$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa File: f10cc6f2-a28f-3c55-96fd-806192f823f0.roa (raw, json) Hash identifier: NMA4eTsOe/aGoPv7iz9CSuR2td8+b4yH9qlGUgtY9Jw= Subject key identifier: 86:AA:C0:FD:2B:A9:50:76:CD:74:D8:E3:B5:31:19:B1:6F:46:B4:D1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000C2EEED0199B5FD4740 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:c2:ee:ed:01:99:b5:fd:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=7153850c-ecb3-435c-8ffb-a3909bef8fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:fb:d2:41:99:3f:a2:55:45:76:5b:e7:06: 57:d0:53:71:e0:7a:af:76:93:cd:bd:da:69:55:6a: de:f1:e3:25:dc:ca:dd:7f:bf:db:59:7e:ec:7d:d5: 99:96:20:b8:da:c5:f7:71:41:b5:b4:13:0c:57:2b: 5f:64:37:38:98:e1:ce:bf:c5:77:57:08:aa:84:db: 1a:84:3d:43:3a:ff:fb:3b:28:2e:cf:31:6d:7b:a7: 62:1f:03:c4:1f:53:e6:a2:4a:9a:de:0d:b9:5b:a8: 30:9c:84:3b:3d:70:30:68:e6:fd:b0:fe:86:f2:0f: 73:39:bb:9d:5e:a0:bf:77:e8:a3:f8:1b:10:78:20: 26:00:01:4f:c9:25:5b:51:e2:f3:7e:16:5d:5f:db: 37:e5:06:d7:8b:3c:e8:e5:09:f4:9a:b5:26:0c:45: f7:b5:bf:aa:52:ea:4b:b7:c5:e2:96:ae:5d:37:5d: bc:9c:dd:f5:e3:d5:70:0e:21:85:5a:bd:95:07:33: 63:dd:cf:ab:4a:dc:71:73:d5:3d:91:5c:72:ff:9d: 9b:49:9b:85:95:5c:5a:c4:22:b7:49:a2:da:cc:38: 67:d9:12:07:13:b3:03:c7:30:80:85:70:85:0a:c3: 9c:9a:1a:f5:32:28:8c:cc:16:37:5c:7a:24:93:60: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:C0:FD:2B:A9:50:76:CD:74:D8:E3:B5:31:19:B1:6F:46:B4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d7:27:6d:ee:d4:0b:0c:9e:74:ff:38:ac:51:47:da:7b:ce: be:6a:56:74:56:a8:18:31:0f:28:34:d4:df:5a:67:f5:d8:b1: 8d:c5:5a:30:67:4d:42:9b:a7:a8:bf:07:43:a3:81:4c:7d:96: aa:23:c8:8a:b7:03:b8:88:36:6b:4f:c9:f5:b7:69:75:36:d8: 61:f1:5c:d2:e4:8b:e5:25:ed:69:3f:23:94:15:97:a4:cf:0a: c6:32:6c:f8:04:bf:a7:7b:e3:ae:cd:eb:35:eb:12:11:c8:07: c5:27:f8:ce:57:9b:2c:fa:6c:40:c9:9e:1d:36:a3:89:95:70: 54:d8:49:3f:f4:58:da:a6:98:e3:d9:a0:b6:ea:95:09:64:4a: d3:f7:2c:24:af:9c:03:3b:bb:b6:8e:c8:45:c2:06:8d:1d:bb: 08:24:06:7a:66:f6:e1:ca:dd:0d:34:7c:58:cb:9e:03:c8:93: 17:b4:8e:87:ba:e6:72:c4:55:58:79:1a:21:2a:60:58:58:53: 8d:9b:43:e6:6d:bd:c7:87:c0:15:a1:0e:ec:ff:d5:3e:50:74: aa:50:dc:d9:54:7d:51:92:2b:83:5f:36:c6:c9:bb:c8:6f:69: 51:c0:55:97:42:0b:8d:68:2d:a4:df:1d:10:46:ab:da:a9:49: a4:d1:3e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EADC7u0BmbX9R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzE1Mzg1MGMtZWNiMy00MzVjLThmZmItYTM5MDliZWY4ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZH70kGZP6JVRXZb5wZX0FNx4HqvdpPNvdpp VWre8eMl3Mrdf7/bWX7sfdWZliC42sX3cUG1tBMMVytfZDc4mOHOv8V3VwiqhNsa hD1DOv/7OyguzzFte6diHwPEH1Pmokqa3g25W6gwnIQ7PXAwaOb9sP6G8g9zObud XqC/d+ij+BsQeCAmAAFPySVbUeLzfhZdX9s35QbXizzo5Qn0mrUmDEX3tb+qUupL t8Xilq5dN128nN3149VwDiGFWr2VBzNj3c+rStxxc9U9kVxy/52bSZuFlVxaxCK3 SaLazDhn2RIHE7MDxzCAhXCFCsOcmhr1MiiMzBY3XHokk2DQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaqwP0rqVB2zXTY47UxGbFvRrTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjEwY2M2ZjItYTI4Zi0z YzU1LTk2ZmQtODA2MTkyZjgyM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHXJ23u1AsMnnT/OKxRR9p7zr5qVnRWqBgxDyg01N9aZ/XYsY3FWjBn TUKbp6i/B0OjgUx9lqojyIq3A7iINmtPyfW3aXU22GHxXNLki+Ul7Wk/I5QVl6TP CsYybPgEv6d7467N6zXrEhHIB8Un+M5Xmyz6bEDJnh02o4mVcFTYST/0WNqmmOPZ oLbqlQlkStP3LCSvnAM7u7aOyEXCBo0duwgkBnpm9uHK3Q00fFjLngPIkxe0joe6 5nLEVVh5GiEqYFhYU42bQ+ZtvceHwBWhDuz/1T5QdKpQ3NlUfVGSK4NfNsbJu8hv aVHAVZdCC41oLaTfHRBGq9qpSaTRPh8= -----END CERTIFICATE-----Generated at Sun Jun 15 23:13:45 2025 by rpki-client