$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa File: dc1d157b-c428-308d-9aba-56de00fe1d82.roa (raw, json) Hash identifier: Xk+rA/whoGZUiukDkcNtozn3SQkdaErRfUUVPAVoXPk= Subject key identifier: 09:7C:FC:B1:AE:48:06:7C:93:9C:5D:C9:F5:00:54:AE:FD:F5:83:5A Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848F65BF560180655E245B56200 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:60:18:06:55:e2:45:b5:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=c86cee34-a405-4cab-b35f-29851ad03545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:87:b6:46:04:93:3b:92:b4:a5:20:b9:04: 4b:c5:25:8c:fe:5d:92:66:16:44:85:15:c8:4c:72: a3:a4:e0:a6:52:40:f3:a9:8f:d6:3f:e0:b0:a3:b2: 67:61:a9:b0:cf:f3:db:9a:ae:36:11:86:1a:90:59: d4:a9:21:76:c5:91:c8:fa:75:70:ed:e1:eb:9d:2e: 50:a1:e8:cd:80:0e:0d:f7:8f:17:c2:02:d2:52:d9: d6:0e:c0:66:88:19:4d:f2:02:ac:bb:3a:7a:08:be: e1:31:51:b9:e1:5b:c4:33:58:f4:cf:91:ef:a5:ea: b9:33:7c:7a:05:19:6c:45:d6:92:d8:a9:b3:05:b6: 74:b4:8b:1e:85:78:27:d1:fc:57:4f:fc:29:d4:17: 1d:18:80:07:08:b4:c3:67:46:0c:3d:70:8e:b0:7e: c2:d3:d6:a0:41:6e:d6:d7:dc:0e:8c:42:82:e2:bb: 7c:6d:67:8a:61:bd:c5:fc:62:07:69:05:54:ea:b8: 11:17:3e:b5:96:d4:55:15:3d:f1:b7:67:47:47:df: 6c:fc:3f:d2:fd:ad:e4:6c:51:21:30:91:37:1d:c3: 1c:0a:8c:33:74:1d:58:36:32:bf:95:c9:a0:16:3a: fd:e8:20:9a:db:d6:84:9d:83:05:4e:e2:8c:85:8e: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:FC:B1:AE:48:06:7C:93:9C:5D:C9:F5:00:54:AE:FD:F5:83:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:ba:7e:da:f1:75:7c:9c:24:22:bf:05:82:83:82:42:c7: 03:01:72:ec:fe:ae:37:36:a6:7d:4b:8e:ca:ee:2b:3d:09:92: b7:38:e9:16:17:aa:5b:b8:34:b5:68:d3:2b:4e:0c:2a:dd:8d: b1:8b:1a:56:3d:91:16:99:1e:bb:2b:91:76:4f:85:2a:50:8b: b5:f7:3f:da:37:68:af:3e:ec:45:25:6d:9a:7e:aa:f0:12:d9: 1f:e0:bc:eb:76:a1:05:44:b1:82:e4:9f:e6:8a:e2:13:56:60: a3:70:de:46:f8:db:8f:b4:b4:f0:b7:6c:ca:da:e0:cd:88:22: 61:b9:7e:db:90:65:e0:f6:a4:d6:26:78:a8:0b:d9:e8:a7:ea: 40:00:09:56:eb:db:84:d5:33:25:1f:d5:ef:e5:b7:c3:2d:c7: 3b:c4:2c:73:75:ec:ba:49:03:3c:b5:54:1b:b9:b7:94:98:be: e1:c7:a6:7d:fe:1f:fb:cc:a3:97:0a:80:46:3d:9e:f8:1d:8d: 6a:44:32:f3:1c:56:2d:d5:c2:c3:95:59:06:0e:a7:7f:ac:dd: 9b:10:74:4c:57:ef:81:e8:ed:02:4a:0d:be:db:4b:42:c5:ca: 8c:eb:25:13:4a:17:61:2f:d5:55:6a:ed:b7:f6:76:ef:75:0e: 8e:69:8c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/VgGAZV4kW1YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Yzg2Y2VlMzQtYTQwNS00Y2FiLWIzNWYtMjk4NTFhZDAzNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWOHtkYEkzuStKUguQRLxSWM/l2SZhZEhRXI THKjpOCmUkDzqY/WP+Cwo7JnYamwz/Pbmq42EYYakFnUqSF2xZHI+nVw7eHrnS5Q oejNgA4N948XwgLSUtnWDsBmiBlN8gKsuzp6CL7hMVG54VvEM1j0z5Hvpeq5M3x6 BRlsRdaS2KmzBbZ0tIsehXgn0fxXT/wp1BcdGIAHCLTDZ0YMPXCOsH7C09agQW7W 19wOjEKC4rt8bWeKYb3F/GIHaQVU6rgRFz61ltRVFT3xt2dHR99s/D/S/a3kbFEh MJE3HcMcCowzdB1YNjK/lcmgFjr96CCa29aEnYMFTuKMhY6nEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl8/LGuSAZ8k5xdyfUAVK799YNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZGMxZDE1N2ItYzQyOC0z MDhkLTlhYmEtNTZkZTAwZmUxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlEun7a8XV8nCQivwWCg4JCxwMBcuz+rjc2pn1LjsruKz0Jkrc46RYX qlu4NLVo0ytODCrdjbGLGlY9kRaZHrsrkXZPhSpQi7X3P9o3aK8+7EUlbZp+qvAS 2R/gvOt2oQVEsYLkn+aK4hNWYKNw3kb424+0tPC3bMra4M2IImG5ftuQZeD2pNYm eKgL2ein6kAACVbr24TVMyUf1e/lt8MtxzvELHN17LpJAzy1VBu5t5SYvuHHpn3+ H/vMo5cKgEY9nvgdjWpEMvMcVi3VwsOVWQYOp3+s3ZsQdExX74Ho7QJKDb7bS0LF yozrJRNKF2Ev1VVq7bf2du91Do5pjFI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:35 2025 by rpki-client