$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa File: 0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa (raw, json) Hash identifier: h4xjw9QAjNAvpNUTBmGA78HW0LVUQMrM3zTTeGFXk4A= Subject key identifier: 7D:51:46:80:BC:C6:EA:C8:70:EB:8C:25:81:1C:DE:03:AE:0E:DD:07 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848F65BF53DEFFD25484D469A40 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:3d:ef:fd:25:48:4d:46:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=e8302db4-37f8-4c74-abb9-06b6d56133e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:2e:34:a5:28:9e:a7:d7:09:13:0b:48:6f: 90:a8:4c:4a:75:55:2b:6f:62:b2:d7:a0:9a:08:25: 54:f4:3c:df:94:a1:5f:99:7c:f4:69:66:2c:5f:68: bc:57:30:1d:aa:e8:6c:54:39:b4:a7:6a:84:97:63: ba:21:32:11:6c:5e:7c:7b:db:c2:ee:d8:af:5b:01: 77:58:ad:77:02:1f:41:b5:80:91:af:85:0f:25:67: 1e:3a:24:ae:94:c1:26:e8:9a:60:14:87:e5:60:c5: e6:19:57:0b:5e:ba:03:43:b1:60:5a:c5:22:63:5f: 3d:92:91:bf:29:c6:0c:59:70:57:07:e1:b9:de:69: c4:b5:ca:86:fe:fa:35:99:ef:c9:b9:f5:0c:80:0c: 38:ce:3b:ad:e4:b6:31:ff:f4:c7:1d:8a:b0:b1:e5: 88:b7:53:98:40:dc:4d:15:f7:38:b0:56:4c:f0:78: ff:ed:5f:4e:0d:c6:f5:eb:6a:35:ed:01:44:a8:f3: 3f:3c:65:79:21:b6:31:c0:21:6f:96:77:42:f4:5c: c2:25:8f:5d:64:fb:dc:40:24:04:56:f5:ce:ea:d6: 96:8a:46:d2:cf:46:8c:65:e2:b6:29:9a:ca:82:a2: 41:8f:46:69:67:0e:a2:95:8c:91:b6:41:aa:71:c1: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:46:80:BC:C6:EA:C8:70:EB:8C:25:81:1C:DE:03:AE:0E:DD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:11:43:93:90:71:76:aa:38:e9:d6:72:aa:eb:d3:8f:d9:cd: 38:8c:8d:7e:08:04:06:28:de:46:1e:dd:53:c5:fa:db:42:c3: 64:b4:24:98:bf:6d:37:69:7a:62:ad:0d:30:63:35:0b:36:d7: ce:f3:38:84:ae:5b:f4:98:93:66:74:16:b8:76:15:3f:9d:dc: c0:cf:7d:ae:10:54:1d:9f:e6:bb:95:78:10:0e:96:c1:81:20: 53:f6:1d:ca:9e:f5:5b:41:94:1f:3d:f2:9a:16:4c:74:fa:d3: 48:b0:8f:f5:aa:7a:03:19:e2:31:4e:fb:8c:bf:ff:18:35:4f: 4b:94:58:59:58:7a:b9:89:ca:fb:9e:0b:02:47:6d:69:90:5d: d2:92:ae:47:16:44:bb:11:26:e5:f9:83:5a:b2:3f:08:2a:9a: a2:87:86:4b:c3:ab:42:61:09:db:e9:6a:d0:88:a5:48:f4:fe: 5a:46:04:9b:46:0a:e4:a8:69:3f:28:4c:2e:28:ad:fd:ab:92: 47:1e:40:2a:14:55:0e:86:9c:f0:4a:56:1f:c6:9f:70:9b:70: 7b:0b:e1:c7:92:ad:5d:b2:3d:2f:d8:32:06:db:a1:83:0e:c1: 08:85:de:89:e5:a3:de:57:8a:d4:a6:1c:d5:69:b8:16:d8:fe: cd:18:7e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/U97/0lSE1GmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZTgzMDJkYjQtMzdmOC00Yzc0LWFiYjktMDZiNmQ1NjEzM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHguNKUonqfXCRMLSG+QqExKdVUrb2Ky16Ca CCVU9DzflKFfmXz0aWYsX2i8VzAdquhsVDm0p2qEl2O6ITIRbF58e9vC7tivWwF3 WK13Ah9BtYCRr4UPJWceOiSulMEm6JpgFIflYMXmGVcLXroDQ7FgWsUiY189kpG/ KcYMWXBXB+G53mnEtcqG/vo1me/JufUMgAw4zjut5LYx//THHYqwseWIt1OYQNxN Ffc4sFZM8Hj/7V9ODcb162o17QFEqPM/PGV5IbYxwCFvlndC9FzCJY9dZPvcQCQE VvXO6taWikbSz0aMZeK2KZrKgqJBj0ZpZw6ilYyRtkGqccHKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1RRoC8xurIcOuMJYEc3gOuDt0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGMyYmM0YzAtYWU0ZC0z MzA0LWI4MGItODgwOTAzYTczNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFARQ5OQcXaqOOnWcqrr04/ZzTiMjX4IBAYo3kYe3VPF+ttCw2S0JJi/ bTdpemKtDTBjNQs2187zOISuW/SYk2Z0Frh2FT+d3MDPfa4QVB2f5ruVeBAOlsGB IFP2Hcqe9VtBlB898poWTHT600iwj/WqegMZ4jFO+4y//xg1T0uUWFlYermJyvue CwJHbWmQXdKSrkcWRLsRJuX5g1qyPwgqmqKHhkvDq0JhCdvpatCIpUj0/lpGBJtG CuSoaT8oTC4orf2rkkceQCoUVQ6GnPBKVh/Gn3CbcHsL4ceSrV2yPS/YMgbboYMO wQiF3onlo95XitSmHNVpuBbY/s0YfrY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:58 2025 by rpki-client