$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa File: f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa (raw, json) Hash identifier: efwHvjG/GlDa54vXgyOvdaSukN2VQgAq5FY04Lk0TcA= Subject key identifier: 4F:27:11:C5:8D:91:01:51:43:1C:E2:6F:C3:68:28:AD:7E:66:DD:34 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EC3B65D736A32FDE4300 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 149.96.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ec:3b:65:d7:36:a3:2f:de:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=60259dd1-6066-4f28-967f-3db36dd05697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:d4:9f:1c:d1:c2:f4:60:a0:09:fe:11:1d: 62:b1:f8:0c:22:54:73:08:66:37:86:44:60:4f:3c: 89:54:bc:ee:71:2a:56:5a:40:21:1e:75:5a:ae:70: 3f:eb:3b:e0:7b:f0:8e:5e:98:be:5d:80:89:7c:54: e4:ab:c8:55:6e:f4:42:50:a4:66:e1:9e:72:ed:6c: db:9e:a7:8c:15:a8:09:36:59:15:be:3d:4f:4c:54: 9f:0a:7e:12:71:f2:e4:19:29:ef:e4:3f:d0:35:0b: 9c:e9:01:8e:76:e1:95:97:0d:ae:2d:90:72:3b:9b: 1a:21:56:b1:32:5a:fe:cc:5c:5d:22:06:6d:38:b0: ab:d0:62:1d:93:90:b7:3d:44:40:1f:be:59:0e:93: a2:23:2f:f4:6a:6d:e7:08:50:6f:5b:26:6c:ab:cb: 0d:6c:15:43:89:19:1b:77:38:2e:a5:7d:9e:7d:0f: 27:7f:9f:53:78:9c:9a:9c:21:71:be:01:ca:4f:3a: 2e:6a:6a:ad:73:51:9a:ca:97:eb:f2:94:d5:b4:8d: bb:0c:82:43:36:f3:e6:da:3f:c0:ea:1d:82:77:b0: e5:53:c4:ee:c8:7f:dd:2a:39:ef:c8:e4:73:c7:a5: 5d:f4:29:94:d5:ea:90:97:2c:b9:82:4e:06:47:1b: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:11:C5:8D:91:01:51:43:1C:E2:6F:C3:68:28:AD:7E:66:DD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ac:e8:ed:13:30:f9:dc:d3:46:c6:2e:13:23:90:4a:2a:93: b1:17:1c:48:b5:a8:27:c5:a0:a2:c2:22:18:27:d6:9a:db:4f: 59:4a:24:aa:f1:83:98:75:ea:b9:2b:62:fa:7d:3f:62:fb:d8: b4:a9:c0:62:e1:95:05:12:14:b7:3e:70:48:8a:e0:98:56:ff: c6:a1:61:03:21:a7:de:f7:12:14:f1:57:a6:87:95:ab:85:05: 3b:b3:34:fb:a0:88:89:1d:69:ce:97:20:f9:d1:66:44:6f:f2: 93:2e:e5:38:51:25:a9:37:9e:4f:e1:da:7e:f3:a0:09:78:ab: 42:dc:6a:15:26:e0:e4:97:48:10:e2:25:04:eb:21:d6:23:89: 70:63:74:84:40:63:68:52:80:cc:cc:37:7f:02:9d:87:04:31: fc:db:7e:65:d7:87:8a:4c:12:5b:94:43:df:85:88:f0:14:38: 16:d7:ba:27:6c:51:c4:47:c7:9f:f9:04:0b:aa:6f:c5:69:80: 63:47:5c:58:60:7e:7c:70:28:ef:86:2a:40:14:67:4d:da:fa: 0e:76:e8:bb:13:2d:b5:4f:07:fd:3b:21:92:04:f2:c1:1e:12: b3:2a:bc:99:d5:7b:ac:05:06:eb:1c:74:1c:07:f8:cc:32:91: 93:4f:2b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uw7Zdc2oy/eQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NjAyNTlkZDEtNjA2Ni00ZjI4LTk2N2YtM2RiMzZkZDA1Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/UnxzRwvRgoAn+ER1isfgMIlRzCGY3hkRg TzyJVLzucSpWWkAhHnVarnA/6zvge/COXpi+XYCJfFTkq8hVbvRCUKRm4Z5y7Wzb nqeMFagJNlkVvj1PTFSfCn4ScfLkGSnv5D/QNQuc6QGOduGVlw2uLZByO5saIVax Mlr+zFxdIgZtOLCr0GIdk5C3PURAH75ZDpOiIy/0am3nCFBvWyZsq8sNbBVDiRkb dzgupX2efQ8nf59TeJyanCFxvgHKTzouamqtc1Gaypfr8pTVtI27DIJDNvPm2j/A 6h2Cd7DlU8TuyH/dKjnvyORzx6Vd9CmU1eqQlyy5gk4GRxuz3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8nEcWNkQFRQxzib8NoKK1+Zt00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1YTY3OTUtYjFmOS0z OTI5LWIyZmItYWUzNjNjZGZmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqs6O0TMPnc00bGLhMjkEoqk7EXHEi1qCfFoKLCIhgn1prbT1lKJKrx g5h16rkrYvp9P2L72LSpwGLhlQUSFLc+cEiK4JhW/8ahYQMhp973EhTxV6aHlauF BTuzNPugiIkdac6XIPnRZkRv8pMu5ThRJak3nk/h2n7zoAl4q0LcahUm4OSXSBDi JQTrIdYjiXBjdIRAY2hSgMzMN38CnYcEMfzbfmXXh4pMEluUQ9+FiPAUOBbXuids UcRHx5/5BAuqb8VpgGNHXFhgfnxwKO+GKkAUZ03a+g526LsTLbVPB/07IZIE8sEe ErMqvJnVe6wFBuscdBwH+MwykZNPK9o= -----END CERTIFICATE-----Generated at Mon Apr 7 14:11:55 2025 by rpki-client