$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json) Hash identifier: 83BgsXfPKJosLSIdAKXc/9o2QiGu5MWek+OwJTIOvWc= Subject key identifier: 5D:53:3F:1E:C9:47:CC:4A:CC:9A:4A:EF:55:05:2D:97:65:31:7C:85 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C7299BBC4334954F8E680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:99:bb:c4:33:49:54:f8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=be08fc87-aeb5-4eed-9a51-344b6290761f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:4a:28:e7:4c:17:63:26:7a:b6:34:2f:ca: 09:e2:c5:0f:95:d0:41:f7:40:54:51:03:cb:8e:87: a4:d6:b1:4d:41:84:3c:32:1c:3f:90:d4:b7:e9:3a: 75:6e:cf:8e:03:3d:bc:76:64:74:51:1e:20:02:89: c2:d6:42:3d:95:6f:7f:b5:1c:ad:4c:8c:24:fb:2a: 70:0c:ae:6e:82:19:a8:32:93:80:97:33:32:7c:2b: a5:39:c8:c4:a1:cb:ac:9d:2d:72:3c:dd:11:4d:15: e9:ce:8e:d5:12:29:d3:ca:4c:bb:cb:cf:bb:67:1e: c5:63:0e:ed:ef:5d:e9:06:81:2a:fa:07:7a:9b:1b: 41:e0:15:5c:de:af:a3:8c:b6:49:2c:ea:9e:7e:25: fe:d8:f2:65:d3:7c:f9:33:8a:97:9f:ef:cb:bb:c4: 26:11:74:73:91:42:a1:5d:be:40:36:be:eb:66:18: c7:9d:e8:97:31:f0:c4:4e:ab:9f:a8:59:40:22:64: 90:4c:75:0c:d7:8b:0d:46:b9:37:6d:9f:39:56:3d: 92:c5:b6:99:45:30:43:f0:97:76:c0:eb:25:b5:2e: 1e:cf:3e:ea:5c:ea:60:ce:05:e7:8a:aa:cc:e1:2c: 26:87:57:79:1c:66:ee:d2:fe:07:00:e2:15:63:bf: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:3F:1E:C9:47:CC:4A:CC:9A:4A:EF:55:05:2D:97:65:31:7C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8b:a4:05:17:ed:4d:1c:18:40:fb:2d:18:6b:92:e7:97:bf: bb:6a:da:da:da:3e:be:4c:87:4e:1c:3f:b1:bd:7f:de:55:1f: 42:fa:c8:c0:7b:25:b7:4b:fd:7e:d3:85:34:44:47:95:7d:8f: 44:d4:0c:85:b2:1d:6a:d7:85:c0:5f:ff:3c:7b:01:7d:1d:7e: d7:39:62:4b:1a:39:f0:28:39:18:2a:a1:8e:61:af:9d:88:e4: 6b:b5:9b:aa:c9:3e:a8:06:5e:4b:90:04:7d:82:e4:5f:f7:98: da:3f:6b:2b:cf:75:f2:bd:aa:4e:e6:ee:e4:84:c3:03:f0:50: 16:b1:04:20:1e:26:5f:be:93:34:b1:b4:db:b6:91:e0:20:1f: 3f:50:3f:e2:dd:32:ed:48:8a:7a:06:7a:9b:ed:fd:ea:a6:7b: 62:e1:4e:e3:81:8f:43:43:46:55:79:3d:d4:b9:07:fe:cb:81: 50:8c:39:5f:71:a0:c4:cb:64:7b:44:65:dc:1b:86:20:14:c1: 08:9e:d8:ba:a4:da:02:ae:dd:1f:a9:a2:e2:f0:99:99:98:42: 42:30:dd:63:7c:ff:38:fc:64:46:32:e2:82:4c:30:ef:a7:42: e8:65:69:dc:72:50:ec:fa:7f:be:75:47:99:17:1d:f5:7a:9b: 9b:c8:b6:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHKZu8QzSVT45oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YmUwOGZjODctYWViNS00ZWVkLTlhNTEtMzQ0YjYyOTA3NjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju5KKOdMF2MmerY0L8oJ4sUPldBB90BUUQPL joek1rFNQYQ8Mhw/kNS36Tp1bs+OAz28dmR0UR4gAonC1kI9lW9/tRytTIwk+ypw DK5ughmoMpOAlzMyfCulOcjEocusnS1yPN0RTRXpzo7VEinTyky7y8+7Zx7FYw7t 713pBoEq+gd6mxtB4BVc3q+jjLZJLOqefiX+2PJl03z5M4qXn+/Lu8QmEXRzkUKh Xb5ANr7rZhjHneiXMfDETqufqFlAImSQTHUM14sNRrk3bZ85Vj2SxbaZRTBD8Jd2 wOsltS4ezz7qXOpgzgXniqrM4Swmh1d5HGbu0v4HAOIVY797QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1TPx7JR8xKzJpK71UFLZdlMXyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODVlOWJmZGItMzJjYi0z M2ZkLWIzZjctYWYzZjY0ODViYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGLpAUX7U0cGED7LRhrkueXv7tq2traPr5Mh04cP7G9f95VH0L6yMB7 JbdL/X7ThTRER5V9j0TUDIWyHWrXhcBf/zx7AX0dftc5YksaOfAoORgqoY5hr52I 5Gu1m6rJPqgGXkuQBH2C5F/3mNo/ayvPdfK9qk7m7uSEwwPwUBaxBCAeJl++kzSx tNu2keAgHz9QP+LdMu1IinoGepvt/eqme2LhTuOBj0NDRlV5PdS5B/7LgVCMOV9x oMTLZHtEZdwbhiAUwQie2Lqk2gKu3R+pouLwmZmYQkIw3WN8/zj8ZEYy4oJMMO+n QuhladxyUOz6f751R5kXHfV6m5vItsw= -----END CERTIFICATE-----Generated at Mon Apr 7 14:12:04 2025 by rpki-client