$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa File: ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa (raw, json) Hash identifier: yXLGsS75heovWdh7leM9v+TlwSBznQB7F93dE2hnjJo= Subject key identifier: 7E:AD:16:51:7F:9A:87:8C:64:CF:57:4B:DD:2F:C9:41:83:6D:86:FA Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F432858498A345E3ABAC1D75BFAD32240 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 216.139.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5e:3a:ba:c1:d7:5b:fa:d3:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=a4bde5a5-5eae-4b6e-a288-4f2b24e13796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:21:24:22:e5:ec:d5:57:4c:aa:5a:75:cf: 75:78:55:c3:4c:da:70:73:20:d9:bd:10:45:4e:ec: 93:5e:d7:21:be:67:12:e2:0e:d4:0e:58:8a:d5:70: 79:11:7e:76:28:8a:01:d9:76:42:34:fc:96:48:01: c3:01:fc:8c:71:5d:48:0a:3b:97:02:f2:37:11:e2: b9:fc:5c:e2:fa:b3:7e:14:4d:5f:f4:f1:9c:83:62: 11:57:44:88:2f:72:b1:14:2f:9a:49:0d:92:fe:e4: 95:d4:77:55:f8:1e:62:f6:83:e5:9f:b4:d7:8f:18: 52:4d:2a:aa:eb:97:84:5f:c3:9a:23:49:91:01:b2: 72:8f:a9:88:9a:e0:eb:84:3b:f8:09:2a:f1:37:b0: 67:94:a8:31:2a:1d:3a:91:79:92:2c:74:d9:70:f3: a4:d4:2e:fd:f1:f7:bb:e3:1a:4d:30:21:bd:90:c0: 91:36:be:b2:ed:37:02:8c:95:d5:b6:dc:a6:20:21: 1f:8c:62:4f:36:78:88:f4:02:a2:90:b2:6a:e8:27: 0e:b9:d1:2a:07:13:fb:b0:c6:27:be:d3:0d:3e:39: e0:e9:ca:2b:e5:34:47:b2:4d:95:2f:b6:7c:49:94: 5b:20:72:53:83:e5:45:2c:c7:68:4e:b0:28:0d:99: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:16:51:7F:9A:87:8C:64:CF:57:4B:DD:2F:C9:41:83:6D:86:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8b:f6:36:ba:53:03:f6:cb:ac:74:ff:a4:0a:41:26:5c:6c: 27:0c:5d:fd:77:78:e0:6b:47:d8:25:f3:9d:15:97:a6:d9:e4: 23:81:eb:d4:01:ea:0b:65:55:d3:78:a9:5f:91:16:10:8f:30: c6:1d:50:6a:e3:18:b6:d7:1f:d9:a4:2e:6c:3f:47:63:85:9c: 4f:35:0f:4c:e4:9c:6e:c5:f4:44:a5:85:c3:f5:87:83:8b:9a: 0e:00:0a:ef:05:f4:63:d6:47:70:a5:a1:d1:5d:61:aa:34:22: 77:2d:18:00:74:d2:8c:d5:b0:05:48:9d:74:66:9a:23:c0:b9: a0:ea:03:89:e8:aa:d3:04:54:8d:7e:6a:27:de:fa:07:49:22: 0f:e0:33:f5:66:f3:e6:88:de:b3:70:da:b9:3e:ea:41:13:6f: c0:7f:bd:0e:99:cb:b3:e1:4d:fd:fb:27:ce:30:bc:48:5e:15: a7:6c:a3:6c:2c:7a:d8:cc:6f:d4:63:76:d2:03:17:dd:52:9f: 14:b3:3d:01:2f:df:cb:c7:a5:44:47:e0:7a:97:d5:58:94:5e: 49:0e:19:62:e5:33:b6:fb:61:ad:61:a2:da:1a:39:0d:16:07: 8b:ab:e2:95:8e:b5:75:72:13:48:a4:77:aa:31:74:97:50:ec: b6:19:f1:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF46usHXW/rTIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTRiZGU1YTUtNWVhZS00YjZlLWEyODgtNGYyYjI0ZTEzNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AUhJCLl7NVXTKpadc91eFXDTNpwcyDZvRBF TuyTXtchvmcS4g7UDliK1XB5EX52KIoB2XZCNPyWSAHDAfyMcV1ICjuXAvI3EeK5 /Fzi+rN+FE1f9PGcg2IRV0SIL3KxFC+aSQ2S/uSV1HdV+B5i9oPln7TXjxhSTSqq 65eEX8OaI0mRAbJyj6mImuDrhDv4CSrxN7BnlKgxKh06kXmSLHTZcPOk1C798fe7 4xpNMCG9kMCRNr6y7TcCjJXVttymICEfjGJPNniI9AKikLJq6CcOudEqBxP7sMYn vtMNPjng6cor5TRHsk2VL7Z8SZRbIHJTg+VFLMdoTrAoDZl6wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6tFlF/moeMZM9XS90vyUGDbYb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvYWM5YzY4MTEtZjhkNS0z MWQxLTk1OTEtZWYwZjQzYjI3MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ItQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6L9ja6UwP2y6x0/6QKQSZcbCcMXf13eOBrR9gl850Vl6bZ5COB69QB 6gtlVdN4qV+RFhCPMMYdUGrjGLbXH9mkLmw/R2OFnE81D0zknG7F9ESlhcP1h4OL mg4ACu8F9GPWR3ClodFdYao0InctGAB00ozVsAVInXRmmiPAuaDqA4noqtMEVI1+ aife+gdJIg/gM/Vm8+aI3rNw2rk+6kETb8B/vQ6Zy7PhTf37J84wvEheFadso2ws etjMb9RjdtIDF91SnxSzPQEv38vHpURH4HqX1ViUXkkOGWLlM7b7Ya1hotoaOQ0W B4ur4pWOtXVyE0ikd6oxdJdQ7LYZ8W4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:07 2025 by rpki-client