$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa File: 02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json) Hash identifier: VkGTCKdIx0AQIHq/UBXLmmKUvk2xXCZ7sXr3CuuDEgE= Subject key identifier: E2:E6:21:28:EA:8C:1E:51:B1:B6:37:F4:E8:E3:80:14:AB:ED:25:8B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C72B89AA811F5EC3F4E80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:b8:9a:a8:11:f5:ec:3f:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e42a477a-b565-4645-ae1f-808bc7bd3a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:85:7c:e7:28:85:15:75:e7:63:12:6d:d1: 33:38:c5:5a:dd:dd:3f:f0:e6:06:6c:c0:dc:c5:25: 4c:ad:9f:f7:39:98:c6:4a:c6:65:41:c1:9a:24:35: 27:dd:83:b7:7e:86:8c:8a:a7:ad:9f:05:c1:8a:76: ae:ad:c0:f5:8c:e1:1f:99:76:cb:8f:73:64:60:59: 9e:44:c1:ba:f7:e3:ba:15:24:bc:71:8a:c6:d7:db: 2c:f5:9c:ab:08:c6:d7:91:2f:3a:ee:6a:3a:d5:1e: 8b:2d:0a:f3:a7:62:89:06:9d:17:ea:1b:61:b2:09: 26:8c:c8:41:33:a2:83:f3:4d:f8:f3:01:78:31:9b: e7:e8:48:c9:d2:99:02:f1:6d:c0:cf:8c:74:8a:80: ab:72:b7:e8:56:cc:88:57:eb:3c:af:55:cc:47:6a: 42:a4:68:2a:73:fd:8a:a9:05:3e:d2:79:3c:68:0c: 39:5e:53:16:5c:cc:13:46:e0:9d:97:99:fc:e9:99: 36:a1:75:e1:7b:a2:f3:fe:94:85:0e:44:d3:8b:df: 5d:a0:af:e5:0a:9f:14:81:40:8e:e0:46:40:15:13: 20:9a:fe:48:95:6a:34:78:cc:1e:26:bd:e4:ee:5f: 74:34:73:2a:af:b2:a6:1b:88:f1:92:42:fa:c0:07: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:21:28:EA:8C:1E:51:B1:B6:37:F4:E8:E3:80:14:AB:ED:25:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fa:a3:90:06:54:48:58:d4:f4:0b:d9:64:34:ac:7f:82:67: f7:f7:4c:86:27:de:7a:e3:94:13:76:66:21:33:74:7c:01:1e: 9e:dc:31:3c:c8:45:ce:7f:19:3a:22:8b:69:43:0c:44:49:86: 41:5c:ee:7a:7f:2b:7e:05:fc:9a:05:ec:8c:30:e5:be:9e:07: ae:4c:bb:a1:87:f8:11:59:d8:c4:c5:04:49:6a:82:17:ab:9b: e8:d4:93:63:49:74:74:10:08:5e:11:87:e3:4e:fd:b4:cc:ef: 28:ce:5d:4c:67:93:2f:95:97:4e:b6:19:b0:bf:a3:0c:5a:0b: d5:ba:03:9d:60:bc:fd:09:c9:2a:f2:d3:f9:88:28:c5:e7:6b: e5:9c:9c:48:39:a5:e2:fa:05:e7:07:77:44:f3:15:7d:57:f9: f0:b3:8d:88:30:1f:f0:78:b1:2c:91:bc:1b:b7:20:36:e9:7c: 0f:7d:34:e6:de:20:05:2e:4a:05:db:03:13:1e:64:ae:1b:82: 1f:c5:c7:b8:a7:e3:c5:d2:4f:7b:ff:43:ae:39:6a:24:21:8d: 4f:4a:f3:84:ef:19:e3:86:48:3d:a0:cf:40:51:a4:51:65:2d: 94:cd:8a:f9:a6:b0:87:4c:36:0f:06:7f:d1:1a:c2:df:b6:90: ad:e1:22:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHK4mqgR9ew/ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQyYTQ3N2EtYjU2NS00NjQ1LWFlMWYtODA4YmM3YmQzYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwCFfOcohRV152MSbdEzOMVa3d0/8OYGbMDc xSVMrZ/3OZjGSsZlQcGaJDUn3YO3foaMiqetnwXBinaurcD1jOEfmXbLj3NkYFme RMG69+O6FSS8cYrG19ss9ZyrCMbXkS867mo61R6LLQrzp2KJBp0X6hthsgkmjMhB M6KD80348wF4MZvn6EjJ0pkC8W3Az4x0ioCrcrfoVsyIV+s8r1XMR2pCpGgqc/2K qQU+0nk8aAw5XlMWXMwTRuCdl5n86Zk2oXXhe6Lz/pSFDkTTi99doK/lCp8UgUCO 4EZAFRMgmv5IlWo0eMweJr3k7l90NHMqr7KmG4jxkkL6wAd46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLmISjqjB5RsbY39OjjgBSr7SWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDI2NTBjZWItMDA0NC0z ZDcwLWI1NjItNzMxYzViODI0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/6o5AGVEhY1PQL2WQ0rH+CZ/f3TIYn3nrjlBN2ZiEzdHwBHp7cMTzI Rc5/GToii2lDDERJhkFc7np/K34F/JoF7Iww5b6eB65Mu6GH+BFZ2MTFBElqgher m+jUk2NJdHQQCF4Rh+NO/bTM7yjOXUxnky+Vl062GbC/owxaC9W6A51gvP0JySry 0/mIKMXna+WcnEg5peL6BecHd0TzFX1X+fCzjYgwH/B4sSyRvBu3IDbpfA99NObe IAUuSgXbAxMeZK4bgh/Fx7in48XST3v/Q645aiQhjU9K84TvGeOGSD2gz0BRpFFl LZTNivmmsIdMNg8Gf9Eawt+2kK3hIvk= -----END CERTIFICATE-----Generated at Mon Apr 7 14:26:33 2025 by rpki-client