$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa File: 8925c97f-3867-318e-826a-c92b028c6985.roa (raw, json) Hash identifier: jzDcfcdi24mN07i5K5dyu+TyuEtu6evEefNtYZxP+qg= Subject key identifier: 21:8A:F2:6C:98:95:2C:43:A5:3B:6E:20:6C:2C:F7:EB:BD:1C:6C:F0 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848AAFB4F3644CDB33866CAF180 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 16509 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:4f:36:44:cd:b3:38:66:ca:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=6cce585b-6dbe-4a42-a411-36d5232eacc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:64:67:41:9a:8b:87:08:d6:02:c2:68:94: 5e:b1:b8:2e:36:9d:47:93:34:4e:75:c0:0d:6a:5d: a7:4b:b2:ce:51:fc:28:8e:08:67:e5:44:f4:23:ef: 79:b0:ae:b0:13:48:51:06:cf:01:74:32:24:df:2a: c0:8a:a5:29:6e:69:00:f6:15:57:64:85:bc:ef:78: 32:9a:87:6c:ed:31:41:59:90:68:f2:ef:c3:40:e3: c6:67:60:24:6f:24:2b:0e:f0:2a:8f:c3:90:1e:63: cc:e3:3d:9f:d2:83:5a:3a:d5:cb:43:c9:71:c9:f3: 61:3d:f9:7c:77:a1:50:59:31:7a:3a:e0:10:c5:2a: b7:ce:ab:51:f1:3d:fc:d6:58:17:02:fc:1b:97:67: 4f:b0:74:d1:a4:f1:01:ca:55:b6:b3:36:ce:9e:e6: 53:ee:f3:87:b4:4e:c1:3e:4f:3d:72:af:bc:3f:24: f0:cd:07:87:c8:37:ec:34:8a:6a:87:e6:2c:12:7a: c7:7c:83:b2:09:d8:76:2f:2f:9c:7e:d0:98:cd:53: 01:17:f1:87:42:4d:5f:87:dc:66:3e:e4:36:fa:22: df:f4:de:ab:bb:c6:7b:7c:f6:a3:70:f4:82:e2:d8: aa:81:d2:a1:86:68:41:2c:39:cc:24:80:61:fe:43: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8A:F2:6C:98:95:2C:43:A5:3B:6E:20:6C:2C:F7:EB:BD:1C:6C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:55:2c:54:b3:a5:39:bc:83:e5:18:2f:bf:20:85:0c:2a:a2: a3:8c:b5:d7:01:1d:5e:d3:27:b6:81:d1:23:8e:26:3c:ac:62: 06:d3:3a:4f:f3:c5:c5:7b:ee:9c:ad:8b:c1:d8:1d:39:86:56: 16:54:0e:c5:dd:d5:35:be:4e:7a:ab:4b:92:a6:ea:84:36:04: d0:1b:26:99:6a:10:2c:67:aa:d4:65:2c:a2:b7:86:92:db:bc: b1:a6:ce:e9:e5:30:90:cc:f0:54:1f:b8:5a:0b:61:0c:d1:01: df:f9:3d:b1:52:34:25:80:74:7c:af:e0:4e:4a:bb:45:42:ec: cd:07:dc:0e:87:eb:4b:18:6c:3b:18:c9:13:c2:d5:df:1c:63: 96:87:8c:d9:11:84:f3:eb:82:41:92:e5:94:cb:68:c2:a4:0c: 36:7e:58:59:01:f2:35:33:bd:24:df:f0:e7:91:28:f2:24:fb: 13:c2:fd:55:fb:50:c8:b7:5f:c2:d3:d2:b4:7c:b7:16:cb:68: 07:5c:83:58:ce:ce:85:1b:66:3d:d9:c6:90:37:61:a5:d5:1d: 4f:9b:a0:39:9d:6b:04:ef:db:57:6b:d9:90:a5:c7:d3:11:fd: 0b:21:18:39:5d:e0:4c:ef:0c:a3:12:dd:91:f9:03:9e:d2:55: e2:24:c2:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+082RM2zOGbK8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk NmNjZTU4NWItNmRiZS00YTQyLWE0MTEtMzZkNTIzMmVhY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI5kZ0Gai4cI1gLCaJResbguNp1HkzROdcAN al2nS7LOUfwojghn5UT0I+95sK6wE0hRBs8BdDIk3yrAiqUpbmkA9hVXZIW873gy mods7TFBWZBo8u/DQOPGZ2AkbyQrDvAqj8OQHmPM4z2f0oNaOtXLQ8lxyfNhPfl8 d6FQWTF6OuAQxSq3zqtR8T381lgXAvwbl2dPsHTRpPEBylW2szbOnuZT7vOHtE7B Pk89cq+8PyTwzQeHyDfsNIpqh+YsEnrHfIOyCdh2Ly+cftCYzVMBF/GHQk1fh9xm PuQ2+iLf9N6ru8Z7fPajcPSC4tiqgdKhhmhBLDnMJIBh/kMYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGK8myYlSxDpTtuIGws9+u9HGzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvODkyNWM5N2YtMzg2Ny0z MThlLTgyNmEtYzkyYjAyOGM2OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5VLFSzpTm8g+UYL78ghQwqoqOMtdcBHV7TJ7aB0SOOJjysYgbTOk/z xcV77pyti8HYHTmGVhZUDsXd1TW+TnqrS5Km6oQ2BNAbJplqECxnqtRlLKK3hpLb vLGmzunlMJDM8FQfuFoLYQzRAd/5PbFSNCWAdHyv4E5Ku0VC7M0H3A6H60sYbDsY yRPC1d8cY5aHjNkRhPPrgkGS5ZTLaMKkDDZ+WFkB8jUzvSTf8OeRKPIk+xPC/VX7 UMi3X8LT0rR8txbLaAdcg1jOzoUbZj3ZxpA3YaXVHU+boDmdawTv21dr2ZClx9MR /QshGDld4EzvDKMS3ZH5A57SVeIkwhQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:29:09 2025 by rpki-client