$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: 6Xe2UlBu5voXL/9oNH4Nu8+lrb9pJ/r5QrjDre9mBR4= Subject key identifier: BF:6D:71:F1:FB:CA:6D:63:2F:C9:22:63:B2:84:D4:E4:B5:CE:43:11 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6F215C27DEE6ACEF7FF00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f2:15:c2:7d:ee:6a:ce:f7:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=252acf31-6269-4c23-ae18-900d8b8df36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:49:15:fe:27:fe:a4:44:74:a2:86:04:05: 2c:38:a0:8b:e0:df:95:28:71:a4:5c:65:50:6e:f0: 23:94:1c:de:21:37:2f:70:72:a2:ce:55:f6:e6:b5: 9f:8b:58:99:05:32:48:51:10:d3:e9:09:50:7a:88: 64:5f:e8:bd:f1:5e:17:b3:d3:0e:88:83:95:ea:15: 68:b4:e2:61:84:b4:17:2b:92:99:6d:72:3a:16:2a: b9:e1:56:fe:b6:69:3a:10:71:94:ea:c4:8a:16:80: c6:37:1b:ff:79:d6:43:01:31:fe:51:52:e4:b5:b5: b4:7a:26:3f:ed:98:c5:3d:76:58:66:43:9a:66:12: 5d:44:35:f6:ad:16:2f:95:bb:78:1e:77:16:0a:c6: ed:32:6f:e1:d8:04:c3:77:9d:4a:0a:bf:fb:0a:92: 8a:e7:78:c3:02:3a:29:ad:8e:75:f5:93:92:ce:90: f3:ad:e1:44:e7:c9:75:c5:2d:0d:33:24:55:9c:3b: 34:fd:60:ea:87:d4:fe:12:6b:02:c6:96:bb:0b:9a: 7e:fc:a3:1a:b1:6d:e0:d7:34:e8:03:6c:e2:f6:95: 9d:7d:1c:6a:09:fd:4d:f6:68:96:de:27:5f:dc:72: 09:a2:a0:9a:e0:c2:2a:4c:e8:be:e7:3c:2c:0b:26: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:71:F1:FB:CA:6D:63:2F:C9:22:63:B2:84:D4:E4:B5:CE:43:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5a:e9:be:0e:25:0f:a1:16:8c:e7:41:06:9c:0c:08:d1:67: 82:c8:e1:e9:f6:ef:38:8c:04:04:dc:a6:cd:55:21:55:3b:cf: 3b:b5:0a:7d:20:41:5f:49:c8:b1:f0:4d:e0:38:2c:2a:ba:c1: b5:99:59:2d:77:01:e6:ab:e5:8c:88:f4:7f:5d:62:6c:aa:2f: 88:2b:b7:a3:9b:4c:22:ea:a6:5d:c5:67:6c:66:d8:5f:39:7f: 51:b8:89:ee:95:cd:45:21:1d:4e:05:ec:18:ad:47:74:da:3e: 15:0a:32:ed:1f:b6:64:fb:bc:5e:88:49:25:1d:4e:38:46:cf: 11:f1:12:d6:79:2e:7a:5a:ca:3a:55:9a:59:6d:21:82:a5:fb: 29:7a:20:ca:c9:be:1a:33:31:a3:0f:65:0a:65:9b:de:cd:4a: 57:d1:0a:c8:61:e1:f1:6c:e4:5c:70:3d:ab:9a:ab:83:a7:89: 30:5b:79:9d:e3:6a:9a:6f:2d:34:40:92:10:85:a6:1c:62:b2: 18:e1:a4:39:3e:d2:67:21:94:1a:ed:18:ef:5e:f3:df:22:e1: a7:21:cc:f6:3c:e1:24:a8:ac:05:37:15:1c:73:33:22:59:81: 49:cc:bb:40:63:b4:f5:0e:94:6c:fa:1f:ab:8a:bd:19:4c:57: 00:55:b9:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vIVwn3uas73/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MjUyYWNmMzEtNjI2OS00YzIzLWFlMTgtOTAwZDhiOGRmMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAistJFf4n/qREdKKGBAUsOKCL4N+VKHGkXGVQ bvAjlBzeITcvcHKizlX25rWfi1iZBTJIURDT6QlQeohkX+i98V4Xs9MOiIOV6hVo tOJhhLQXK5KZbXI6Fiq54Vb+tmk6EHGU6sSKFoDGNxv/edZDATH+UVLktbW0eiY/ 7ZjFPXZYZkOaZhJdRDX2rRYvlbt4HncWCsbtMm/h2ATDd51KCr/7CpKK53jDAjop rY519ZOSzpDzreFE58l1xS0NMyRVnDs0/WDqh9T+EmsCxpa7C5p+/KMasW3g1zTo A2zi9pWdfRxqCf1N9miW3idf3HIJoqCa4MIqTOi+5zwsCyY2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9tcfH7ym1jL8kiY7KE1OS1zkMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFa6b4OJQ+hFoznQQacDAjRZ4LI4en27ziMBATcps1VIVU7zzu1Cn0g QV9JyLHwTeA4LCq6wbWZWS13Aear5YyI9H9dYmyqL4grt6ObTCLqpl3FZ2xm2F85 f1G4ie6VzUUhHU4F7BitR3TaPhUKMu0ftmT7vF6ISSUdTjhGzxHxEtZ5LnpayjpV mlltIYKl+yl6IMrJvhozMaMPZQplm97NSlfRCshh4fFs5FxwPauaq4OniTBbeZ3j appvLTRAkhCFphxishjhpDk+0mchlBrtGO9e898i4achzPY84SSorAU3FRxzMyJZ gUnMu0BjtPUOlGz6H6uKvRlMVwBVueE= -----END CERTIFICATE-----Generated at Mon Apr 7 14:21:15 2025 by rpki-client