$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa File: 2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa (raw, json) Hash identifier: rS+x4ZJ2e8YleBxLzKWrAnOxbAgRbtA/bmx1+Z8kR7Y= Subject key identifier: B6:C2:56:26:B6:87:BB:0F:A0:AF:1B:86:66:92:46:BF:B7:A5:F0:9D Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848F65BF57DE94C66BABEF5FAC0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 216.157.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:7d:e9:4c:66:ba:be:f5:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=33a83318-e0ef-450f-8a75-8884b7f99f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:8d:b4:a6:66:27:72:9c:61:c8:6d:e3:a5: 21:2a:11:27:a9:20:29:75:d6:d8:7c:dd:09:a6:b7: 61:74:9f:6f:92:cb:ac:89:a7:05:47:7b:a8:19:04: 99:52:3f:0c:78:94:81:03:ba:2e:07:99:22:02:82: ef:19:af:06:ff:e4:1b:6c:0e:7a:27:da:86:ef:4e: b6:94:f7:b5:84:26:64:c7:6c:12:2d:e0:ed:76:92: 87:3a:ad:54:02:a6:e9:08:0e:34:0e:36:40:f9:48: 57:be:e7:87:2a:e3:5b:2c:10:a0:d7:88:7a:5d:8c: 67:9b:50:73:a9:8a:f6:f2:2e:a7:f7:9f:4b:aa:3a: 5d:1e:1d:2f:95:81:9e:88:c3:b5:89:da:2b:26:8c: f9:15:42:4a:13:e5:f8:e3:4d:58:79:b6:91:09:12: 02:1b:fd:cc:c2:40:83:66:97:33:af:38:33:dc:50: c4:c4:3c:ef:c1:e7:47:be:1c:37:9d:d0:a7:b8:dc: cf:05:a5:e5:1e:d0:f1:ba:ee:a6:5a:eb:c4:31:7a: 00:43:06:6b:1b:a2:f0:92:d3:b1:94:fe:12:1f:31: dd:e4:4f:f8:3e:29:b2:63:43:bc:d2:76:b3:66:15: 17:25:6d:a5:7b:dc:06:0c:c8:5e:27:82:e0:5c:b1: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C2:56:26:B6:87:BB:0F:A0:AF:1B:86:66:92:46:BF:B7:A5:F0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:83:9d:2f:c2:5d:0f:71:61:9f:40:f3:f9:d5:2a:33:cc:a9: 6d:78:24:ba:f7:4a:98:fa:71:a0:e6:40:a6:d8:24:c0:29:c2: 9c:90:3a:56:22:7b:cd:fc:ca:db:25:26:f9:31:db:b2:1d:2f: 31:5d:51:71:57:14:c5:28:0c:81:d5:f0:ee:35:42:56:f9:7d: a9:c3:ff:4f:27:22:68:52:aa:56:7e:c2:25:20:cd:07:4c:78: 83:84:06:13:d7:05:71:1a:ff:dc:9a:97:36:72:1b:2e:9b:2a: d5:b4:5d:06:4e:18:54:a7:8f:d2:8a:41:14:a2:63:6c:0c:d3: b2:f0:c6:11:49:e4:50:a0:3a:52:f5:91:71:ed:2a:b7:1c:65: 8a:aa:0f:94:27:81:fd:37:28:cc:71:4d:01:8c:10:73:97:fd: 64:5a:54:74:42:a8:22:0a:df:20:3e:f2:6a:e6:8a:4d:18:e8: 07:70:b8:1e:2f:cb:49:80:aa:b5:74:b4:50:80:9e:58:f7:bf: d1:f5:3c:f8:c9:d6:f9:6f:48:0e:d2:22:f8:04:d4:be:63:46: d7:60:c6:99:9b:4d:eb:1f:dd:87:54:bb:fc:f3:d8:7c:e7:bc: 36:a1:39:e6:fc:b0:bd:da:e6:00:98:bb:93:a0:64:18:55:c3: 62:5f:8b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/V96Uxmur71+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzNhODMzMTgtZTBlZi00NTBmLThhNzUtODg4NGI3Zjk5ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI6NtKZmJ3KcYcht46UhKhEnqSApddbYfN0J prdhdJ9vksusiacFR3uoGQSZUj8MeJSBA7ouB5kiAoLvGa8G/+QbbA56J9qG7062 lPe1hCZkx2wSLeDtdpKHOq1UAqbpCA40DjZA+UhXvueHKuNbLBCg14h6XYxnm1Bz qYr28i6n959LqjpdHh0vlYGeiMO1idorJoz5FUJKE+X4401YebaRCRICG/3MwkCD Zpczrzgz3FDExDzvwedHvhw3ndCnuNzPBaXlHtDxuu6mWuvEMXoAQwZrG6LwktOx lP4SHzHd5E/4PimyY0O80nazZhUXJW2le9wGDMheJ4LgXLHlQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbCVia2h7sPoK8bhmaSRr+3pfCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMmY0YzA2NzctYmFhNC0z NmI1LThjMzMtMWQyZDE4NmY5NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqDnS/CXQ9xYZ9A8/nVKjPMqW14JLr3Spj6caDmQKbYJMApwpyQOlYi e838ytslJvkx27IdLzFdUXFXFMUoDIHV8O41Qlb5fanD/08nImhSqlZ+wiUgzQdM eIOEBhPXBXEa/9yalzZyGy6bKtW0XQZOGFSnj9KKQRSiY2wM07LwxhFJ5FCgOlL1 kXHtKrccZYqqD5Qngf03KMxxTQGMEHOX/WRaVHRCqCIK3yA+8mrmik0Y6AdwuB4v y0mAqrV0tFCAnlj3v9H1PPjJ1vlvSA7SIvgE1L5jRtdgxpmbTesf3YdUu/zz2Hzn vDahOeb8sL3a5gCYu5OgZBhVw2Jfi10= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:31 2025 by rpki-client