:69:BF:5B:F1:89:25:D9:6A:9B:D4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e23f8a79-9fd6-3ad7-b3f5-3b90dfad0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:48:f4:1f:08:a5:53:07:06:83:7c:15:45:a4:cb:c5:e4:b5: 1b:74:5b:f4:19:51:e9:58:90:2c:8b:f0:8b:b3:2b:59:75:0a: 71:e4:6d:8b:87:ab:63:b2:de:11:91:fa:ff:61:bd:3e:59:21: ff:28:e6:6f:6f:eb:f5:22:fb:26:4c:af:46:49:3b:52:9b:d3: c2:17:2a:99:10:1e:d9:db:e5:08:b3:90:f4:b6:30:df:64:f8: db:2a:05:7c:ed:45:6b:11:05:36:81:c0:3b:8a:5b:ab:15:ac: be:41:27:15:d0:af:e0:ac:a5:51:6e:ae:f9:c1:cf:de:46:f9: 6c:84:79:41:a2:f9:84:d7:07:99:83:72:7a:bb:a4:64:b8:af: fc:67:29:34:4d:8e:15:95:fd:d0:56:ae:f7:92:ee:a6:f3:9e: b8:29:89:f7:50:5e:6e:ec:be:9d:04:ae:58:10:3a:6a:83:25: df:09:cb:f7:02:54:b7:1d:fc:2e:52:a6:72:9b:8a:fd:c9:ce: 6d:bb:8b:89:04:0f:94:8e:17:57:2a:e0:0c:db:68:30:a5:23: 15:01:2b:f7:99:f7:9b:a8:83:ca:c4:55:fe:f3:da:76:e5:15: 1e:4c:e5:9d:cb:e2:24:5b:ac:de:1e:7e:7e:94:51:10:48:52: 8a:4a:ee:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRXD5DSNhGdRFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NDRhYTEwMjUtMGZkZC00YTkxLWI5MzItZGJlZjFiYTZhYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOUHGJrPi0DTCysPtvjsJkHF22LQ/MU5FmwE KGESUohn2ychiHKu/ksItfT4u/zMgXkmszVghpKAoFcwXRH4VWlEGMCMuuDVTNTr 8FWhQjKizI3otExhhv6YPWpReaAR9y6cFeOL8l6X1jzuyWefktTwHLaEa+OCMA9S JeJ5z6A3DyAVNxw/5PSrr17Eez041Z67hBC9bWKaKH3TDqO7lCaZegToww5b5MQI gKQVDRUaXPhNGasmBhEyX1wpCs8gpunb/hty4vpRSmXN69b3XZTDXrGfIIpVMphu vIpzfQYaU5784HjZUZ6dyfgyV16m+XO32mM5MYBBHwC6x8BYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvH/DjcNSQY1mm/W/GJJdlqm9R6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTIzZjhhNzktOWZkNi0z YWQ3LWIzZjUtM2I5MGRmYWQwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxI9B8IpVMHBoN8FUWky8XktRt0W/QZUelYkCyL8IuzK1l1CnHkbYuH q2Oy3hGR+v9hvT5ZIf8o5m9v6/Ui+yZMr0ZJO1Kb08IXKpkQHtnb5QizkPS2MN9k +NsqBXztRWsRBTaBwDuKW6sVrL5BJxXQr+CspVFurvnBz95G+WyEeUGi+YTXB5mD cnq7pGS4r/xnKTRNjhWV/dBWrveS7qbznrgpifdQXm7svp0ErlgQOmqDJd8Jy/cC VLcd/C5SpnKbiv3Jzm27i4kED5SOF1cq4AzbaDClIxUBK/eZ95uog8rEVf7z2nbl FR5M5Z3L4iRbrN4efn6UURBIUopK7m8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:27:27 2025 by rpki-client