$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa File: a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa (raw, json) Hash identifier: pwWKn/l3iXLumKhKhxPusYnvuhpWdWMyRw56cslby5c= Subject key identifier: 31:A8:5F:81:E5:EC:6F:71:AF:8E:8B:3B:9D:9C:DC:A6:D0:C4:40:5E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C72C9F8280558F3901500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:c9:f8:28:05:58:f3:90:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=db76747a-6a0c-4b9a-b647-f7e8f480c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:de:ca:d1:fd:5f:84:54:82:1d:a4:65:12: e8:2c:10:42:07:0f:85:fd:e7:6e:bf:75:fe:fb:9c: 39:d9:82:f1:d1:b4:aa:52:08:9b:c8:14:84:8a:c0: 1d:ea:b7:83:cd:67:70:16:d3:22:b9:8f:e7:75:19: 27:fe:8e:c0:5b:b2:28:9b:f6:63:ed:bf:ce:ad:2f: 21:fc:54:4e:b9:c4:79:c3:6e:3b:0b:b2:e8:8c:5b: 33:6a:cb:25:06:7f:33:9a:ca:61:3f:c7:a6:dc:0b: 09:0f:bc:49:b7:b9:f3:bf:0a:15:1a:1c:a2:b7:86: f4:44:c3:0e:1b:2e:56:f9:d6:0c:89:25:8a:a6:32: 66:ec:ff:70:fc:7d:85:0f:a0:9e:8c:55:86:32:11: c0:01:82:35:e8:63:c0:4d:d4:c0:95:67:53:e2:05: 34:a2:6d:b5:e4:f2:aa:1e:d3:2e:bd:0b:89:72:47: 83:de:30:d4:ff:c2:63:57:0c:96:b9:cb:b0:74:a2: 7e:12:82:87:c1:c7:fe:7e:af:e2:ce:f5:67:f8:be: 12:4b:bc:8b:e6:d6:1b:c1:34:1f:15:c8:d3:72:d5: 73:80:a5:21:16:5f:f9:74:5e:ca:74:47:ec:68:62: 76:23:4a:6a:e5:7b:c1:32:21:3d:ac:95:4e:b4:13: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:5F:81:E5:EC:6F:71:AF:8E:8B:3B:9D:9C:DC:A6:D0:C4:40:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c6:93:6c:e1:ba:b2:74:80:26:0f:fe:2e:d3:b6:08:70:b8: 6e:a6:8e:9c:58:47:52:7d:42:d0:1d:08:0f:1c:6d:47:b0:29: 2b:c0:40:28:f3:5a:f7:c7:3e:01:1d:4c:02:9f:3f:aa:cd:bf: a9:f9:b2:51:89:1a:68:ad:7e:5a:ba:26:9e:ba:88:d0:2b:66: 35:2c:2c:58:2a:91:3f:e2:97:aa:b3:67:4b:41:30:0d:33:5e: 71:42:7c:6a:73:a6:f6:cf:63:3e:54:13:b0:1e:96:d4:f6:d2: 09:db:8b:47:83:6f:58:bc:f5:5c:03:a8:c3:ae:cc:fc:9e:46: a5:fe:2a:43:b5:40:9e:67:53:4e:5b:fe:d9:43:95:21:5b:df: d0:f0:b4:50:b0:89:a5:99:e0:cb:03:72:06:35:bb:db:6b:ae: d4:db:8d:a9:59:fc:09:81:97:e2:ea:63:de:19:83:82:82:19: 73:a7:14:1d:aa:d8:98:11:a5:4c:05:77:67:07:29:57:42:1c: a4:3b:47:42:b2:3f:f2:ba:1f:1e:73:68:12:0f:5b:f3:93:92: 89:c5:cc:a8:8f:51:0e:07:d0:c9:93:56:99:4c:40:c3:e6:e9: 50:c6:87:f3:a0:45:5d:31:64:93:95:f2:85:7d:b9:60:82:a2: 56:5f:75:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHLJ+CgFWPOQFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGI3Njc0N2EtNmEwYy00YjlhLWI2NDctZjdlOGY0ODBjMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRPeytH9X4RUgh2kZRLoLBBCBw+F/eduv3X+ +5w52YLx0bSqUgibyBSEisAd6reDzWdwFtMiuY/ndRkn/o7AW7Iom/Zj7b/OrS8h /FROucR5w247C7LojFszasslBn8zmsphP8em3AsJD7xJt7nzvwoVGhyit4b0RMMO Gy5W+dYMiSWKpjJm7P9w/H2FD6CejFWGMhHAAYI16GPATdTAlWdT4gU0om215PKq HtMuvQuJckeD3jDU/8JjVwyWucuwdKJ+EoKHwcf+fq/izvVn+L4SS7yL5tYbwTQf FcjTctVzgKUhFl/5dF7KdEfsaGJ2I0pq5XvBMiE9rJVOtBO30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGoX4Hl7G9xr46LO52c3KbQxEBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTZiYThmMTgtY2I4ZC0z ZmQ3LWExYTUtNGFlZjI3ZGU5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrGk2zhurJ0gCYP/i7TtghwuG6mjpxYR1J9QtAdCA8cbUewKSvAQCjz WvfHPgEdTAKfP6rNv6n5slGJGmitflq6Jp66iNArZjUsLFgqkT/il6qzZ0tBMA0z XnFCfGpzpvbPYz5UE7AeltT20gnbi0eDb1i89VwDqMOuzPyeRqX+KkO1QJ5nU05b /tlDlSFb39DwtFCwiaWZ4MsDcgY1u9trrtTbjalZ/AmBl+LqY94Zg4KCGXOnFB2q 2JgRpUwFd2cHKVdCHKQ7R0KyP/K6Hx5zaBIPW/OTkonFzKiPUQ4H0MmTVplMQMPm 6VDGh/OgRV0xZJOV8oV9uWCColZfdZE= -----END CERTIFICATE-----Generated at Mon Apr 7 14:08:27 2025 by rpki-client