$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json) Hash identifier: oqz0sT1g9jNz5YvGzIxDb1SnL0t6rd7qiNGUdlOX7S4= Subject key identifier: 82:C5:4B:C1:3E:5D:5D:31:EC:AF:F1:A5:C9:D5:6C:6F:75:10:DC:AB Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848F22C721BF0AB905E9DAD52C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:72:1b:f0:ab:90:5e:9d:ad:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=810f7bd8-ddba-4e82-a8cb-d85274400de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:bc:61:75:08:85:0d:ab:50:4f:bc:6a:8b: 52:4f:cb:0f:40:1a:da:e2:ee:85:0a:a1:d0:f3:d1: f5:0d:48:dd:7d:49:58:72:35:bb:b0:c4:13:a6:21: f7:00:27:ad:47:77:96:4c:c8:e9:1c:db:5b:fc:34: 3e:be:7b:18:97:d7:aa:97:3c:a2:b1:57:3e:47:f1: ac:81:bf:ff:ec:c0:7d:8b:3c:e5:71:19:ef:03:da: eb:50:3c:62:5a:23:ef:4a:f8:35:ec:35:17:d1:50: 9a:a7:1d:35:86:da:b2:e3:07:c1:62:5c:af:75:17: 36:c2:ac:db:b0:61:97:40:97:54:13:2e:68:f2:73: 1d:55:88:4b:8b:d8:ef:4b:9f:0d:ca:c3:82:87:ba: 05:a2:69:22:eb:17:e2:4b:5f:2c:77:37:1f:d4:2a: 89:bc:9e:f8:f2:2b:08:42:e0:8d:01:b2:06:cc:87: c5:f9:25:c3:db:f1:5f:63:ad:ec:f3:d9:31:71:25: 81:20:9b:8f:4c:f2:9b:46:7f:a7:d8:21:54:36:7d: a9:1e:b4:2f:05:dd:a9:d9:1b:b7:f3:b7:5b:05:cb: 73:88:11:d6:eb:75:a8:bd:29:f1:e1:06:fd:6f:e1: 86:26:e8:5c:24:52:29:f2:ec:f5:40:c7:7d:9d:b2: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:4B:C1:3E:5D:5D:31:EC:AF:F1:A5:C9:D5:6C:6F:75:10:DC:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:2e:89:76:2e:3e:16:3e:fa:70:af:22:ec:4f:13:a9:2b: ec:81:0e:db:cd:fe:1a:ec:14:9d:62:90:8d:15:73:d8:86:a8: 90:12:13:52:b9:a0:d8:ea:63:22:36:9a:5b:f4:4c:f6:78:9a: d3:c4:56:07:85:ad:c7:da:66:d8:f4:96:f3:f5:18:72:f7:fa: d3:b3:93:b3:de:34:20:b5:d6:98:0c:51:be:c0:52:83:0e:52: 7c:fd:3a:39:48:a4:61:d2:63:34:ba:8c:93:54:84:05:51:d3: a5:de:ab:ab:67:51:3f:e2:96:c2:73:d4:86:24:91:ed:e8:0d: d2:cc:74:3e:5e:07:d9:a5:12:ac:8a:ee:d3:12:22:89:3a:ed: 79:e8:aa:42:1b:cd:1f:c5:0c:84:58:aa:f7:ff:d5:48:52:d7: c7:f2:5b:91:54:6d:30:e5:5a:f8:42:5c:b8:a6:42:9f:bd:3e: 42:ae:13:b0:21:58:3c:19:89:94:69:f7:4d:6d:c8:73:37:41: ce:68:d0:77:41:ae:2f:f6:ee:16:46:43:2a:52:8c:e9:b5:c9: 0e:91:df:b5:2a:1f:bd:6c:9d:47:af:76:4d:0e:8b:fe:af:97: 83:7f:cc:98:8f:b3:68:4c:36:8c:b7:23:23:8a:c8:0c:ac:a0: 4a:2c:2e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHIb8KuQXp2tUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ODEwZjdiZDgtZGRiYS00ZTgyLWE4Y2ItZDg1Mjc0NDAwZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmq8YXUIhQ2rUE+8aotST8sPQBra4u6FCqHQ 89H1DUjdfUlYcjW7sMQTpiH3ACetR3eWTMjpHNtb/DQ+vnsYl9eqlzyisVc+R/Gs gb//7MB9izzlcRnvA9rrUDxiWiPvSvg17DUX0VCapx01htqy4wfBYlyvdRc2wqzb sGGXQJdUEy5o8nMdVYhLi9jvS58NysOCh7oFomki6xfiS18sdzcf1CqJvJ748isI QuCNAbIGzIfF+SXD2/FfY63s89kxcSWBIJuPTPKbRn+n2CFUNn2pHrQvBd2p2Ru3 87dbBctziBHW63WovSnx4Qb9b+GGJuhcJFIp8uz1QMd9nbIwLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILFS8E+XV0x7K/xpcnVbG91ENyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjQxODVhNjMtMzE2Zi0z ZDkxLWI2NzQtNTJmZmFkNzJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6ILol2Lj4WPvpwryLsTxOpK+yBDtvN/hrsFJ1ikI0Vc9iGqJASE1K5 oNjqYyI2mlv0TPZ4mtPEVgeFrcfaZtj0lvP1GHL3+tOzk7PeNCC11pgMUb7AUoMO Unz9OjlIpGHSYzS6jJNUhAVR06Xeq6tnUT/ilsJz1IYkke3oDdLMdD5eB9mlEqyK 7tMSIok67XnoqkIbzR/FDIRYqvf/1UhS18fyW5FUbTDlWvhCXLimQp+9PkKuE7Ah WDwZiZRp901tyHM3Qc5o0HdBri/27hZGQypSjOm1yQ6R37UqH71snUevdk0Oi/6v l4N/zJiPs2hMNoy3IyOKyAysoEosLqM= -----END CERTIFICATE-----Generated at Mon Apr 7 14:23:39 2025 by rpki-client