$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa File: 984d31cc-6f63-319f-b84b-b508e59b50d9.roa (raw, json) Hash identifier: rAD9Yi48RsBIn/r4MqN5kYPaF2Zfhrmt+PqC2gLce9I= Subject key identifier: E3:D7:6C:E1:DC:12:1D:99:DF:A7:75:20:15:B8:90:40:C2:21:BA:E0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C727D834EEDAD68501580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:7d:83:4e:ed:ad:68:50:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=8ac8f0f2-2327-469b-ad84-6fc2c41f6125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:e5:23:d3:a7:d8:60:c1:c1:5b:c8:7e:41: fe:29:02:9d:6e:ee:53:00:2a:df:b9:83:50:17:21: 9e:9c:4e:31:e7:d9:5b:2c:38:0c:76:11:35:03:b9: 1f:77:66:24:cd:fb:91:4a:fd:fe:ad:f6:8d:c7:75: 92:f3:63:ba:cb:5a:c4:87:f9:6d:7f:19:08:f8:4c: 2d:d8:5f:ca:07:e7:cb:54:26:b7:ac:53:ac:e9:06: cb:1b:75:26:60:69:46:d6:72:cf:6f:da:20:b5:7a: 6a:35:5e:38:85:60:74:1d:99:9a:da:69:ff:42:34: 36:96:87:01:d0:58:11:11:da:da:98:5e:c7:4d:b6: 3f:c2:af:b5:c6:0d:0e:7d:ac:77:83:5b:ab:7c:f5: 66:de:e3:49:92:60:3d:14:98:0e:7a:00:f3:d3:05: 15:85:87:9c:ca:53:22:ac:52:9a:08:84:53:88:68: 64:4f:05:9c:98:95:df:36:1a:33:a6:a5:2a:70:1e: b9:99:d7:ef:1b:9d:83:67:f9:50:f2:a6:31:6c:83: 60:35:e0:f0:92:2e:15:13:e7:3a:25:a0:98:42:18: 12:85:4b:ab:cf:c9:f3:9e:e6:57:69:a6:cb:37:d5: 6e:df:3c:c1:67:2e:00:55:b4:38:d7:e6:0e:19:2e: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D7:6C:E1:DC:12:1D:99:DF:A7:75:20:15:B8:90:40:C2:21:BA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/984d31cc-6f63-319f-b84b-b508e59b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ea:60:29:21:d6:f6:7c:4c:cd:7e:ce:e9:46:1d:5f:f6:c9: df:e0:82:aa:e2:b7:5e:fc:0b:5c:91:ef:aa:9b:b6:bd:46:23: 8c:2f:20:29:e2:e0:08:21:5a:02:f6:74:be:4b:ef:bc:68:b1: 82:27:3e:d0:c9:d8:c8:f7:c2:9f:1f:1f:5e:af:80:7e:28:9e: cd:aa:6f:60:49:87:1b:a3:10:65:d5:b5:c0:9b:aa:75:f8:42: 17:a0:8c:03:bf:9d:36:f8:60:7c:73:a4:c4:73:d2:e6:5f:81: 2f:60:30:21:5a:3e:cf:12:b7:68:f7:6b:b4:c4:12:b9:0a:de: c2:a8:a3:b3:eb:b0:ff:60:3f:f7:5f:b7:27:cd:9c:de:ce:1d: 8f:13:2c:9e:79:ef:7b:03:c6:1a:d3:d4:01:f4:b7:d7:1d:3a: 66:63:13:1d:91:21:b0:f9:bc:f7:3c:a2:7c:1e:77:80:38:fd: f7:d9:b0:29:d8:51:8f:8e:22:1d:20:5f:58:d4:86:af:90:fa: e7:2c:27:9b:e2:8a:fd:3a:6d:54:82:00:cf:d5:28:2a:c1:37: 2d:37:81:7e:46:2a:43:e4:16:42:c5:ea:bd:64:ae:9c:f8:d7: 38:43:32:4e:7f:8f:87:58:71:f6:3e:43:19:8b:44:27:99:97: 1f:6e:b4:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHJ9g07trWhQFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OGFjOGYwZjItMjMyNy00NjliLWFkODQtNmZjMmM0MWY2MTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bzlI9On2GDBwVvIfkH+KQKdbu5TACrfuYNQ FyGenE4x59lbLDgMdhE1A7kfd2YkzfuRSv3+rfaNx3WS82O6y1rEh/ltfxkI+Ewt 2F/KB+fLVCa3rFOs6QbLG3UmYGlG1nLPb9ogtXpqNV44hWB0HZma2mn/QjQ2locB 0FgREdramF7HTbY/wq+1xg0Ofax3g1urfPVm3uNJkmA9FJgOegDz0wUVhYecylMi rFKaCIRTiGhkTwWcmJXfNhozpqUqcB65mdfvG52DZ/lQ8qYxbINgNeDwki4VE+c6 JaCYQhgShUurz8nznuZXaabLN9Vu3zzBZy4AVbQ41+YOGS4ZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPXbOHcEh2Z36d1IBW4kEDCIbrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTg0ZDMxY2MtNmY2My0z MTlmLWI4NGItYjUwOGU1OWI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjqYCkh1vZ8TM1+zulGHV/2yd/ggqrit178C1yR76qbtr1GI4wvICni 4AghWgL2dL5L77xosYInPtDJ2Mj3wp8fH16vgH4ons2qb2BJhxujEGXVtcCbqnX4 QhegjAO/nTb4YHxzpMRz0uZfgS9gMCFaPs8St2j3a7TEErkK3sKoo7PrsP9gP/df tyfNnN7OHY8TLJ5573sDxhrT1AH0t9cdOmZjEx2RIbD5vPc8onwed4A4/ffZsCnY UY+OIh0gX1jUhq+Q+ucsJ5viiv06bVSCAM/VKCrBNy03gX5GKkPkFkLF6r1krpz4 1zhDMk5/j4dYcfY+QxmLRCeZlx9utPo= -----END CERTIFICATE-----Generated at Mon Apr 7 14:18:39 2025 by rpki-client