$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json) Hash identifier: oRz6+MoHdnaO7/2FCyMEH2DnJ83VWlwE6wNAe/DPiCQ= Subject key identifier: 5D:D8:8C:6A:EF:6F:B2:4D:25:D7:05:82:51:D2:73:38:EA:0B:25:58 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C72D7849678C3957D9700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:d7:84:96:78:c3:95:7d:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=20a6843c-8f7f-49d6-a781-0116e017f551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:c5:e2:cd:e9:c5:21:e1:a3:72:65:a1:bc: e6:d6:f4:80:99:c4:80:1a:77:cf:f2:ed:41:0e:0d: ef:52:b6:4b:c7:fd:20:e0:ce:c1:ff:84:a0:ef:f5: d9:45:29:b0:3b:33:d8:21:3e:5e:4f:e1:f3:47:39: 79:a7:1c:58:9c:be:44:c1:c5:d7:e1:2e:31:a1:11: 32:b4:77:e8:a3:54:a3:f2:6b:80:f2:83:e3:a1:d7: b3:9c:3a:22:1a:e2:57:9b:86:ac:93:ff:31:b8:9c: 30:20:36:e8:88:be:9f:22:4d:e0:56:9e:c1:40:91: b5:fe:ac:02:bc:af:94:48:f8:0b:41:54:b0:2e:6e: 55:9e:5a:6a:40:74:da:d4:d4:c2:0e:0c:63:11:4f: 22:73:2a:a5:e9:f7:12:a8:97:9d:69:52:c9:97:f4: da:6c:be:39:c1:93:57:99:ec:7d:8e:ca:63:78:18: d4:8c:54:d2:61:a1:b2:c9:1d:a4:8b:18:89:99:61: 30:5b:c9:20:27:0e:b1:a9:ae:9d:90:27:93:47:b3: 21:bb:d3:dc:a7:3c:f8:2e:13:c6:7f:37:70:b5:2e: a9:99:f3:4d:01:61:e3:c6:87:0c:a9:6a:9b:46:44: 21:c0:3b:cc:36:e0:2a:28:3d:9c:be:63:d7:72:68: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D8:8C:6A:EF:6F:B2:4D:25:D7:05:82:51:D2:73:38:EA:0B:25:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a4:15:d1:04:05:59:3e:ef:b5:24:91:1f:d1:a3:53:7c:a1: d1:c2:9c:cf:19:ac:04:b2:4c:a4:87:0d:32:0a:9f:63:4d:f0: ac:8e:c9:54:d6:5d:eb:e9:f2:5b:12:72:a0:68:c1:a3:46:e1: 43:5f:ba:f6:b8:ec:ef:8a:31:fe:5a:75:57:ab:eb:a2:3a:c1: 64:72:1c:ea:06:ac:70:11:a9:7e:84:d7:ef:61:37:38:54:36: f8:2f:a4:99:62:e1:3a:7a:85:74:76:ca:47:4e:6c:e3:cf:60: ff:e1:fc:0c:41:71:91:50:0e:0e:cb:44:cd:ee:44:7e:30:23: e9:ee:ef:fd:9d:b5:7b:f2:35:2c:94:df:23:3c:f0:58:36:ff: d0:f6:43:a3:d1:45:2a:f1:60:72:ae:7c:21:f3:2b:95:6d:8e: 0a:4e:ca:1b:b3:ab:c7:fb:f0:26:55:9a:b8:48:29:9c:c1:9c: 9f:7c:41:3a:79:f5:82:d2:ea:ee:10:0a:cb:22:24:05:a1:6f: 81:ab:e7:7a:e5:45:29:b7:24:6d:e0:b5:59:98:e3:22:61:07: 2d:96:4e:f8:4c:ed:3a:4a:f2:0c:aa:c9:3f:d0:4d:5c:67:4c: bb:60:3c:97:85:c8:2d:2c:25:76:56:f0:ae:48:5f:ad:16:d3: 34:6c:4d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHLXhJZ4w5V9lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MjBhNjg0M2MtOGY3Zi00OWQ2LWE3ODEtMDExNmUwMTdmNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT/F4s3pxSHho3Jlobzm1vSAmcSAGnfP8u1B Dg3vUrZLx/0g4M7B/4Sg7/XZRSmwOzPYIT5eT+HzRzl5pxxYnL5EwcXX4S4xoREy tHfoo1Sj8muA8oPjodeznDoiGuJXm4ask/8xuJwwIDboiL6fIk3gVp7BQJG1/qwC vK+USPgLQVSwLm5VnlpqQHTa1NTCDgxjEU8icyql6fcSqJedaVLJl/TabL45wZNX mex9jspjeBjUjFTSYaGyyR2kixiJmWEwW8kgJw6xqa6dkCeTR7Mhu9Pcpzz4LhPG fzdwtS6pmfNNAWHjxocMqWqbRkQhwDvMNuAqKD2cvmPXcmj2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3YjGrvb7JNJdcFglHSczjqCyVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1Y2UwYjItOTMxOC0z ZDRjLWJlYmUtNDc3NzRhMTA2NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCkFdEEBVk+77UkkR/Ro1N8odHCnM8ZrASyTKSHDTIKn2NN8KyOyVTW Xevp8lsScqBowaNG4UNfuva47O+KMf5adVer66I6wWRyHOoGrHARqX6E1+9hNzhU NvgvpJli4Tp6hXR2ykdObOPPYP/h/AxBcZFQDg7LRM3uRH4wI+nu7/2dtXvyNSyU 3yM88Fg2/9D2Q6PRRSrxYHKufCHzK5VtjgpOyhuzq8f78CZVmrhIKZzBnJ98QTp5 9YLS6u4QCssiJAWhb4Gr53rlRSm3JG3gtVmY4yJhBy2WTvhM7TpK8gyqyT/QTVxn TLtgPJeFyC0sJXZW8K5IX60W0zRsTRY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:44:44 2025 by rpki-client