$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa File: 89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa (raw, json) Hash identifier: zLwZ2IvOa+CjG8INs5L+u1PkH/5UkwSpMiClYDj35cI= Subject key identifier: AE:CD:63:43:F0:EC:48:BB:C1:77:34:00:5F:CE:0C:58:E7:8B:E8:DA Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F432858499829C7D6C3A17EC115C40700 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 40501 IP address blocks: 216.235.80.0/24 maxlen: 24 216.235.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c7:d6:c3:a1:7e:c1:15:c4:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=4ebb458f-89b3-4f16-9cfe-1d1592985423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:12:cc:57:cf:62:50:e9:76:fe:74:2b:12: 65:89:2c:f1:88:9b:5a:ef:96:43:2b:37:8c:06:2b: 3b:81:8b:1b:74:1d:e1:1e:01:8b:35:05:8e:ee:59: 57:6c:6d:d4:ce:28:2e:18:47:d7:a5:04:83:df:2e: 87:2e:26:da:dc:4f:a9:81:1a:c6:fe:59:da:63:37: 11:28:cf:d4:4b:fa:80:d2:34:08:da:61:9b:b2:c2: 85:8e:67:1c:e5:cc:19:52:01:8a:4c:42:d3:1c:69: 15:81:02:a5:6a:d4:23:65:ad:0e:66:12:b6:3c:48: c0:f0:70:a4:67:aa:37:a1:ff:25:ec:f1:87:67:ca: f6:b7:46:26:97:7b:a3:0d:26:b7:60:65:d9:22:e6: 9d:2a:0a:ee:4f:4f:9e:09:50:06:db:1a:09:39:66: e8:04:40:fc:4d:e8:bc:5b:69:77:05:5d:73:67:20: b8:7e:0e:be:c1:dc:8a:77:6f:23:10:d2:cf:c3:6e: 70:67:75:df:af:a4:80:44:74:b0:f4:9d:32:45:44: 54:24:3f:ba:d1:19:55:67:18:dc:aa:d3:6b:9d:a4: 76:33:53:22:e7:ca:7d:b1:5e:e8:7f:1a:cf:29:ec: fb:83:dc:c5:e7:8a:37:c8:84:02:f4:ad:0d:bb:fa: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:63:43:F0:EC:48:BB:C1:77:34:00:5F:CE:0C:58:E7:8B:E8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.80.0/24 216.235.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:68:cd:0a:80:14:15:bb:03:c8:3d:8d:a7:87:91:d3:f1: 16:fc:86:e1:bb:4e:ff:d1:f8:87:d3:91:ce:96:4a:f8:78:7b: e1:ce:21:41:3a:73:e5:18:82:13:3f:1b:a5:1d:b5:5d:5d:5e: ef:51:b7:bc:73:cb:ff:79:1a:2a:13:27:90:5a:11:de:9e:05: 9d:5a:81:b2:16:e0:90:d2:05:47:1f:0a:e5:c6:5e:10:4f:40: 08:15:13:46:46:cd:27:77:a2:6e:fe:c9:c3:60:45:76:b1:32: 5b:3c:5c:5d:65:cd:0f:14:9f:6d:f7:c5:3a:ae:fe:c0:23:a9: 47:3e:f6:51:d4:44:db:1b:68:5f:f8:db:60:ce:80:cc:bb:97: 84:3f:24:bb:8c:e4:1d:17:81:a8:a0:cf:6f:e8:59:c4:7c:48: 12:d1:c6:58:28:94:a1:9f:7b:1c:4f:22:38:50:dc:7f:51:8f: d9:1b:7e:46:b3:1a:05:4a:a2:b1:47:2d:95:e4:3b:01:ba:0e: bf:2d:b8:6d:2e:5e:50:84:c8:2e:f7:35:d7:5b:b2:26:69:8b: 91:63:98:01:90:aa:e7:b0:78:97:28:ac:8f:ce:37:e9:52:9c: 43:5d:a0:09:d5:35:20:78:06:c2:66:ed:df:ad:58:ab:b0:be: c1:95:6a:97 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmYKcfWw6F+wRXEBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NGViYjQ1OGYtODliMy00ZjE2LTljZmUtMWQxNTkyOTg1NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7MSzFfPYlDpdv50KxJliSzxiJta75ZDKzeM Bis7gYsbdB3hHgGLNQWO7llXbG3UziguGEfXpQSD3y6HLiba3E+pgRrG/lnaYzcR KM/US/qA0jQI2mGbssKFjmcc5cwZUgGKTELTHGkVgQKlatQjZa0OZhK2PEjA8HCk Z6o3of8l7PGHZ8r2t0Yml3ujDSa3YGXZIuadKgruT0+eCVAG2xoJOWboBED8Tei8 W2l3BV1zZyC4fg6+wdyKd28jENLPw25wZ3Xfr6SARHSw9J0yRURUJD+60RlVZxjc qtNrnaR2M1Mi58p9sV7ofxrPKez7g9zF54o3yIQC9K0Nu/q2dQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK7NY0Pw7Ei7wXc0AF/ODFjni+jaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvODlhMmEwOWQtMDdhYS0z NGQ0LTgwZDYtYzQ0YTRlZGU4MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2OtQAwQA 2OtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIj0aM0KgBQVuwPIPY2nh5HT8Rb8huG7Tv/R+IfTkc6WSvh4 e+HOIUE6c+UYghM/G6UdtV1dXu9Rt7xzy/95GioTJ5BaEd6eBZ1agbIW4JDSBUcf CuXGXhBPQAgVE0ZGzSd3om7+ycNgRXaxMls8XF1lzQ8Un233xTqu/sAjqUc+9lHU RNsbaF/422DOgMy7l4Q/JLuM5B0Xgaigz2/oWcR8SBLRxlgolKGfexxPIjhQ3H9R j9kbfkazGgVKorFHLZXkOwG6Dr8tuG0uXlCEyC73NddbsiZpi5FjmAGQqueweJco rI/ON+lSnENdoAnVNSB4BsJm7d+tWKuwvsGVapc= -----END CERTIFICATE-----Generated at Sun Apr 27 23:09:37 2025 by rpki-client