$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa File: 064ec83e-38aa-3b8a-991e-bae309c9ed84.roa (raw, json) Hash identifier: A/Y2Qe7kIbQkBZAPVlAb+rjnljCCv4PtxtOQajM6JuI= Subject key identifier: 70:F3:D3:89:35:2F:E6:EB:B1:8D:78:46:EF:94:1F:B6:41:36:11:6B Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F432858490E16BECEFDAA70C48E051880 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 143.244.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:be:ce:fd:aa:70:c4:8e:05:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=1c347465-c30f-4574-a2d9-970854cb48cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:65:ff:63:36:46:8c:b9:c9:a6:cb:4c:e7: 47:9b:d7:f2:aa:f8:67:92:8f:3f:65:0b:98:35:e1: a8:d6:c7:68:fd:72:2b:05:26:be:a7:ea:16:ef:67: 37:fd:94:3a:47:ff:52:a2:3b:ad:87:0f:2a:e4:87: d0:e3:fd:6c:43:ad:16:8e:21:90:f2:f8:e7:b8:f8: d5:78:1c:bb:97:5d:f1:26:3a:a2:fb:63:f1:18:6d: 72:1e:f7:5a:19:d6:87:89:03:1f:af:35:28:3b:0f: bf:a7:86:2d:91:c7:ad:71:91:41:30:5f:eb:5a:b2: e0:7b:94:59:05:c5:3d:25:00:ec:09:d0:54:54:27: 13:62:59:76:a3:dc:56:27:9d:9d:85:fe:c9:80:c9: 1c:82:95:4d:ae:7a:2e:c9:41:8d:9b:71:c4:e6:d2: c5:75:cd:4f:5f:f6:35:c8:a6:94:4a:41:ce:f2:06: f9:94:5d:c6:5a:56:32:81:52:fe:80:c3:65:c0:be: 7f:e8:98:af:cd:f5:18:45:b0:06:5b:f5:47:ed:34: 13:93:cf:67:36:59:10:d8:7c:75:a5:b2:1f:80:36: 46:a1:46:28:ca:3e:9e:8c:33:f8:f6:a8:01:0b:61: bc:79:59:5d:ef:7e:ff:38:43:3f:e8:9f:a8:27:02: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:D3:89:35:2F:E6:EB:B1:8D:78:46:EF:94:1F:B6:41:36:11:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/064ec83e-38aa-3b8a-991e-bae309c9ed84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9a:05:56:fb:7f:24:be:6b:84:35:cd:39:24:8b:bf:37:38: 2d:34:0f:49:a8:1a:7b:34:5a:f4:1d:c6:91:e7:aa:c3:3a:bf: a6:2a:52:22:02:69:40:65:0a:f0:8a:e0:1f:7c:de:19:8a:e1: 00:c8:60:65:d9:58:ab:2d:81:d0:4d:76:41:ae:a5:fe:e4:1f: 4b:48:dd:17:b1:99:0a:71:49:ec:21:7d:16:18:46:75:5c:9d: 33:8b:bd:15:12:ad:bf:2a:15:1c:7b:05:3b:54:be:a2:27:66: c6:71:40:ae:04:66:1e:1e:76:c9:33:23:f0:10:55:7f:85:ed: 70:ff:d2:87:68:87:0f:21:92:51:db:d6:a3:1b:60:5c:14:0c: f0:cc:65:68:ba:83:5f:50:a9:58:fb:09:ee:8d:e3:86:10:70: 8f:37:f2:95:d7:2b:73:28:fa:cb:a2:46:d6:29:74:11:fd:2d: ec:39:91:96:b6:88:fb:e0:48:a7:8b:39:2e:60:dc:4f:3b:cd: d9:0a:22:87:d1:c3:a1:3f:0e:44:00:95:5b:55:3f:a4:c4:2b: 4e:08:cf:3b:bb:66:86:8f:31:a8:e0:a0:bb:35:8d:dd:f6:40: ac:de:29:2e:5d:fb:d3:44:12:04:2c:c6:e5:95:29:aa:ae:e0: 73:99:ac:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr7O/apwxI4FGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MWMzNDc0NjUtYzMwZi00NTc0LWEyZDktOTcwODU0Y2I0OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDxl/2M2Roy5yabLTOdHm9fyqvhnko8/ZQuY NeGo1sdo/XIrBSa+p+oW72c3/ZQ6R/9Sojuthw8q5IfQ4/1sQ60WjiGQ8vjnuPjV eBy7l13xJjqi+2PxGG1yHvdaGdaHiQMfrzUoOw+/p4YtkcetcZFBMF/rWrLge5RZ BcU9JQDsCdBUVCcTYll2o9xWJ52dhf7JgMkcgpVNrnouyUGNm3HE5tLFdc1PX/Y1 yKaUSkHO8gb5lF3GWlYygVL+gMNlwL5/6JivzfUYRbAGW/VH7TQTk89nNlkQ2Hx1 pbIfgDZGoUYoyj6ejDP49qgBC2G8eVld737/OEM/6J+oJwKGKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDz04k1L+brsY14Ru+UH7ZBNhFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMDY0ZWM4M2UtMzhhYS0z YjhhLTk5MWUtYmFlMzA5YzllZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj/RSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWaBVb7fyS+a4Q1zTkki783OC00D0moGns0WvQdxpHnqsM6v6YqUiIC aUBlCvCK4B983hmK4QDIYGXZWKstgdBNdkGupf7kH0tI3RexmQpxSewhfRYYRnVc nTOLvRUSrb8qFRx7BTtUvqInZsZxQK4EZh4edskzI/AQVX+F7XD/0odohw8hklHb 1qMbYFwUDPDMZWi6g19QqVj7Ce6N44YQcI838pXXK3Mo+suiRtYpdBH9Lew5kZa2 iPvgSKeLOS5g3E87zdkKIofRw6E/DkQAlVtVP6TEK04Izzu7ZoaPMajgoLs1jd32 QKzeKS5d+9NEEgQsxuWVKaqu4HOZrO0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:12 2025 by rpki-client