$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa File: ee433468-bf42-3f91-8d0a-4a4c07f44583.roa (raw, json) Hash identifier: rgMAJ43a1LICAVMZxAB6vU3iUfohDK/uhItlM5+Bxlg= Subject key identifier: C1:12:C4:60:CE:18:D5:03:EC:DB:6F:25:1B:0B:D2:AE:F7:14:B5:1A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C72A8E7CFDF2FFB37F380 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:a8:e7:cf:df:2f:fb:37:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=f24e79d4-35a6-4392-ab95-eff76cbbf5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:f9:7d:3a:2b:7b:d6:a6:53:de:fa:88:5b: 57:ac:e0:62:e5:4c:c4:bc:30:e8:c6:cd:35:4a:56: 58:e4:37:cb:08:58:14:34:f6:7b:e5:4d:ce:6a:71: 55:b9:92:b7:64:ed:89:08:4e:d0:01:73:70:31:92: ab:74:df:58:36:0d:49:bf:98:2b:1c:87:69:78:a2: a5:04:99:2c:50:2e:2b:3f:34:7c:fd:0c:09:06:2b: 2e:64:26:0e:10:bc:c6:d8:32:f2:42:28:77:d5:20: 1b:af:ca:b8:81:fc:f0:5a:0b:5b:63:b0:ea:96:ce: 7c:c8:26:4f:13:1c:62:80:2c:13:4b:8e:ec:d0:f2: b2:e1:48:4f:be:73:2e:c3:06:d0:9f:52:c5:93:69: 2d:cf:23:a3:75:10:2d:ae:9a:d6:b5:b3:89:65:74: 94:db:9a:f0:47:9c:12:98:ba:8f:be:4a:c1:27:67: 33:84:b6:59:3f:0f:51:cf:66:61:b0:1d:17:4d:94: bb:31:c7:75:98:a3:f5:8a:1a:42:51:ed:5d:29:9e: be:77:39:93:d5:1a:47:1c:c1:f1:da:e9:28:dd:84: c3:86:ea:87:ba:92:46:2b:71:24:ff:2c:e6:87:57: 0a:26:f9:6e:d0:2a:9a:38:0d:77:e2:a3:ce:fb:8e: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:12:C4:60:CE:18:D5:03:EC:DB:6F:25:1B:0B:D2:AE:F7:14:B5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:83:ac:d5:6a:bf:d7:62:07:aa:06:6e:59:20:e2:d4:63:d4: c2:3d:d2:61:9f:a8:22:a5:0d:a4:a0:d3:d9:86:47:c3:f1:31: bf:29:b2:19:70:87:21:61:c3:e4:6f:6b:d5:8b:f9:5e:1c:a3: ba:11:5f:b4:a3:78:76:64:49:f0:ec:e3:f7:ee:43:18:09:a2: fc:25:27:68:bd:ef:b0:a0:b6:43:55:84:db:2d:70:0b:bb:61: 64:f6:84:13:a3:0d:28:2a:18:dc:45:95:e4:32:b7:b7:aa:fd: 43:e5:38:e1:4f:08:20:db:f2:6b:4d:7c:57:a6:2a:ee:3f:49: 0a:e0:b2:4b:87:0f:fe:d4:c0:fe:f3:c4:49:5c:a2:f5:53:3a: 87:10:5c:4c:3a:a6:cf:ae:26:fb:c7:78:b2:c8:16:80:1a:b0: f1:88:94:d6:c2:67:92:a7:13:3d:8e:0f:8f:9a:02:32:95:fe: 5f:13:25:de:34:55:97:89:be:c6:c4:57:03:0a:f1:b1:f8:ef: 89:dd:85:24:83:1c:f9:b8:2c:1f:e9:26:38:d7:ae:4a:01:49: e4:94:9c:83:25:d7:60:8d:19:8c:66:77:cb:5a:6c:9f:cf:10: a2:19:8a:b8:2e:1b:6b:87:53:3a:e1:a4:1f:3e:9a:cb:6f:83: 5a:2b:cb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHKo58/fL/s384AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjI0ZTc5ZDQtMzVhNi00MzkyLWFiOTUtZWZmNzZjYmJmNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYf5fTore9amU976iFtXrOBi5UzEvDDoxs01 SlZY5DfLCFgUNPZ75U3OanFVuZK3ZO2JCE7QAXNwMZKrdN9YNg1Jv5grHIdpeKKl BJksUC4rPzR8/QwJBisuZCYOELzG2DLyQih31SAbr8q4gfzwWgtbY7Dqls58yCZP ExxigCwTS47s0PKy4UhPvnMuwwbQn1LFk2ktzyOjdRAtrprWtbOJZXSU25rwR5wS mLqPvkrBJ2czhLZZPw9Rz2ZhsB0XTZS7Mcd1mKP1ihpCUe1dKZ6+dzmT1RpHHMHx 2uko3YTDhuqHupJGK3Ek/yzmh1cKJvlu0CqaOA134qPO+45uAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMESxGDOGNUD7NtvJRsL0q73FLUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZWU0MzM0NjgtYmY0Mi0z ZjkxLThkMGEtNGE0YzA3ZjQ0NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGDrNVqv9diB6oGblkg4tRj1MI90mGfqCKlDaSg09mGR8PxMb8pshlw hyFhw+Rva9WL+V4co7oRX7SjeHZkSfDs4/fuQxgJovwlJ2i977CgtkNVhNstcAu7 YWT2hBOjDSgqGNxFleQyt7eq/UPlOOFPCCDb8mtNfFemKu4/SQrgskuHD/7UwP7z xElcovVTOocQXEw6ps+uJvvHeLLIFoAasPGIlNbCZ5KnEz2OD4+aAjKV/l8TJd40 VZeJvsbEVwMK8bH474ndhSSDHPm4LB/pJjjXrkoBSeSUnIMl12CNGYxmd8tabJ/P EKIZirguG2uHUzrhpB8+mstvg1ory/M= -----END CERTIFICATE-----Generated at Mon Apr 7 14:21:14 2025 by rpki-client