$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa File: 2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa (raw, json) Hash identifier: 3B0uurwSF2AkEk4OAM1BAbko7EkVTV4jDpS5IBOMGlQ= Subject key identifier: 25:6C:14:B8:3F:55:21:C4:E1:3D:A1:5B:9B:33:68:A7:A9:E5:F1:19 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F43285848E59BBC8D1407B5E6149FBC80 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8987 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bc:8d:14:07:b5:e6:14:9f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=954fe40f-77f9-4d84-ba1d-e6224115b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:1a:78:6f:4c:38:a4:a5:b9:45:38:be:74: c3:65:db:91:f3:4b:5d:b4:db:fd:e2:bc:77:5a:52: 78:aa:7b:d3:36:aa:64:5d:d3:87:c5:93:da:ca:70: 49:d3:26:ee:0c:4f:80:22:62:c7:16:f4:aa:be:4d: 15:d3:30:3f:5a:86:1c:9a:b8:f9:c9:f4:8c:68:8c: 26:1e:33:a3:b3:0e:ed:2e:dd:b3:f9:d0:24:a0:84: 56:ea:e2:59:98:cd:7f:9c:90:d8:c5:1a:0b:32:41: 1b:cc:c0:3b:fd:e2:2c:26:5f:17:32:3b:8f:ab:bf: fb:48:0d:89:f7:66:88:01:f3:0b:20:d2:2d:22:09: 99:72:13:d7:27:6e:45:d8:a1:53:ed:08:39:1f:67: 3f:5a:0e:be:88:2c:6b:a8:65:a6:e6:96:f2:3e:93: 0c:0f:39:c1:af:db:f0:df:1b:0c:e1:63:98:6b:1f: dd:9c:5d:90:d7:1b:cd:56:2c:45:b9:38:cc:b1:bb: 0f:dd:df:0d:5c:1e:df:e8:73:9c:d8:c4:9b:61:01: 6b:e4:35:2d:4d:b3:df:da:38:99:52:73:3a:1f:8e: 20:d7:92:ac:22:1b:d7:33:3c:d1:28:09:68:d9:f9: 44:58:77:7d:96:b3:69:4a:c3:6d:36:ed:d0:b8:77: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6C:14:B8:3F:55:21:C4:E1:3D:A1:5B:9B:33:68:A7:A9:E5:F1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:9d:9b:91:f0:ff:ee:a8:7e:b1:25:e7:22:8d:98:cb:15:4f: 3c:a0:7d:1b:b9:95:24:94:a8:d6:97:82:43:ed:b7:d1:50:6c: cc:51:a1:cf:61:f7:ca:1e:49:e9:48:b1:80:62:76:8e:af:82: aa:45:10:eb:37:47:f1:3a:03:98:06:cf:4f:20:3e:57:54:7e: 54:dc:3d:fa:27:50:61:b7:4e:00:56:93:e7:e2:c0:cd:23:37: 2b:d6:d3:74:0b:0e:8e:b2:5a:be:e9:d5:c4:68:aa:0e:35:e4: 86:f2:0a:05:92:fd:45:f9:04:92:07:6d:c5:77:2e:75:52:51: 99:50:ee:07:10:f8:8f:99:88:15:11:35:e4:5a:83:0a:9a:b4: 3d:a6:e9:a4:66:3f:bd:13:f2:c5:b6:24:ab:86:b3:19:88:5a: 53:d1:2d:72:a5:70:56:b8:e1:00:47:42:cd:4a:aa:9a:17:b5: bc:01:63:c1:dd:17:7c:07:78:f2:03:f9:bc:69:d5:90:89:25: ad:ba:b5:b1:f9:7f:1d:ff:63:e2:22:54:c1:90:1f:cd:ed:d2: da:16:4a:94:89:1c:be:e0:98:73:3a:74:4b:d9:ed:b2:1d:46: 50:33:eb:8b:67:97:f6:a7:e5:be:4f:36:fe:4b:c1:26:f8:a6: be:d9:a8:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7yNFAe15hSfvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTU0ZmU0MGYtNzdmOS00ZDg0LWJhMWQtZTYyMjQxMTViMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uQaeG9MOKSluUU4vnTDZduR80tdtNv94rx3 WlJ4qnvTNqpkXdOHxZPaynBJ0ybuDE+AImLHFvSqvk0V0zA/WoYcmrj5yfSMaIwm HjOjsw7tLt2z+dAkoIRW6uJZmM1/nJDYxRoLMkEbzMA7/eIsJl8XMjuPq7/7SA2J 92aIAfMLINItIgmZchPXJ25F2KFT7Qg5H2c/Wg6+iCxrqGWm5pbyPpMMDznBr9vw 3xsM4WOYax/dnF2Q1xvNVixFuTjMsbsP3d8NXB7f6HOc2MSbYQFr5DUtTbPf2jiZ UnM6H44g15KsIhvXMzzRKAlo2flEWHd9lrNpSsNtNu3QuHcrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVsFLg/VSHE4T2hW5szaKep5fEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvMmUyYzBlODAtYjhhMS0z Mzc1LWExNmYtNGMzYWU2NGEwNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2dm5Hw/+6ofrEl5yKNmMsVTzygfRu5lSSUqNaXgkPtt9FQbMxRoc9h 98oeSelIsYBido6vgqpFEOs3R/E6A5gGz08gPldUflTcPfonUGG3TgBWk+fiwM0j NyvW03QLDo6yWr7p1cRoqg415IbyCgWS/UX5BJIHbcV3LnVSUZlQ7gcQ+I+ZiBUR NeRagwqatD2m6aRmP70T8sW2JKuGsxmIWlPRLXKlcFa44QBHQs1KqpoXtbwBY8Hd F3wHePID+bxp1ZCJJa26tbH5fx3/Y+IiVMGQH83t0toWSpSJHL7gmHM6dEvZ7bId RlAz64tnl/an5b5PNv5LwSb4pr7ZqOI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:52:39 2025 by rpki-client