$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: dOlVGHKFfRu2YTk5UbWWGPyG9mdzq20m2GLnP3h7NGI= Subject key identifier: 5C:4E:E9:B3:FD:6D:79:18:C0:28:98:FA:38:CC:D4:50:30:11:44:F3 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C71F23687A978B232CF80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:71:f2:36:87:a9:78:b2:32:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=fcc9bf02-3c7f-47d4-97cb-bd9f0624adc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:f8:3a:63:90:5f:1a:6b:ce:0a:da:2b:8f: 0e:7d:94:fa:29:2e:eb:98:07:f7:04:63:1e:60:58: 9d:ad:56:d8:20:0e:b4:98:aa:54:af:ab:d4:8c:aa: 47:a0:07:ae:47:21:a8:7c:54:d6:41:93:c2:ef:18: 62:c4:f6:21:92:3c:06:0b:64:8f:e1:a4:2a:cb:5d: e8:05:3b:0a:f6:fc:e7:f3:ac:8b:c4:9e:f7:f8:08: cc:32:af:f8:c9:d3:bf:fb:f5:04:27:8f:52:40:5e: 02:2c:fd:c1:30:82:8e:ed:06:28:c7:68:ff:6e:6c: a3:5a:d1:bf:ff:1b:43:e0:9d:ed:64:99:82:20:3b: 34:54:d0:a6:3e:a7:aa:82:fa:a6:de:02:0b:e6:9c: 16:42:22:29:e5:9e:0f:38:c4:a1:ec:79:07:d2:c5: 22:f3:1a:f9:57:ea:e8:84:17:6e:be:1c:00:db:f4: a9:66:05:02:10:f8:eb:21:64:f2:2d:37:4c:ad:58: ad:dd:f5:29:63:e7:72:7d:5c:a8:16:b2:cc:9c:4f: 8a:e3:55:db:b5:80:70:50:37:d4:66:bb:55:a8:b8: 01:ea:3d:69:77:60:01:73:72:7f:e4:4c:b7:4c:52: 12:2b:bf:f5:2d:f5:a0:12:50:68:21:ee:ff:e0:68: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:E9:B3:FD:6D:79:18:C0:28:98:FA:38:CC:D4:50:30:11:44:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:64:3a:eb:93:0b:7f:66:f9:a7:73:01:3c:e7:39:10:c7:01: e2:60:b5:11:2b:c8:71:54:d0:54:1e:ba:44:3d:a2:45:6f:09: 81:3e:3f:57:6f:e8:95:7c:79:26:25:7e:d4:4d:2d:b6:34:34: d5:0e:34:5c:a8:8c:f7:72:d1:1c:74:ea:e3:d1:00:6c:67:01: 08:01:6c:9a:07:b7:79:a2:d9:fa:72:69:20:3b:b1:ed:13:da: c4:c4:18:b6:c8:fc:69:de:ae:9f:29:fd:b4:9d:26:85:52:5b: 19:3d:60:f5:c4:3e:93:bd:ec:43:90:2b:40:27:d7:56:75:14: 8b:3a:b4:ce:a2:a0:1c:7e:f1:e4:6f:ad:9c:df:8e:89:26:17: 4c:7a:61:7c:69:ab:33:bc:3c:98:53:dc:30:99:3a:88:0f:39: a9:00:a5:d6:57:5e:1e:5f:cb:9d:3e:84:e5:fb:66:b2:43:13: 41:79:25:e7:64:3d:a2:53:35:9b:dd:81:5b:6a:d2:ce:7f:ad: 62:88:3f:a9:1a:f7:b5:61:07:f3:f7:7f:27:b4:06:4b:dc:10: 81:b4:69:62:50:25:f0:79:d1:47:7e:2e:36:58:cb:a0:b2:37: da:e6:01:20:71:11:7c:26:d4:bf:92:2a:a9:83:c5:47:29:fc: 9f:bd:b8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHHyNoepeLIyz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmNjOWJmMDItM2M3Zi00N2Q0LTk3Y2ItYmQ5ZjA2MjRhZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYf4OmOQXxprzgraK48OfZT6KS7rmAf3BGMe YFidrVbYIA60mKpUr6vUjKpHoAeuRyGofFTWQZPC7xhixPYhkjwGC2SP4aQqy13o BTsK9vzn86yLxJ73+AjMMq/4ydO/+/UEJ49SQF4CLP3BMIKO7QYox2j/bmyjWtG/ /xtD4J3tZJmCIDs0VNCmPqeqgvqm3gIL5pwWQiIp5Z4POMSh7HkH0sUi8xr5V+ro hBduvhwA2/SpZgUCEPjrIWTyLTdMrVit3fUpY+dyfVyoFrLMnE+K41XbtYBwUDfU ZrtVqLgB6j1pd2ABc3J/5Ey3TFISK7/1LfWgElBoIe7/4GisgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxO6bP9bXkYwCiY+jjM1FAwEUTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9kOuuTC39m+adzATznORDHAeJgtREryHFU0FQeukQ9okVvCYE+P1dv 6JV8eSYlftRNLbY0NNUONFyojPdy0Rx06uPRAGxnAQgBbJoHt3mi2fpyaSA7se0T 2sTEGLbI/Gnerp8p/bSdJoVSWxk9YPXEPpO97EOQK0An11Z1FIs6tM6ioBx+8eRv rZzfjokmF0x6YXxpqzO8PJhT3DCZOogPOakApdZXXh5fy50+hOX7ZrJDE0F5Jedk PaJTNZvdgVtq0s5/rWKIP6ka97VhB/P3fye0BkvcEIG0aWJQJfB50Ud+LjZYy6Cy N9rmASBxEXwm1L+SKqmDxUcp/J+9uGQ= -----END CERTIFICATE-----Generated at Mon Apr 7 14:06:29 2025 by rpki-client