$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa File: 0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa (raw, json) Hash identifier: UsKS8XdyBRe2cQKzfX5vAWbR5500dN5x1iLECPDvnwY= Subject key identifier: 18:85:05:C7:C4:61:9F:60:DC:10:ED:CD:01:5D:C4:8A:35:26:DF:B5 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584840E5586F9839B64AD9AFA640 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 108.179.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:58:6f:98:39:b6:4a:d9:af:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=03a2ed00-4d43-4735-bfa9-22cc7f80e718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:ce:81:09:5c:c7:fd:ca:cd:5b:33:98:24: 22:49:47:7a:2b:0f:ca:c1:9e:42:4f:ff:6a:6d:31: 9a:05:20:61:8a:b5:dd:1d:2d:e0:fb:10:c9:cd:2f: 33:6c:86:fc:c9:d9:3c:80:af:d3:54:fb:35:4c:03: 70:05:b1:44:15:9c:7e:67:44:dd:57:94:82:ba:d9: f6:47:c0:c0:77:1d:66:2a:53:5f:ea:2e:7d:ca:ed: 87:b8:65:6f:e0:18:7f:8c:a7:b2:9b:57:78:2f:a5: e0:e2:3f:f8:be:ce:56:f3:8f:24:cf:92:69:dd:f5: e3:89:38:88:79:1f:6f:c6:5a:80:f0:3a:dd:d7:c8: 85:e3:cf:e5:92:ae:3b:c7:e8:97:7e:db:c0:72:8f: 82:3e:f2:06:1d:ba:c3:18:17:b0:9f:43:8d:ab:33: 7e:2f:28:33:56:23:16:38:fc:ed:fb:e9:77:90:82: a9:6b:3d:f3:a0:0a:b6:bc:60:75:15:6a:18:11:5c: 99:fd:1e:ea:de:88:8f:21:d5:03:ab:64:9c:3c:c4: 99:45:2a:01:0a:a4:d5:99:6d:e5:24:19:44:91:5b: 5b:9d:19:38:bf:b0:42:a3:49:c4:b4:e8:b5:8b:5c: f8:97:14:65:42:49:07:0a:90:e2:e6:80:6b:7e:c0: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:05:C7:C4:61:9F:60:DC:10:ED:CD:01:5D:C4:8A:35:26:DF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:89:ed:c9:c5:cf:9d:12:9b:79:ed:92:cd:ea:8b:bd:44:6e: 4e:e3:4e:5e:52:18:48:88:aa:b0:5e:0b:e8:6f:03:ce:c0:ab: ec:0a:2f:b6:1a:02:21:72:4f:99:fe:5b:6e:15:eb:df:1c:62: 77:80:d5:50:08:39:a1:68:3a:f8:28:94:0a:0c:ab:2a:14:c7: 2d:3b:4c:80:92:d0:c8:25:d8:34:bd:2c:ed:d1:f8:54:49:d6: cb:11:49:77:ee:62:04:df:02:32:1f:dc:7f:1f:32:08:05:25: 7f:1d:f7:b4:59:43:18:1e:b0:ed:f4:98:89:47:6d:14:fa:04: 88:96:a7:fa:44:70:29:79:d4:6b:a2:5c:d2:57:e8:f7:90:3e: e3:e4:6a:57:bf:25:50:ce:8d:b1:f6:e1:88:a6:f8:8a:98:d2: 45:6e:15:41:e6:3a:05:34:f6:b0:ac:24:c1:ce:04:41:ab:d7: 59:34:05:23:23:65:e3:d6:7d:60:94:93:f0:66:3e:af:ec:96: ac:0d:24:13:2d:7a:20:7b:b6:9b:a8:9e:9a:f6:6d:fd:a2:6e: 01:75:42:26:cf:70:26:d3:98:6a:80:10:f0:50:e3:91:39:cd: f3:2d:89:11:33:f2:78:c2:c9:50:fd:eb:b0:9f:48:9d:9b:90: 33:82:f5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5VhvmDm2StmvpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk MDNhMmVkMDAtNGQ0My00NzM1LWJmYTktMjJjYzdmODBlNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0fOgQlcx/3KzVszmCQiSUd6Kw/KwZ5CT/9q bTGaBSBhirXdHS3g+xDJzS8zbIb8ydk8gK/TVPs1TANwBbFEFZx+Z0TdV5SCutn2 R8DAdx1mKlNf6i59yu2HuGVv4Bh/jKeym1d4L6Xg4j/4vs5W848kz5Jp3fXjiTiI eR9vxlqA8Drd18iF48/lkq47x+iXftvAco+CPvIGHbrDGBewn0ONqzN+LygzViMW OPzt++l3kIKpaz3zoAq2vGB1FWoYEVyZ/R7q3oiPIdUDq2ScPMSZRSoBCqTVmW3l JBlEkVtbnRk4v7BCo0nEtOi1i1z4lxRlQkkHCpDi5oBrfsBz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiFBcfEYZ9g3BDtzQFdxIo1Jt+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGYyMDNlYmQtM2JmYi0z ZGRkLTk3YjktZGE4NGE4MWM3MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiJ7cnFz50Sm3ntks3qi71Ebk7jTl5SGEiIqrBeC+hvA87Aq+wKL7Ya AiFyT5n+W24V698cYneA1VAIOaFoOvgolAoMqyoUxy07TICS0Mgl2DS9LO3R+FRJ 1ssRSXfuYgTfAjIf3H8fMggFJX8d97RZQxgesO30mIlHbRT6BIiWp/pEcCl51Gui XNJX6PeQPuPkale/JVDOjbH24Yim+IqY0kVuFUHmOgU09rCsJMHOBEGr11k0BSMj ZePWfWCUk/BmPq/slqwNJBMteiB7tpuonpr2bf2ibgF1QibPcCbTmGqAEPBQ45E5 zfMtiREz8njCyVD967CfSJ2bkDOC9WM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:59 2025 by rpki-client