$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa File: fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa (raw, json) Hash identifier: moVDDxajah727Cl6lznv3/lgCSEQUpDsHYzdf51fM0g= Subject key identifier: FF:8C:21:A1:81:B4:65:3F:48:54:B4:33:DE:2B:9A:02:49:D4:1C:E4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE0FFFABC1D7CE8973AA26C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 149.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:ff:ab:c1:d7:ce:89:73:aa:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=4c8f6c86-0385-4338-9ea5-475faa46cc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:ca:ed:fa:70:3e:ed:45:20:ea:ed:ec:4a: 5a:79:73:f4:7d:e4:fa:77:15:e9:98:41:7d:dd:5c: 5d:60:24:dd:08:81:c3:49:20:f9:97:3f:01:33:14: 58:4a:02:7e:f5:8f:8c:d9:30:2a:dd:bc:d2:66:4f: df:a6:d0:65:54:4f:a4:97:bf:50:be:7b:60:83:8e: e3:34:f3:ff:f8:8f:de:2f:1b:3a:3a:53:e2:b4:1f: 18:8c:17:dd:1b:73:9d:10:8b:a9:03:7e:6d:0e:19: 95:4d:4c:3e:5b:0d:4c:c1:85:e5:f5:da:79:4d:61: f3:ae:f2:4a:94:64:e4:a5:83:d4:ca:ad:7b:cf:f7: a8:e6:bd:1c:fa:37:fd:76:ad:7a:8d:07:11:a9:23: 7e:e1:4b:2f:d7:84:6a:10:50:f4:22:43:f4:98:09: ba:18:4c:54:a6:7a:db:96:ac:d7:ea:ae:db:2d:17: 6e:45:8d:68:6e:e9:bb:b1:6b:21:a1:50:84:06:63: 02:86:36:47:81:13:36:55:13:c4:fa:c8:b4:b6:a9: 51:b3:49:bc:c8:93:04:7d:bd:83:e1:7b:8b:c5:ea: 6b:dd:dd:0a:a6:8d:bf:e9:65:00:8a:2e:f7:5c:fb: 16:0f:02:92:c7:2d:79:f4:61:a9:19:46:82:bd:52: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:21:A1:81:B4:65:3F:48:54:B4:33:DE:2B:9A:02:49:D4:1C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ec:75:9b:7a:fb:de:06:55:70:c3:18:7c:99:0b:86:bb:b0: 74:79:05:34:e2:71:ab:59:6d:e0:45:b5:8b:be:9e:92:05:21: 30:6d:c4:ce:d1:6b:64:bb:31:29:a1:9b:7a:e2:f9:84:bd:87: 80:f6:e0:5b:57:e2:6f:58:7a:bf:4e:d0:38:99:ac:fb:28:00: cf:49:92:99:b5:08:b1:37:7a:fd:6b:7d:bd:7a:0f:24:e6:fa: 34:06:87:0a:7b:7c:d7:67:b5:b3:73:27:aa:3c:1d:50:10:68: ae:5d:9c:e8:9f:7c:96:7d:7f:f8:da:45:1d:e0:8c:a5:e3:ea: 18:7e:8f:c0:4b:34:1b:06:e2:68:b3:46:99:3e:63:d9:1e:3c: af:c4:7c:03:72:c5:75:0f:b4:d3:74:4d:48:60:03:68:96:1a: 6d:4b:dc:96:52:55:bc:fc:af:f4:b4:b7:67:70:11:9d:b8:3f: c7:ae:17:64:82:69:89:ee:db:60:33:aa:fa:c4:a0:a2:26:03: 2d:1b:dc:cc:65:3a:5c:19:79:7a:6f:26:1d:27:ff:68:1e:86: fd:2d:c9:44:37:a4:28:2b:83:ad:82:be:29:3e:e2:f2:6a:9b: d9:63:28:bc:b1:24:12:0a:66:8f:d4:ca:e8:a2:e3:29:f6:3b: 7b:15:ea:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/+rwdfOiXOqJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NGM4ZjZjODYtMDM4NS00MzM4LTllYTUtNDc1ZmFhNDZjYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNbK7fpwPu1FIOrt7EpaeXP0feT6dxXpmEF9 3VxdYCTdCIHDSSD5lz8BMxRYSgJ+9Y+M2TAq3bzSZk/fptBlVE+kl79Qvntgg47j NPP/+I/eLxs6OlPitB8YjBfdG3OdEIupA35tDhmVTUw+Ww1MwYXl9dp5TWHzrvJK lGTkpYPUyq17z/eo5r0c+jf9dq16jQcRqSN+4Usv14RqEFD0IkP0mAm6GExUpnrb lqzX6q7bLRduRY1obum7sWshoVCEBmMChjZHgRM2VRPE+si0tqlRs0m8yJMEfb2D 4XuLxepr3d0Kpo2/6WUAii73XPsWDwKSxy159GGpGUaCvVLO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+MIaGBtGU/SFS0M94rmgJJ1BzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZmRkMGNmYjctNjNlMy0z YzQxLThmMWQtNDUyYWY5NDllNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrsdZt6+94GVXDDGHyZC4a7sHR5BTTicatZbeBFtYu+npIFITBtxM7R a2S7MSmhm3ri+YS9h4D24FtX4m9Yer9O0DiZrPsoAM9Jkpm1CLE3ev1rfb16DyTm +jQGhwp7fNdntbNzJ6o8HVAQaK5dnOiffJZ9f/jaRR3gjKXj6hh+j8BLNBsG4miz Rpk+Y9kePK/EfANyxXUPtNN0TUhgA2iWGm1L3JZSVbz8r/S0t2dwEZ24P8euF2SC aYnu22AzqvrEoKImAy0b3MxlOlwZeXpvJh0n/2gehv0tyUQ3pCgrg62Cvik+4vJq m9ljKLyxJBIKZo/Uyuii4yn2O3sV6uM= -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:19 2025 by rpki-client