$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json) Hash identifier: cqRPXruzum5jyZlcE25LCwlOmo1q5NfAMXMbID0sb3Q= Subject key identifier: 7C:5F:EA:19:98:46:FC:6D:73:76:46:AD:D2:58:22:86:6D:69:5D:9B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849D16516BF6C033CD3D41DCD80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16839 IP address blocks: 149.96.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:16:bf:6c:03:3c:d3:d4:1d:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=27b7a207-5190-4167-9638-c10af370b75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:23:76:1c:28:4f:c5:3d:83:c7:4a:99:2b:bd: 43:1f:6a:ef:75:74:6e:1d:e6:d4:83:9e:ba:f5:de: 55:3a:11:ae:d2:43:e4:30:81:30:ba:a0:2d:c1:69: 3c:3d:88:8e:c5:66:5b:5c:33:c5:5f:3b:7e:93:c4: c9:35:15:f0:d4:d3:94:51:68:60:fd:ea:9a:c3:5a: 40:f4:ba:f6:1b:fc:67:42:eb:34:0f:38:b8:14:81: c6:4c:c2:6f:d1:96:2e:14:25:f7:16:27:db:05:15: 2a:e2:41:f2:79:48:a0:1c:02:55:84:23:57:41:41: 80:3e:6e:62:6e:b4:90:d7:64:b0:3c:87:8f:c4:82: a8:38:70:5d:6a:49:9f:40:73:a7:fb:c6:4d:7f:6b: cf:e2:f6:6e:ea:38:47:7e:71:33:e9:fb:3f:d5:da: 46:1b:9c:b6:cd:65:af:bd:0a:d8:a6:fa:43:58:cc: e6:98:e6:9d:82:72:22:01:a9:9a:73:f6:55:35:c0: 69:56:bd:2b:2e:c8:13:c9:3d:d6:a6:f1:b1:90:53: 55:44:4e:23:e2:27:65:d5:bf:7f:a3:f5:0d:fd:0d: 08:c5:8f:eb:dc:b8:4c:7a:e7:44:65:4f:7f:c5:9f: ff:44:39:3c:2d:c8:b4:4e:cc:1a:40:f8:ae:b3:a6: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5F:EA:19:98:46:FC:6D:73:76:46:AD:D2:58:22:86:6D:69:5D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:03:68:f2:55:62:3b:0b:9a:b2:96:b7:27:5b:58:e2:02:d2: 52:a5:d3:e1:6f:be:8f:45:0d:56:b0:d1:d7:6e:cd:ee:05:48: b0:e1:ef:0a:57:6b:2a:69:bb:1e:58:59:28:ff:1d:70:5a:5d: 5e:03:21:88:ea:ca:b0:7e:e5:cc:2d:5c:b4:f1:57:9a:e0:f3: 6d:dc:8f:54:4b:08:f1:8f:d3:66:c1:b6:36:7c:e6:3d:d6:38: f6:bf:ad:cf:7e:9a:ec:10:23:d2:77:bd:15:22:d7:90:3e:78: d5:a5:fc:1b:1f:b8:2d:f1:3d:35:c0:dc:44:ad:35:16:dd:0f: b0:bf:94:0e:c3:8b:e2:2c:97:79:30:84:79:ae:88:6f:41:df: 1f:75:39:da:17:c2:8c:c0:b4:e9:29:a2:e9:5a:8c:43:59:5f: 02:8a:d9:d0:94:1b:1c:e9:5e:91:90:44:9e:74:22:75:d4:e4: f4:ff:dd:aa:da:4d:72:16:12:60:4a:37:43:b9:86:8b:54:50: d7:7b:09:0e:f8:bf:c6:c5:37:ed:5b:09:fe:f9:74:66:63:ab: 7e:fc:dd:3c:20:6d:6c:26:16:3e:a1:a0:83:25:9f:c4:4d:bb: 45:a2:04:ab:85:72:f9:f3:48:a7:4c:02:08:10:64:16:e4:75: 0f:79:cb:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRa/bAM809QdzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjdiN2EyMDctNTE5MC00MTY3LTk2MzgtYzEwYWYzNzBiNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CN2HChPxT2Dx0qZK71DH2rvdXRuHebUg566 9d5VOhGu0kPkMIEwuqAtwWk8PYiOxWZbXDPFXzt+k8TJNRXw1NOUUWhg/eqaw1pA 9Lr2G/xnQus0Dzi4FIHGTMJv0ZYuFCX3FifbBRUq4kHyeUigHAJVhCNXQUGAPm5i brSQ12SwPIePxIKoOHBdakmfQHOn+8ZNf2vP4vZu6jhHfnEz6fs/1dpGG5y2zWWv vQrYpvpDWMzmmOadgnIiAamac/ZVNcBpVr0rLsgTyT3WpvGxkFNVRE4j4idl1b9/ o/UN/Q0IxY/r3LhMeudEZU9/xZ//RDk8Lci0TswaQPius6YV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxf6hmYRvxtc3ZGrdJYIoZtaV2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1Y2UwYjItOTMxOC0z ZDRjLWJlYmUtNDc3NzRhMTA2NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8DaPJVYjsLmrKWtydbWOIC0lKl0+Fvvo9FDVaw0dduze4FSLDh7wpX ayppux5YWSj/HXBaXV4DIYjqyrB+5cwtXLTxV5rg823cj1RLCPGP02bBtjZ85j3W OPa/rc9+muwQI9J3vRUi15A+eNWl/BsfuC3xPTXA3EStNRbdD7C/lA7Di+Isl3kw hHmuiG9B3x91OdoXwozAtOkpoulajENZXwKK2dCUGxzpXpGQRJ50InXU5PT/3ara TXIWEmBKN0O5hotUUNd7CQ74v8bFN+1bCf75dGZjq3783TwgbWwmFj6hoIMln8RN u0WiBKuFcvnzSKdMAggQZBbkdQ95y/E= -----END CERTIFICATE-----Generated at Mon Jun 16 05:30:36 2025 by rpki-client