$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa File: ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa (raw, json) Hash identifier: HO3dp/smYFoy5/5Q/Sm/x1bSqKRj3vRmex7380I/Q2w= Subject key identifier: 41:13:1E:4D:35:0E:2C:B3:C8:AE:5F:97:DD:42:3D:C1:D0:B0:60:B4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C728A8B8A16F12AA4F280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:8a:8b:8a:16:f1:2a:a4:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7b3335f7-a706-440d-a1ad-a23b49b21394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:c0:67:5e:80:e4:37:57:e4:35:8b:48:e6: 32:2d:06:34:92:90:12:41:9b:27:6a:d0:c2:70:1a: 1e:25:be:8b:fd:64:da:fb:77:93:cc:d1:8c:be:69: cb:97:61:20:a4:90:ec:29:ac:cf:ee:3b:8a:4b:bc: 4c:e4:a0:1c:d8:92:19:51:aa:30:18:6a:31:90:0c: c2:f0:62:c9:50:52:13:5b:6e:bc:8f:52:32:cf:cb: 0f:27:08:a8:83:31:f7:3d:80:e3:01:34:43:b5:ca: fb:39:fb:4a:31:b9:fe:25:03:ec:52:48:d5:d4:b7: 89:77:27:3c:73:45:c9:2b:0d:a6:f3:0b:84:75:d6: 51:7d:f8:44:f9:4a:5e:52:27:14:de:ef:51:c8:20: 44:f8:34:49:c5:dc:44:40:d3:76:d9:d8:14:e2:f0: 31:d1:9c:91:53:82:78:8b:2f:e4:06:f9:92:a0:03: ac:72:5c:a3:fd:e6:0b:61:69:5e:23:22:e7:68:e6: c4:3f:5c:8f:9a:4b:7b:9f:e7:61:64:73:9c:d3:f4: 46:4f:62:10:f1:cf:73:9b:53:bc:fb:de:45:d6:8a: 0e:dc:c6:89:41:8c:ce:a8:dd:50:17:05:e9:d3:ca: 10:6d:c3:10:5f:d5:54:83:c3:1e:62:5d:a4:d2:81: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:1E:4D:35:0E:2C:B3:C8:AE:5F:97:DD:42:3D:C1:D0:B0:60:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:62:71:ec:9b:c4:c4:bf:23:61:07:d7:82:33:2f:39:e4:e2: eb:7a:a6:e3:95:12:4c:0e:f1:cd:e0:68:eb:9c:1d:ce:34:a2: f4:a8:b0:ee:64:59:53:c2:0d:51:6b:71:7e:a8:b9:88:26:25: df:23:c9:58:c6:0f:2b:d3:29:e9:2b:a9:63:35:68:44:c8:0e: 6f:4b:c3:a6:24:30:5e:ff:3b:cf:12:57:7b:d5:14:94:8a:6a: 2a:69:47:fd:6f:a6:06:5c:26:df:32:33:2f:ff:77:b9:b8:3d: 37:c6:f8:3a:9e:99:78:e4:91:7f:1c:d2:3f:ed:16:cf:29:61: 15:4d:38:45:2c:94:db:b7:7d:89:1b:57:d3:08:3d:e2:1a:23: e4:f2:e7:9f:ba:47:bf:5c:53:5d:3c:28:9a:24:e8:02:ef:90: 6a:04:bb:99:9f:78:b3:c6:73:20:15:58:43:4b:09:f2:86:52: 74:9b:c8:3d:b2:40:b8:ef:c3:51:28:5a:ae:d3:32:af:a6:59: 40:25:82:18:1b:9f:e5:18:4e:e1:14:82:b1:2c:f8:44:b2:d2: 3c:8a:05:bc:d1:fe:00:1c:f4:ad:c1:80:f8:4d:75:3e:9f:49: 14:3c:46:90:be:d4:3f:a6:2f:fb:d0:d2:e4:f1:e4:fc:83:4a: 43:27:d7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHKKi4oW8Sqk8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2IzMzM1ZjctYTcwNi00NDBkLWExYWQtYTIzYjQ5YjIxMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMrAZ16A5DdX5DWLSOYyLQY0kpASQZsnatDC cBoeJb6L/WTa+3eTzNGMvmnLl2EgpJDsKazP7juKS7xM5KAc2JIZUaowGGoxkAzC 8GLJUFITW268j1Iyz8sPJwiogzH3PYDjATRDtcr7OftKMbn+JQPsUkjV1LeJdyc8 c0XJKw2m8wuEddZRffhE+UpeUicU3u9RyCBE+DRJxdxEQNN22dgU4vAx0ZyRU4J4 iy/kBvmSoAOsclyj/eYLYWleIyLnaObEP1yPmkt7n+dhZHOc0/RGT2IQ8c9zm1O8 +95F1ooO3MaJQYzOqN1QFwXp08oQbcMQX9VUg8MeYl2k0oH98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEETHk01DiyzyK5fl91CPcHQsGC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWEwNmEwMDctYTFmMC0z OGM4LWJiZWItMmI3OGRiZDZiNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRiceybxMS/I2EH14IzLznk4ut6puOVEkwO8c3gaOucHc40ovSosO5k WVPCDVFrcX6ouYgmJd8jyVjGDyvTKekrqWM1aETIDm9Lw6YkMF7/O88SV3vVFJSK aippR/1vpgZcJt8yMy//d7m4PTfG+DqemXjkkX8c0j/tFs8pYRVNOEUslNu3fYkb V9MIPeIaI+Ty55+6R79cU108KJok6ALvkGoEu5mfeLPGcyAVWENLCfKGUnSbyD2y QLjvw1EoWq7TMq+mWUAlghgbn+UYTuEUgrEs+ESy0jyKBbzR/gAc9K3BgPhNdT6f SRQ8RpC+1D+mL/vQ0uTx5PyDSkMn12o= -----END CERTIFICATE-----Generated at Mon Apr 7 14:12:13 2025 by rpki-client