$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa File: fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa (raw, json) Hash identifier: hhipCih75WUNb/21BrLi+Yv85xtONzV+K+0iAUI26dk= Subject key identifier: 8B:AA:88:62:1D:4F:54:8A:16:74:1A:4F:EA:0D:8B:B2:60:3C:F1:C8 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F43285848E59BBCB163A67704714D8C80 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bc:b1:63:a6:77:04:71:4d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=1a71bdbd-21f5-4d00-9f5e-a0985cee46fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:13:34:02:a5:4a:50:1b:a9:62:62:f4:4a: 78:74:28:c8:39:a4:94:60:4c:9e:35:87:83:0d:f8: 6a:99:da:20:2b:df:12:66:80:05:d7:b0:ad:be:9b: c7:e1:46:56:e8:36:7f:cf:97:ad:77:10:52:4e:6c: 85:9f:b1:d4:51:5a:d9:f7:51:e1:9b:a1:d2:ad:86: 61:2c:01:36:87:46:3d:ad:7a:79:00:29:fe:73:a4: 9d:c6:35:1f:9b:82:fd:bd:ea:56:76:2d:db:e6:a4: 87:af:67:f4:ab:23:41:6a:5d:b5:c9:05:0d:01:4c: 00:f4:16:47:86:0c:ba:c1:03:13:61:ef:b5:0b:c8: c5:3d:1c:76:6a:2d:05:23:1d:5f:57:18:c7:c0:42: 87:6a:9d:50:9f:1d:74:a6:70:ec:71:ec:9e:0b:bc: d7:ed:06:0f:d3:09:48:6f:76:41:9e:a0:2f:b1:5d: 4d:96:19:db:99:a2:3d:4c:85:20:3d:8b:e7:a3:56: 73:76:a7:a0:77:3a:b4:71:38:60:05:d8:10:5e:e0: 0c:cb:f8:75:40:2b:a5:28:cc:7f:56:e0:a0:b5:95: 0d:a4:f1:ea:67:97:69:6b:63:8a:3e:bb:72:6f:02: 23:6f:cc:48:b2:29:6f:cd:6c:ea:ba:33:53:2f:1a: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AA:88:62:1D:4F:54:8A:16:74:1A:4F:EA:0D:8B:B2:60:3C:F1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:54:98:d6:2a:ef:a7:fa:6e:29:60:52:7c:48:99:94:e3:75: c7:0c:35:63:9f:77:b7:e5:1b:e3:94:69:dc:0b:a3:3c:b7:23: b0:a9:fb:7a:47:de:4d:d0:df:c6:c9:37:6d:58:b7:0a:ed:5a: 9a:54:f1:e0:6a:67:1c:bd:c7:e8:1a:0b:1d:e9:b7:1d:28:84: 3a:f4:b3:f5:cd:7d:cc:3e:fd:dc:35:41:1a:d5:25:24:75:f4: d1:cf:59:cd:f6:7a:51:c5:9d:5d:ef:94:be:41:b3:99:08:69: d1:fe:fb:9d:01:38:b2:06:3f:c7:92:b1:aa:d8:a8:b4:ef:68: 61:00:e9:96:21:d5:ce:5c:49:7b:e4:2b:81:68:3d:4b:44:71: 33:35:b2:ab:3f:d6:35:9e:79:37:b0:3c:af:af:fc:52:4f:2c: af:cc:46:2d:e4:03:49:8f:fd:fd:fd:a0:7b:3a:4e:2e:a6:87: bd:57:9f:b6:0d:54:0b:b4:37:e1:f0:28:72:d9:88:79:7f:e3: e1:c7:c1:de:85:2a:6c:b7:48:da:e9:cb:a4:46:da:96:6b:ed: a1:f9:05:f8:76:79:0a:ae:96:a9:06:8f:ea:7d:bc:da:b2:79: a7:cc:e1:57:a1:27:d8:95:50:dc:f6:8a:74:f1:9e:82:6a:dd: b7:24:b2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7yxY6Z3BHFNjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MWE3MWJkYmQtMjFmNS00ZDAwLTlmNWUtYTA5ODVjZWU0NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKwTNAKlSlAbqWJi9Ep4dCjIOaSUYEyeNYeD DfhqmdogK98SZoAF17CtvpvH4UZW6DZ/z5etdxBSTmyFn7HUUVrZ91Hhm6HSrYZh LAE2h0Y9rXp5ACn+c6SdxjUfm4L9vepWdi3b5qSHr2f0qyNBal21yQUNAUwA9BZH hgy6wQMTYe+1C8jFPRx2ai0FIx1fVxjHwEKHap1Qnx10pnDsceyeC7zX7QYP0wlI b3ZBnqAvsV1NlhnbmaI9TIUgPYvno1Zzdqegdzq0cThgBdgQXuAMy/h1QCulKMx/ VuCgtZUNpPHqZ5dpa2OKPrtybwIjb8xIsilvzWzqujNTLxqAXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuqiGIdT1SKFnQaT+oNi7JgPPHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvZmM4NzJiNjQtZGZlYS0z MzEzLTljNTctY2YyOGE4YWQwZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJUmNYq76f6bilgUnxImZTjdccMNWOfd7flG+OUadwLozy3I7Cp+3pH 3k3Q38bJN21YtwrtWppU8eBqZxy9x+gaCx3ptx0ohDr0s/XNfcw+/dw1QRrVJSR1 9NHPWc32elHFnV3vlL5Bs5kIadH++50BOLIGP8eSsarYqLTvaGEA6ZYh1c5cSXvk K4FoPUtEcTM1sqs/1jWeeTewPK+v/FJPLK/MRi3kA0mP/f39oHs6Ti6mh71Xn7YN VAu0N+HwKHLZiHl/4+HHwd6FKmy3SNrpy6RG2pZr7aH5Bfh2eQqulqkGj+p9vNqy eafM4VehJ9iVUNz2inTxnoJq3bcksuc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:27 2025 by rpki-client