$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa File: 53da01e2-4fd1-3726-8525-261dfe0ace4c.roa (raw, json) Hash identifier: rhRBh5c6by06CNofO9FcV+dVXS+cV4soxje2B+SzLbo= Subject key identifier: 17:E0:4E:96:CD:A5:A1:6D:E5:CE:5B:1F:A8:74:28:A1:95:EB:20:AE Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C6C221D50CBE66B4E9290 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6c:22:1d:50:cb:e6:6b:4e:92:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=59700012-28a3-4796-b281-5bc447d4a416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:63:84:78:22:50:64:d5:67:38:1b:51:b7: bb:03:57:87:d2:f2:47:67:d4:66:28:ba:a2:1c:79: 16:f6:8d:ff:06:a6:43:54:bb:49:28:63:ff:9a:2e: 2a:31:a2:19:60:e3:a4:ae:a8:92:77:b6:d9:9a:a1: 45:ed:ef:e2:39:ec:c3:ba:53:ed:3b:e5:7c:a9:bc: 5e:be:6d:bc:7a:28:fd:4c:44:08:da:55:13:f9:5c: 5f:47:7c:98:e4:23:f6:24:85:52:5b:b4:0f:9f:13: b1:26:9e:41:8c:65:b9:1f:b6:02:5f:68:73:a6:ea: 57:01:3b:47:4e:cf:e7:c4:7e:62:da:5b:b0:87:ca: 36:f2:2a:0b:e6:ee:91:06:87:d2:13:86:b7:a1:77: 03:23:39:a4:ab:ef:a4:31:99:b8:82:32:12:35:ce: ea:1c:f1:29:db:d9:e4:9b:77:75:8e:a5:90:66:b5: a2:99:61:4b:0f:42:8a:66:45:6f:aa:99:80:be:c7: a6:5e:c2:df:19:42:d7:75:0b:1e:83:78:d3:6e:85: 60:56:1a:12:bc:5c:5d:4a:a7:16:6a:ea:a1:52:1a: ed:88:13:04:76:9b:25:53:b9:89:0a:15:0c:11:3e: fe:c2:12:97:12:ec:2d:52:7a:92:7d:b9:df:5a:a8: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:4E:96:CD:A5:A1:6D:E5:CE:5B:1F:A8:74:28:A1:95:EB:20:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:db:d8:75:14:f2:4e:7d:70:12:bf:e2:37:9b:60:bd:02:6d: aa:d9:ea:b5:19:50:60:aa:9b:28:03:00:7e:30:3b:4f:2b:17: 1e:73:f0:03:23:df:98:a9:61:7e:26:86:6a:c3:2e:6a:b3:53: b6:0c:33:e3:a4:10:c1:b1:cc:23:d0:c8:cf:fa:ed:05:03:fc: 94:23:d0:d8:fb:6c:89:0d:5d:48:45:50:cf:4d:07:9e:83:80: 8c:37:80:5b:85:23:2b:c8:32:a0:4c:9a:b7:0c:c5:16:6f:f2: 79:7c:b7:74:a1:d8:0c:f5:6c:8f:2c:24:21:a9:4a:b8:b7:2a: 32:b6:f2:61:11:4e:7f:ef:1b:3f:94:89:42:67:4e:ce:33:d2: 6c:98:6c:49:01:ac:f3:c6:d9:45:c7:bd:7e:09:c6:46:d2:55: 71:e0:98:a2:48:ab:c4:de:1b:ad:cc:77:78:94:6f:78:c1:a5: bc:6b:ed:35:e5:c1:a0:90:6a:d0:18:35:5e:99:9c:e5:03:47: 4e:60:5e:76:85:14:f1:fb:fb:03:9d:ea:d2:5a:0e:42:75:b4: ac:41:3a:a7:9d:6b:d1:87:a8:a0:a1:8b:fb:ab:4f:2b:3b:89: b2:16:50:a8:a0:73:3a:75:1f:23:39:db:9d:48:23:95:ce:7e: 93:08:c3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGwiHVDL5mtOkpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NTk3MDAwMTItMjhhMy00Nzk2LWIyODEtNWJjNDQ3ZDRhNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksNjhHgiUGTVZzgbUbe7A1eH0vJHZ9RmKLqi HHkW9o3/BqZDVLtJKGP/mi4qMaIZYOOkrqiSd7bZmqFF7e/iOezDulPtO+V8qbxe vm28eij9TEQI2lUT+VxfR3yY5CP2JIVSW7QPnxOxJp5BjGW5H7YCX2hzpupXATtH Ts/nxH5i2luwh8o28ioL5u6RBofSE4a3oXcDIzmkq++kMZm4gjISNc7qHPEp29nk m3d1jqWQZrWimWFLD0KKZkVvqpmAvsemXsLfGULXdQseg3jTboVgVhoSvFxdSqcW auqhUhrtiBMEdpslU7mJChUMET7+whKXEuwtUnqSfbnfWqi+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfgTpbNpaFt5c5bH6h0KKGV6yCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTNkYTAxZTItNGZkMS0z NzI2LTg1MjUtMjYxZGZlMGFjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7b2HUU8k59cBK/4jebYL0CbarZ6rUZUGCqmygDAH4wO08rFx5z8AMj 35ipYX4mhmrDLmqzU7YMM+OkEMGxzCPQyM/67QUD/JQj0Nj7bIkNXUhFUM9NB56D gIw3gFuFIyvIMqBMmrcMxRZv8nl8t3Sh2Az1bI8sJCGpSri3KjK28mERTn/vGz+U iUJnTs4z0myYbEkBrPPG2UXHvX4JxkbSVXHgmKJIq8TeG63Md3iUb3jBpbxr7TXl waCQatAYNV6ZnOUDR05gXnaFFPH7+wOd6tJaDkJ1tKxBOqeda9GHqKChi/urTys7 ibIWUKigczp1HyM5251II5XOfpMIw6w= -----END CERTIFICATE-----Generated at Mon Apr 7 14:21:15 2025 by rpki-client