$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa File: b76a7deb-1382-321f-9cb1-899083e69c21.roa (raw, json) Hash identifier: i+C69Y5rQeUm/82OOsIPlfNJW8FL8fASHB5U6jnxHZc= Subject key identifier: BB:C7:06:A3:DD:19:96:0B:FA:DF:88:98:29:51:8D:7B:27:94:6C:78 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848A8309FF981D57A0EE03A6300 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 216.139.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:9f:f9:81:d5:7a:0e:e0:3a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=75c2ba47-5b66-4d71-b384-05ae03d7dc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:5b:14:08:2c:fc:42:a5:67:71:5f:37:f9: b9:d5:2f:44:8c:4f:ed:65:7a:cb:d1:0e:d6:9a:06: 50:11:2f:33:68:bd:c1:22:5e:ab:c1:86:86:f1:6e: ef:e1:68:b7:77:bd:e3:5c:c9:80:94:ad:7c:3c:6b: 5e:a5:0b:fe:9b:19:54:f7:30:ae:03:37:c7:d9:d2: bf:44:af:6b:9b:dd:ea:50:d4:66:10:87:0f:c8:65: 32:93:87:25:6a:39:c4:3d:b9:02:1a:8c:86:33:c0: 9d:af:1a:a3:f6:78:3c:2c:c8:3b:50:d2:7e:36:72: 06:44:f5:95:3f:af:bc:d9:dc:80:4d:06:72:58:01: ea:68:71:e2:d0:bb:f2:bc:ca:94:3f:f6:90:1c:8f: 2e:64:a9:32:a3:ba:4a:aa:25:a1:9e:6f:59:9c:b9: 44:2b:fe:cf:ee:c5:91:83:20:9f:ef:c6:90:c9:ed: b3:40:cc:34:cb:b7:1d:de:a5:b9:ac:bf:63:89:ff: e9:4f:c4:8d:a0:85:45:b9:cb:8a:7a:8e:26:dc:d9: 74:8e:da:9b:a6:b2:d3:78:ca:e8:86:ba:a8:88:00: 25:bd:57:ab:3e:61:51:89:d2:5d:fa:47:00:f1:78: 2a:a9:a8:7e:3d:0f:6d:ca:a7:9f:57:2b:2d:1c:25: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:06:A3:DD:19:96:0B:FA:DF:88:98:29:51:8D:7B:27:94:6C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/b76a7deb-1382-321f-9cb1-899083e69c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:06:dd:60:08:40:7c:e7:df:eb:66:42:af:6a:08:61:97:2a: ea:8b:bc:80:06:50:ac:4e:14:05:b8:42:85:ca:ab:7e:46:8f: 36:a1:e2:ef:3e:f2:cb:16:43:4a:cd:04:f1:60:fa:77:5a:ef: 47:dc:bb:15:d6:e4:95:a0:18:31:df:59:0d:ea:ef:aa:b3:07: c7:97:9a:71:9c:9c:a6:28:94:c4:c3:68:eb:24:f3:25:14:7f: 22:09:36:8d:26:09:17:0d:75:ba:96:0f:06:f0:64:ca:a0:b8: bf:ab:20:66:be:2c:97:ff:68:e6:15:af:90:ce:af:ba:58:75: c5:99:2e:89:fc:2d:7a:cf:7d:bf:29:07:f1:d4:10:35:8e:67: 3e:8b:41:68:3e:ac:53:18:c0:fa:bd:6c:c2:01:26:00:e3:f5: 51:4b:ff:f7:50:79:3e:2b:82:1d:91:12:16:b4:45:af:a1:71: 41:b2:9a:20:a9:a3:35:e9:21:f4:7e:6b:77:c6:1a:46:74:9f: 2a:ff:77:62:06:2b:97:cd:78:84:75:a1:3f:ac:a5:99:6a:98: c2:a0:7a:05:f4:15:ac:56:b1:b7:94:14:05:b3:61:6e:82:7c: 8e:c1:93:a9:bb:d1:0c:c2:00:88:8c:8c:e7:4f:2c:b7:6e:5a: 09:f8:bb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMJ/5gdV6DuA6YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NzVjMmJhNDctNWI2Ni00ZDcxLWIzODQtMDVhZTAzZDdkYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SpbFAgs/EKlZ3FfN/m51S9EjE/tZXrL0Q7W mgZQES8zaL3BIl6rwYaG8W7v4Wi3d73jXMmAlK18PGtepQv+mxlU9zCuAzfH2dK/ RK9rm93qUNRmEIcPyGUyk4clajnEPbkCGoyGM8Cdrxqj9ng8LMg7UNJ+NnIGRPWV P6+82dyATQZyWAHqaHHi0LvyvMqUP/aQHI8uZKkyo7pKqiWhnm9ZnLlEK/7P7sWR gyCf78aQye2zQMw0y7cd3qW5rL9jif/pT8SNoIVFucuKeo4m3Nl0jtqbprLTeMro hrqoiAAlvVerPmFRidJd+kcA8Xgqqah+PQ9tyqefVystHCXepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvHBqPdGZYL+t+ImClRjXsnlGx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvYjc2YTdkZWItMTM4Mi0z MjFmLTljYjEtODk5MDgzZTY5YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ItAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwG3WAIQHzn3+tmQq9qCGGXKuqLvIAGUKxOFAW4QoXKq35Gjzah4u8+ 8ssWQ0rNBPFg+nda70fcuxXW5JWgGDHfWQ3q76qzB8eXmnGcnKYolMTDaOsk8yUU fyIJNo0mCRcNdbqWDwbwZMqguL+rIGa+LJf/aOYVr5DOr7pYdcWZLon8LXrPfb8p B/HUEDWOZz6LQWg+rFMYwPq9bMIBJgDj9VFL//dQeT4rgh2REha0Ra+hcUGymiCp ozXpIfR+a3fGGkZ0nyr/d2IGK5fNeIR1oT+spZlqmMKgegX0FaxWsbeUFAWzYW6C fI7Bk6m70QzCAIiMjOdPLLduWgn4u8Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:57 2025 by rpki-client