$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa File: d1df3652-eca5-3f80-8dab-2352e63c476b.roa (raw, json) Hash identifier: WhVvzx1r/Ujn1Qx4u5JYBuknTTnEPf3IR7jZ6Izs0yI= Subject key identifier: DE:B6:D9:6A:83:7D:E7:6C:C7:A8:6C:8E:9D:35:DF:B6:13:04:64:45 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285849D594EB7B4E88367D57D15F80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:eb:7b:4e:88:36:7d:57:d1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=edcf2226-b0d6-4366-abe5-cb6bee39d3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:54:51:37:9b:60:16:0d:21:58:2e:c1:8e: e3:b5:9a:c5:97:7c:07:b7:83:91:20:de:2c:80:94: 7b:52:e9:96:c9:72:6a:ce:a5:ac:29:0b:40:8a:74: a0:97:75:9f:af:eb:88:ce:26:d9:e9:80:74:6d:3c: 9c:f4:c0:26:51:88:12:69:9d:09:60:20:42:69:27: 26:ae:2b:75:8d:7e:02:34:d4:a8:fe:8a:af:d0:7d: ec:59:fa:a4:50:fd:c1:72:a7:7d:ae:ea:44:4a:ce: 5c:ee:d8:a5:1a:12:b2:9f:46:03:fe:21:ce:f6:73: ce:c9:7a:08:fd:27:9a:ac:94:91:a1:9d:89:c3:f2: 0b:84:0d:81:2a:98:d0:7a:1e:d1:c3:e7:ba:38:ae: 8c:62:a5:bf:eb:00:79:b0:19:cb:4f:53:69:a8:1d: 45:8c:f8:2b:88:8e:37:ff:54:95:a7:38:ae:dd:f2: ae:dc:31:6c:46:44:ad:2e:02:ef:06:30:67:e2:04: 72:79:b1:a5:93:3c:47:5e:45:0a:cf:96:a5:d7:9e: 94:94:2c:45:35:64:88:74:44:d9:6e:10:17:fb:d3: e7:c5:7b:f8:52:3c:73:e0:47:e7:08:c5:4e:1a:b2: 41:4b:14:7e:49:2b:ea:7e:1d:da:74:7e:0c:64:e7: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:D9:6A:83:7D:E7:6C:C7:A8:6C:8E:9D:35:DF:B6:13:04:64:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d0:d3:d6:a1:3a:f2:32:1f:e7:50:bd:79:69:9a:9c:28:c6: 6a:3b:c5:54:6e:f4:eb:e7:01:ea:df:ff:91:46:95:97:7c:70: 3f:59:c3:59:2b:06:88:ce:09:c6:1c:a9:1c:c8:53:95:49:80: ca:09:52:48:f7:2d:81:5c:c5:19:0b:d1:0f:52:31:30:9a:86: 22:5c:5d:cf:dd:99:eb:5a:63:71:57:f6:a3:c0:f7:28:f7:b5: 7b:c2:d4:df:61:bf:5c:85:21:5e:58:8a:fa:a2:89:eb:fa:c5: 29:46:e1:40:c3:79:6e:ad:71:e5:9b:6d:fc:27:28:54:78:93: a9:16:92:db:bf:08:10:f7:b2:8e:84:98:60:f3:4a:e8:0a:71: 16:25:31:a8:91:88:91:2d:96:b5:3e:a8:04:69:02:13:62:0e: 78:7c:11:66:99:c7:5a:fd:b1:27:65:c6:8d:ff:13:e9:ce:fc: 19:11:44:84:eb:d7:f6:e6:5b:59:16:32:90:48:5d:e6:de:38: 58:76:55:94:db:db:17:39:ed:8f:37:49:4e:a9:3f:64:d9:ee: 51:8e:33:8c:1f:a4:2b:72:a5:5c:cd:53:f5:cb:54:7c:4c:7d: f0:e2:75:f2:15:10:75:09:2e:0c:66:86:c7:d9:4c:2d:08:6c: fd:14:66:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOt7Tog2fVfRX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWRjZjIyMjYtYjBkNi00MzY2LWFiZTUtY2I2YmVlMzlkM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWFUUTebYBYNIVguwY7jtZrFl3wHt4ORIN4s gJR7UumWyXJqzqWsKQtAinSgl3Wfr+uIzibZ6YB0bTyc9MAmUYgSaZ0JYCBCaScm rit1jX4CNNSo/oqv0H3sWfqkUP3Bcqd9rupESs5c7tilGhKyn0YD/iHO9nPOyXoI /SearJSRoZ2Jw/ILhA2BKpjQeh7Rw+e6OK6MYqW/6wB5sBnLT1NpqB1FjPgriI43 /1SVpziu3fKu3DFsRkStLgLvBjBn4gRyebGlkzxHXkUKz5al156UlCxFNWSIdETZ bhAX+9PnxXv4Ujxz4EfnCMVOGrJBSxR+SSvqfh3adH4MZOe1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN622WqDfedsx6hsjp0137YTBGRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDFkZjM2NTItZWNhNS0z ZjgwLThkYWItMjM1MmU2M2M0NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrQ09ahOvIyH+dQvXlpmpwoxmo7xVRu9OvnAerf/5FGlZd8cD9Zw1kr BojOCcYcqRzIU5VJgMoJUkj3LYFcxRkL0Q9SMTCahiJcXc/dmetaY3FX9qPA9yj3 tXvC1N9hv1yFIV5Yivqiiev6xSlG4UDDeW6tceWbbfwnKFR4k6kWktu/CBD3so6E mGDzSugKcRYlMaiRiJEtlrU+qARpAhNiDnh8EWaZx1r9sSdlxo3/E+nO/BkRRITr 1/bmW1kWMpBIXebeOFh2VZTb2xc57Y83SU6pP2TZ7lGOM4wfpCtypVzNU/XLVHxM ffDidfIVEHUJLgxmhsfZTC0IbP0UZt8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:47:35 2025 by rpki-client