$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa File: 064ec83e-38aa-3b8a-991e-bae309c9ed84.roa (raw, json) Hash identifier: ok3Xvt6Te572DL6WLbcGUuGLb1lcknUAYn3rd4I9v5I= Subject key identifier: 54:F9:05:49:63:13:97:0E:D6:3F:50:BC:7D:61:AA:47:3E:3E:0A:C2 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F432858482EC002CF4931153408958448 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 16509 IP address blocks: 143.244.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:c0:02:cf:49:31:15:34:08:95:84:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=436f889b-0f6a-4dc1-8fee-887cd22aee87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:c4:79:52:12:cf:f5:54:d5:2a:36:cd:af: 76:6b:c1:c6:bc:67:8e:14:14:b1:d8:86:74:16:5f: f4:43:a8:dd:9d:40:86:ab:3f:b9:08:9e:02:bd:fb: 9f:2f:06:76:ed:a5:91:63:e0:70:34:74:18:69:dc: ae:a7:34:34:69:80:12:10:97:a6:27:8f:cb:2b:cb: 79:77:4d:28:1e:50:d4:6e:1f:ba:82:fb:ed:a7:00: cd:1c:65:0e:ff:c7:23:bc:3e:42:01:01:21:32:a4: 71:28:cd:c0:0d:c6:24:ee:fa:c2:be:30:6e:ac:cb: 44:56:2a:7f:b2:29:a4:ba:77:b1:38:b4:12:f6:9c: 32:cd:a0:c3:24:95:92:54:1d:bb:95:50:fd:09:f4: c2:42:ae:ae:33:1a:e8:a4:d7:ec:80:5d:bf:fd:7f: 19:08:14:7d:58:5d:d6:e5:42:06:49:95:19:7e:b5: 6c:31:c3:ac:fc:67:13:52:c6:e4:68:b9:31:35:06: 44:0d:0e:03:49:59:e5:28:19:bf:8a:3f:06:f0:6e: 98:36:61:07:2e:fd:3e:8b:93:f1:28:ac:2b:25:ed: 03:91:6a:d6:93:ef:c6:86:9f:af:74:09:cd:97:f9: 23:c3:62:8a:c1:ce:39:0d:ce:79:44:26:eb:f9:28: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:05:49:63:13:97:0E:D6:3F:50:BC:7D:61:AA:47:3E:3E:0A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a8:2f:db:56:cf:f3:58:1e:43:a4:10:e2:33:fc:9a:f3:f3: 6a:d4:49:43:dd:18:10:ca:14:7b:9b:65:e6:25:bb:37:ad:fb: ef:f4:00:89:d4:e6:86:52:12:53:47:57:66:a6:bf:b0:a7:58: f2:62:cc:0c:e5:9a:20:d5:39:2c:ae:97:0a:b1:1b:fe:f1:0a: ba:45:41:41:62:1b:c2:30:d8:57:ca:90:43:c2:27:95:e3:22: ea:e3:41:53:39:51:5c:fb:e4:fa:18:7d:91:48:65:cf:62:8f: 72:68:78:13:87:07:10:b1:c3:a0:fd:1a:05:bc:25:9c:85:3c: 76:74:60:08:a7:d3:49:eb:51:ab:fa:00:04:6a:d8:83:df:66: 99:7c:7e:8f:17:e9:62:55:f5:90:78:22:9c:19:ec:69:0b:16: 64:c5:da:d2:ef:de:25:c5:a4:ae:53:f0:d6:ba:af:4a:e8:19: 62:5c:e2:39:f6:c6:8c:97:7e:50:c7:3c:3d:f6:b2:e0:27:e7: 13:b3:1a:89:0f:da:27:70:68:3d:4a:dc:25:dc:15:e6:3f:36: 5a:3e:0e:56:e3:2c:06:5a:f9:4c:da:b7:7d:dd:9e:dd:bd:b9: ce:51:d8:f1:a8:db:a1:5f:16:75:bb:6d:c8:e3:da:50:36:9b: 42:0d:66:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwALPSTEVNAiVhEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk NDM2Zjg4OWItMGY2YS00ZGMxLThmZWUtODg3Y2QyMmFlZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHrEeVISz/VU1So2za92a8HGvGeOFBSx2IZ0 Fl/0Q6jdnUCGqz+5CJ4CvfufLwZ27aWRY+BwNHQYadyupzQ0aYASEJemJ4/LK8t5 d00oHlDUbh+6gvvtpwDNHGUO/8cjvD5CAQEhMqRxKM3ADcYk7vrCvjBurMtEVip/ simkunexOLQS9pwyzaDDJJWSVB27lVD9CfTCQq6uMxropNfsgF2//X8ZCBR9WF3W 5UIGSZUZfrVsMcOs/GcTUsbkaLkxNQZEDQ4DSVnlKBm/ij8G8G6YNmEHLv0+i5Px KKwrJe0DkWrWk+/Ghp+vdAnNl/kjw2KKwc45Dc55RCbr+Si7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT5BUljE5cO1j9QvH1hqkc+PgrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMDY0ZWM4M2UtMzhhYS0z YjhhLTk5MWUtYmFlMzA5YzllZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj/RSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOoL9tWz/NYHkOkEOIz/Jrz82rUSUPdGBDKFHubZeYluzet++/0AInU 5oZSElNHV2amv7CnWPJizAzlmiDVOSyulwqxG/7xCrpFQUFiG8Iw2FfKkEPCJ5Xj IurjQVM5UVz75PoYfZFIZc9ij3JoeBOHBxCxw6D9GgW8JZyFPHZ0YAin00nrUav6 AARq2IPfZpl8fo8X6WJV9ZB4IpwZ7GkLFmTF2tLv3iXFpK5T8Na6r0roGWJc4jn2 xoyXflDHPD32suAn5xOzGokP2idwaD1K3CXcFeY/Nlo+DlbjLAZa+Uzat33dnt29 uc5R2PGo26FfFnW7bcjj2lA2m0INZhM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:40 2025 by rpki-client