$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa File: d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa (raw, json) Hash identifier: oxsl6WMwyh5/o3UVppFU0Jg02I7TmAfsREP2vi0PubM= Subject key identifier: 6A:56:73:E9:36:23:9F:74:5B:F5:A8:86:06:22:AE:94:C5:AB:5D:75 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EBC280BCC8FAFC7F3080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:eb:c2:80:bc:c8:fa:fc:7f:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=4231001e-d7f6-45a5-9c98-e56a5fca3f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:b9:58:7b:5d:86:da:a2:93:17:78:70:09: 7f:a7:9f:82:e3:fa:eb:7b:f8:0d:e0:dc:b5:ec:38: ac:d3:9e:78:26:4d:45:de:80:26:2a:d3:3d:e6:93: d7:5e:b8:c4:cf:20:da:f2:2e:87:7d:f6:ac:6b:c8: ea:77:35:ae:67:c1:cf:76:4d:14:04:b7:b3:60:f1: a7:d2:c2:29:f2:69:64:78:24:fb:21:70:8b:99:a1: 95:11:60:bb:0a:db:56:f6:c3:e2:23:fb:2a:90:0c: 2b:0f:97:14:64:45:05:8a:ff:ba:23:56:0e:6c:1d: ac:a2:59:92:ac:03:4a:98:1b:f3:ed:b3:c7:4d:ca: 42:cb:fb:f5:82:d8:3c:be:26:fd:dc:84:85:1f:02: 84:fd:bc:1e:c7:76:cb:ac:dd:27:63:cc:38:7a:11: b1:c6:19:fc:34:55:c5:c7:f1:bd:e9:96:65:1d:e7: 97:53:19:b5:d2:1b:b5:a8:40:14:8e:a1:36:d0:ab: ec:7c:c9:67:4f:aa:d5:cc:a6:be:a4:4a:a0:24:5a: 51:cd:48:c1:3c:fd:d6:6f:d9:46:cb:4a:f1:92:4a: 32:ab:26:f4:b7:71:a9:17:a8:fa:6b:96:cf:cb:59: b7:a1:5a:09:ad:bc:d5:9b:bd:0e:83:06:86:14:a7: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:73:E9:36:23:9F:74:5B:F5:A8:86:06:22:AE:94:C5:AB:5D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f9:00:d9:8a:8d:a6:c0:bd:fa:75:71:af:8e:10:a2:f0:0b: 35:62:26:79:04:12:80:91:b0:7e:52:87:2a:72:48:59:4b:8d: 74:2a:ce:71:7d:85:04:cb:45:7b:c3:73:71:f7:94:0b:11:3e: 8d:60:a4:f8:8a:15:7a:1c:a6:16:a5:cc:b2:91:db:a6:53:40: 4e:89:14:8a:be:05:fa:b6:57:fb:bc:18:10:e6:54:a5:5a:d0: 19:62:f8:c1:b6:1e:b9:a9:54:3c:97:d8:75:2e:01:4d:b0:a1: 1f:f3:6a:d2:e1:80:c7:50:bf:9f:3c:cc:54:94:d4:53:92:6b: 80:c2:50:6d:2a:31:44:33:04:e1:f1:9c:72:41:6f:93:07:f2: 30:c6:7e:34:f5:b4:1d:a8:d1:ee:61:ce:9d:59:a2:c1:b9:c6: 2c:e7:c7:ac:a1:99:04:cb:8c:b8:7d:68:c2:6b:75:40:b2:9a: 77:ad:ac:4a:fc:a1:04:77:41:03:65:6a:bc:34:aa:1e:c0:1d: 3e:62:4e:5e:9f:15:a9:8c:5c:6c:6e:29:74:b3:74:97:9f:d2: 80:d2:a1:b9:d3:3e:f0:f0:e7:7f:ed:e2:ea:70:9e:02:1f:9f: 54:1f:ec:e6:98:66:f1:6b:24:bb:da:04:20:78:17:23:d8:da: aa:28:51:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uvCgLzI+vx/MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NDIzMTAwMWUtZDdmNi00NWE1LTljOTgtZTU2YTVmY2EzZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiO5WHtdhtqikxd4cAl/p5+C4/rre/gN4Ny1 7Dis0554Jk1F3oAmKtM95pPXXrjEzyDa8i6Hffasa8jqdzWuZ8HPdk0UBLezYPGn 0sIp8mlkeCT7IXCLmaGVEWC7CttW9sPiI/sqkAwrD5cUZEUFiv+6I1YObB2solmS rANKmBvz7bPHTcpCy/v1gtg8vib93ISFHwKE/bwex3bLrN0nY8w4ehGxxhn8NFXF x/G96ZZlHeeXUxm10hu1qEAUjqE20KvsfMlnT6rVzKa+pEqgJFpRzUjBPP3Wb9lG y0rxkkoyqyb0t3GpF6j6a5bPy1m3oVoJrbzVm70OgwaGFKcL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpWc+k2I590W/WohgYirpTFq111MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDJiYWIxZjgtMjVjYS0z ZDA3LWFlOWItOGY4NWM0YzVhYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr5ANmKjabAvfp1ca+OEKLwCzViJnkEEoCRsH5ShypySFlLjXQqznF9 hQTLRXvDc3H3lAsRPo1gpPiKFXocphalzLKR26ZTQE6JFIq+Bfq2V/u8GBDmVKVa 0Bli+MG2HrmpVDyX2HUuAU2woR/zatLhgMdQv588zFSU1FOSa4DCUG0qMUQzBOHx nHJBb5MH8jDGfjT1tB2o0e5hzp1ZosG5xiznx6yhmQTLjLh9aMJrdUCymnetrEr8 oQR3QQNlarw0qh7AHT5iTl6fFamMXGxuKXSzdJef0oDSobnTPvDw53/t4upwngIf n1Qf7OaYZvFrJLvaBCB4FyPY2qooUUM= -----END CERTIFICATE-----Generated at Mon Apr 7 14:12:02 2025 by rpki-client