$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa File: fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa (raw, json) Hash identifier: NzkYzXZMJLzuEyfnmR7h3w1BnH716KnoINXP1lwptdE= Subject key identifier: A9:CB:83:15:EC:28:5F:AE:5F:F6:9E:5A:64:80:70:73:4E:F6:FE:EF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EB98C2653FF30FD74C80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:eb:98:c2:65:3f:f3:0f:d7:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5a03a662-73f7-4f64-ab58-c50e596da9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:2b:ec:a2:06:ec:12:6d:b2:35:70:29:03: af:c3:ac:f3:96:c6:57:30:fa:b8:fe:4d:48:da:2a: a1:c9:6b:4f:10:75:09:2f:f3:05:b8:34:52:49:e7: e6:27:8c:79:a1:8d:de:e6:df:7b:c0:d3:cb:93:ba: 3a:94:57:4f:89:1e:5b:eb:6d:6a:00:1b:a9:01:e5: 1e:7e:1a:c0:78:62:70:d6:3d:f4:3f:e1:67:14:57: 50:e9:05:ed:55:74:be:07:81:99:d7:d8:f9:8f:37: 15:62:67:13:2c:9d:d8:78:fa:b1:d7:c7:01:2c:df: 41:93:dd:e7:0d:91:e5:9a:f8:62:ae:3d:9a:18:97: 2f:ff:e8:5c:e6:9a:50:fd:30:c4:5f:e5:4b:77:4b: 81:14:84:96:01:09:cc:fc:51:a5:99:2e:eb:a2:bd: cb:44:1d:6f:cf:87:84:be:74:bd:e3:ac:6e:26:8c: a9:04:f5:10:8b:a0:43:8f:63:04:15:c3:88:c6:7e: 99:c7:22:2d:5b:30:9d:49:2a:72:5b:ab:55:f6:f1: a0:f6:e0:c1:8a:99:8b:c4:4f:69:cc:e6:b8:92:92: 50:6d:7c:fb:ac:5e:94:48:4f:17:05:3f:af:12:cd: 97:24:89:4d:b8:d4:64:cf:33:90:ae:7c:40:e6:3e: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CB:83:15:EC:28:5F:AE:5F:F6:9E:5A:64:80:70:73:4E:F6:FE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6e:2e:64:d9:af:14:3e:67:aa:08:f5:9d:49:e9:0f:d6:d6: 39:c3:d5:84:38:41:51:a8:1c:91:ca:d1:40:47:1e:45:19:9f: fe:46:c8:1a:9d:36:00:19:51:b5:39:66:88:34:53:fc:0e:d5: 74:5a:0b:8d:81:72:0b:89:a1:bc:2b:f8:88:6a:30:b4:8c:9a: b5:2e:61:a2:84:f5:6e:0a:1a:65:10:29:bb:a4:ee:48:1b:e3: d4:bc:47:ea:cd:ad:d6:bf:26:e4:39:1f:47:3a:72:b8:2e:be: bc:29:79:9a:2f:15:d4:be:6c:f4:48:fd:87:1c:6a:79:68:83: c4:b2:46:c9:ce:7f:a9:a6:cf:84:87:32:48:9f:9d:e5:04:52: ac:2e:32:cf:df:e2:10:2e:96:c7:40:63:56:68:63:05:a2:b5: 01:22:8f:55:dc:26:94:3e:69:72:21:98:bd:f9:5e:9e:c5:29: 02:fb:11:29:06:bc:36:46:39:3d:6c:5f:b6:85:76:24:c6:7f: c9:bc:2c:2f:e6:cd:a6:a6:2b:66:7e:41:e5:d0:61:f3:9c:a6: 39:74:55:e5:24:8a:c3:c7:b7:d3:9e:b5:f9:04:9f:8b:b5:c8: c6:e4:f1:d1:08:8b:07:1d:ed:77:48:0c:d3:4d:91:fe:1f:2a: 9b:c4:a1:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uuYwmU/8w/XTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NWEwM2E2NjItNzNmNy00ZjY0LWFiNTgtYzUwZTU5NmRhOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Ar7KIG7BJtsjVwKQOvw6zzlsZXMPq4/k1I 2iqhyWtPEHUJL/MFuDRSSefmJ4x5oY3e5t97wNPLk7o6lFdPiR5b621qABupAeUe fhrAeGJw1j30P+FnFFdQ6QXtVXS+B4GZ19j5jzcVYmcTLJ3YePqx18cBLN9Bk93n DZHlmvhirj2aGJcv/+hc5ppQ/TDEX+VLd0uBFISWAQnM/FGlmS7ror3LRB1vz4eE vnS946xuJoypBPUQi6BDj2MEFcOIxn6ZxyItWzCdSSpyW6tV9vGg9uDBipmLxE9p zOa4kpJQbXz7rF6USE8XBT+vEs2XJIlNuNRkzzOQrnxA5j50eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnLgxXsKF+uX/aeWmSAcHNO9v7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZmRkMGNmYjctNjNlMy0z YzQxLThmMWQtNDUyYWY5NDllNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVuLmTZrxQ+Z6oI9Z1J6Q/W1jnD1YQ4QVGoHJHK0UBHHkUZn/5GyBqd NgAZUbU5Zog0U/wO1XRaC42BcguJobwr+IhqMLSMmrUuYaKE9W4KGmUQKbuk7kgb 49S8R+rNrda/JuQ5H0c6crguvrwpeZovFdS+bPRI/Yccanlog8SyRsnOf6mmz4SH MkifneUEUqwuMs/f4hAulsdAY1ZoYwWitQEij1XcJpQ+aXIhmL35Xp7FKQL7ESkG vDZGOT1sX7aFdiTGf8m8LC/mzaamK2Z+QeXQYfOcpjl0VeUkisPHt9OetfkEn4u1 yMbk8dEIiwcd7XdIDNNNkf4fKpvEoRY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:25:44 2025 by rpki-client