$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa File: eaf54f35-82ef-3086-948d-7f841dfe1f72.roa (raw, json) Hash identifier: nppmZT+rYe7ua7Ep7PuEPUMtR3HsIoFomQxMg5BkpD0= Subject key identifier: 3F:AF:55:C7:59:DD:43:C6:E3:1D:35:D9:7E:F8:C3:D0:A2:8B:14:11 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F432858498A345E17825082B1711AF080 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5e:17:82:50:82:b1:71:1a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=fc7d9c0e-4118-4594-9a22-d717da19036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a4:60:09:49:d7:7d:18:cb:c5:cd:4f:21:a2: be:d1:2d:69:e5:27:5c:f2:80:a8:ee:d7:3f:f1:cf: 1c:1b:3e:07:b3:66:44:03:e1:04:0e:54:c2:53:62: 26:1c:fb:ea:5d:3e:72:9b:f9:e4:5d:12:2e:af:07: a3:d9:bd:44:d9:43:00:a6:63:55:0e:06:ef:a2:85: 50:e4:a8:42:24:d6:81:7e:b4:c4:5c:02:73:6f:04: 0f:53:54:c5:79:b3:bd:01:ff:ef:42:bc:36:0d:f2: 64:c0:ba:10:3b:2c:f9:8a:26:d8:78:58:36:c9:43: 84:fe:a6:2d:53:60:2c:82:99:18:02:59:63:0e:af: 3d:74:44:43:c6:62:2b:60:16:a1:c3:34:4b:03:cb: ab:ce:36:8d:cd:e4:a0:29:b1:30:be:df:78:b8:b5: 14:1c:34:de:29:52:79:5d:9a:f3:56:d5:bb:ba:40: 5f:84:3e:06:28:7a:ec:2e:fa:8e:17:b2:58:88:8a: af:d6:e8:de:0b:04:00:b4:8c:44:b5:2e:a8:bd:8a: db:50:cc:37:80:31:22:f1:6a:11:8f:dc:ab:6f:a2: e6:cf:5d:53:d8:0c:09:76:08:0c:99:b9:e1:c7:bf: 52:af:45:fe:cc:33:45:b0:b3:f7:ef:dc:b0:94:28: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AF:55:C7:59:DD:43:C6:E3:1D:35:D9:7E:F8:C3:D0:A2:8B:14:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e0:9a:60:b9:a7:fb:b0:45:40:d4:49:9f:fb:0b:12:e8:ab: 5d:69:03:ad:56:6b:d0:ef:38:85:7d:65:80:bf:32:32:a3:84: 73:46:af:e4:66:6f:90:5b:d0:7c:6d:89:31:28:bd:ab:55:7b: 14:55:fc:fb:71:3e:8a:8f:92:ad:76:be:29:ce:bb:ce:d0:cb: 99:3a:6a:ff:60:c6:b4:6f:82:63:ec:0f:28:09:77:4f:8e:f7: 03:59:18:dc:ff:46:22:dd:33:67:b5:f2:71:8e:d0:db:d0:da: 67:ac:26:94:78:21:ff:aa:06:db:d4:14:6b:db:54:67:6d:2a: 52:a7:86:87:05:31:26:5e:43:ea:08:c5:45:c9:82:73:ee:6e: 9d:35:fc:9d:fd:46:59:9a:49:76:96:8e:e4:37:a0:1c:c6:62: ca:1d:0e:64:bf:0b:a2:cc:11:14:ba:ba:3b:d0:b6:5f:d9:8c: c3:1c:7b:c2:87:2a:6f:93:0b:08:3a:c3:7c:49:56:be:d7:6e: 36:45:dc:0e:8c:05:a1:54:61:5f:3a:a9:9d:fe:7b:80:43:bc: 91:2f:90:cf:49:ae:52:4d:99:03:11:83:7e:18:f9:c5:8c:1b: b9:2d:0c:62:b6:16:c4:97:7f:ce:5f:cd:9c:a5:e9:31:f6:dd: 89:ec:0b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF4XglCCsXEa8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZmM3ZDljMGUtNDExOC00NTk0LTlhMjItZDcxN2RhMTkwMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qRgCUnXfRjLxc1PIaK+0S1p5Sdc8oCo7tc/ 8c8cGz4Hs2ZEA+EEDlTCU2ImHPvqXT5ym/nkXRIurwej2b1E2UMApmNVDgbvooVQ 5KhCJNaBfrTEXAJzbwQPU1TFebO9Af/vQrw2DfJkwLoQOyz5iibYeFg2yUOE/qYt U2AsgpkYAlljDq89dERDxmIrYBahwzRLA8urzjaNzeSgKbEwvt94uLUUHDTeKVJ5 XZrzVtW7ukBfhD4GKHrsLvqOF7JYiIqv1ujeCwQAtIxEtS6ovYrbUMw3gDEi8WoR j9yrb6Lmz11T2AwJdggMmbnhx79Sr0X+zDNFsLP379ywlCijqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+vVcdZ3UPG4x012X74w9CiixQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZWFmNTRmMzUtODJlZi0z MDg2LTk0OGQtN2Y4NDFkZmUxZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDgmmC5p/uwRUDUSZ/7CxLoq11pA61Wa9DvOIV9ZYC/MjKjhHNGr+Rm b5Bb0HxtiTEovatVexRV/PtxPoqPkq12vinOu87Qy5k6av9gxrRvgmPsDygJd0+O 9wNZGNz/RiLdM2e18nGO0NvQ2mesJpR4If+qBtvUFGvbVGdtKlKnhocFMSZeQ+oI xUXJgnPubp01/J39RlmaSXaWjuQ3oBzGYsodDmS/C6LMERS6ujvQtl/ZjMMce8KH Km+TCwg6w3xJVr7XbjZF3A6MBaFUYV86qZ3+e4BDvJEvkM9JrlJNmQMRg34Y+cWM G7ktDGK2FsSXf85fzZyl6TH23YnsCyI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:15 2025 by rpki-client