$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa File: 8925c97f-3867-318e-826a-c92b028c6985.roa (raw, json) Hash identifier: HxrplDFvhK3yVifyVbQ95wyT3v1sHekEE7B+CwJdV+k= Subject key identifier: 4E:4F:73:3D:BB:2D:1B:1D:B5:3D:06:A6:D2:11:49:D2:11:01:8B:97 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F432858498A345E29E8DDAB56122DA4A0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5e:29:e8:dd:ab:56:12:2d:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=299420ec-45e6-48b0-86a5-e889dc0beab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:45:2b:33:42:47:da:ba:e2:87:09:08:a6: 52:0b:bd:33:4a:fb:7a:5d:4c:f1:4a:dd:c5:76:e6: 28:38:0f:60:0c:53:df:52:06:84:1b:ae:8b:26:53: 51:d6:25:eb:28:52:47:95:1d:30:e7:d2:d8:00:a9: 25:27:33:ef:91:16:18:22:4f:22:6b:ff:f6:00:6b: 57:32:72:47:a3:55:e0:de:8d:d5:34:13:94:52:69: f2:74:da:48:9a:84:09:12:b7:46:1a:d0:56:9b:d5: ae:8f:9e:71:bc:40:ed:b6:0d:59:0e:df:9a:c5:7c: 89:9e:da:e8:c4:a7:6b:ec:ff:5a:75:b9:0b:aa:0c: 89:47:71:cf:be:ad:23:ae:40:1b:4b:e9:06:6d:23: f7:1b:1c:0a:b4:d4:c4:f6:b2:48:87:f5:5b:37:40: 36:06:01:4f:0a:6a:65:e6:31:78:e2:45:bc:64:34: 1c:19:3b:49:ec:2c:20:ed:d3:c8:23:6e:e0:f9:cb: e7:eb:0e:61:4b:4a:b6:01:fd:35:18:bb:27:95:b1: 9c:3d:d7:b2:50:da:ba:45:7f:fd:90:4e:90:ba:04: fa:6e:70:b7:b3:0f:48:fb:af:e4:21:e0:a7:1f:cc: 79:4d:5c:4d:0a:27:22:b4:5c:64:ef:4a:7d:1b:26: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:73:3D:BB:2D:1B:1D:B5:3D:06:A6:D2:11:49:D2:11:01:8B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ca:9b:99:3e:68:9d:a0:6c:45:0c:3a:a5:9e:09:c3:23:5e: bb:dd:d2:33:a2:cd:f6:67:31:e3:c4:db:c9:01:74:2d:1a:1d: bc:fa:0e:40:3d:11:d4:32:a7:2a:26:fa:80:18:4e:61:df:ba: d6:6e:09:30:57:e7:4b:c9:93:11:d9:c9:d5:5c:14:96:6f:0c: 50:4b:f1:79:28:ad:92:9f:49:93:9d:e2:96:1c:c8:f0:0e:14: cf:58:b9:1c:de:93:79:2b:17:c1:f8:c8:6f:30:fa:a2:1a:8f: 56:f2:d6:9e:31:f6:37:70:f2:7d:28:b7:73:83:96:9f:28:3b: 74:e3:53:3b:79:f7:57:a2:fe:be:b3:7c:9e:20:39:fc:fc:2d: 66:38:7c:00:0f:a3:d9:4c:c8:7e:20:66:88:44:a6:49:f1:7a: b4:7c:8c:5e:a7:f3:f4:88:f1:a3:b0:a8:6c:69:6c:28:d3:b9: 21:9e:4a:0e:0f:db:67:42:48:a7:ca:a0:ff:22:67:5b:f9:8c: 0e:bb:82:30:eb:3a:69:8f:08:1b:47:48:1b:17:59:d3:ba:bc: 33:04:5a:52:cd:45:81:0f:c3:8a:a8:20:d0:48:b2:13:39:15: d6:5e:fd:f7:33:e0:57:12:a1:c7:d0:c5:ec:05:85:12:8c:92: d2:da:d7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF4p6N2rVhItpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk Mjk5NDIwZWMtNDVlNi00OGIwLTg2YTUtZTg4OWRjMGJlYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt35FKzNCR9q64ocJCKZSC70zSvt6XUzxSt3F duYoOA9gDFPfUgaEG66LJlNR1iXrKFJHlR0w59LYAKklJzPvkRYYIk8ia//2AGtX MnJHo1Xg3o3VNBOUUmnydNpImoQJErdGGtBWm9Wuj55xvEDttg1ZDt+axXyJntro xKdr7P9adbkLqgyJR3HPvq0jrkAbS+kGbSP3GxwKtNTE9rJIh/VbN0A2BgFPCmpl 5jF44kW8ZDQcGTtJ7Cwg7dPII27g+cvn6w5hS0q2Af01GLsnlbGcPdeyUNq6RX/9 kE6QugT6bnC3sw9I+6/kIeCnH8x5TVxNCicitFxk70p9GybGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Pcz27LRsdtT0GptIRSdIRAYuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvODkyNWM5N2YtMzg2Ny0z MThlLTgyNmEtYzkyYjAyOGM2OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjKm5k+aJ2gbEUMOqWeCcMjXrvd0jOizfZnMePE28kBdC0aHbz6DkA9 EdQypyom+oAYTmHfutZuCTBX50vJkxHZydVcFJZvDFBL8XkorZKfSZOd4pYcyPAO FM9YuRzek3krF8H4yG8w+qIaj1by1p4x9jdw8n0ot3ODlp8oO3TjUzt591ei/r6z fJ4gOfz8LWY4fAAPo9lMyH4gZohEpknxerR8jF6n8/SI8aOwqGxpbCjTuSGeSg4P 22dCSKfKoP8iZ1v5jA67gjDrOmmPCBtHSBsXWdO6vDMEWlLNRYEPw4qoINBIshM5 FdZe/fcz4FcSocfQxewFhRKMktLa1+Q= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:34 2025 by rpki-client