$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa File: d00a4d26-89c0-3f41-9055-9730a0f4d182.roa (raw, json) Hash identifier: Ad0esBwij2IKH9E+PvdrXUZ6RMDtFrLvGogAMB8fDmM= Subject key identifier: 8F:AB:58:ED:0A:5E:30:18:68:CE:86:8E:72:0B:F6:02:9A:5C:37:29 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848F65BF52F499065B6B9A3AE80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:2f:49:90:65:b6:b9:a3:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d8b632ed-01d0-49a2-b77e-13876ea82c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:49:c0:43:8f:f7:cf:50:3f:e0:48:af:ce: 94:82:f5:e7:a0:b3:54:db:ca:69:cc:97:c4:6e:4d: ff:fc:f7:5f:67:84:fd:5b:53:28:26:71:57:10:73: 9c:ab:83:4e:25:bf:76:03:c8:16:d7:e3:ff:9d:37: 22:ee:69:68:ac:a2:aa:60:35:3e:f5:7d:72:be:5c: 78:77:6f:91:04:49:a2:88:6a:41:c2:d0:ff:57:c7: fe:a5:56:1b:9f:ff:53:fb:72:6d:3b:a6:a7:df:11: 21:51:a5:32:76:d7:4d:51:d2:8f:9e:4b:2e:1b:80: 7f:ce:bd:e8:65:d4:d2:37:8a:84:e8:2b:c0:32:80: 7b:d0:7f:58:c9:5b:7d:d0:61:8a:bf:94:df:43:e2: 60:69:84:b7:75:25:99:98:5a:d7:c6:1d:c9:dd:9c: 99:67:6f:44:a5:f4:49:e0:1b:73:55:77:d2:b4:c9: f4:42:61:e3:ac:3b:24:3f:46:37:c9:59:e6:97:fd: 55:0e:44:00:74:2d:29:71:1f:65:e7:7b:a1:8f:d9: 97:8d:a5:33:9f:6e:1b:8d:e0:80:48:cb:43:67:a4: 9d:7d:bb:34:47:48:0f:a6:7a:2f:ed:7b:eb:13:c1: 2c:68:5b:ad:d3:bf:b3:15:0a:2e:80:43:c4:db:66: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:58:ED:0A:5E:30:18:68:CE:86:8E:72:0B:F6:02:9A:5C:37:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d00a4d26-89c0-3f41-9055-9730a0f4d182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ee:ce:50:a9:4d:da:68:7d:29:1c:41:ee:ce:23:82:94:69: ab:46:22:99:71:9b:f8:5d:57:b9:dc:d6:06:49:e7:b0:41:79: c8:ab:91:14:27:db:8f:47:33:a7:f3:37:38:e2:1f:b2:67:62: d4:99:7e:24:f3:f3:1c:4c:58:b0:be:ca:cb:6d:1e:65:cc:95: cb:0f:e5:58:93:d8:26:d9:25:e8:0c:04:0f:c5:25:23:74:fc: f1:5b:cc:fd:05:8a:c9:4b:29:08:a3:1c:d8:3d:48:57:c0:d2: c5:b3:50:ad:e8:7f:b1:64:33:0b:3d:a3:45:21:16:1c:13:c4: 75:04:53:f6:12:65:2e:85:f3:50:59:cd:28:33:da:b7:89:6a: ce:d2:ca:14:d9:da:4e:a9:79:a8:8e:e8:46:69:8c:77:c9:90: c2:ec:3c:b1:8b:c9:ff:b8:ee:c3:d1:bc:b9:23:01:8a:89:a8: 29:d2:66:25:cc:52:a0:7d:18:4a:ea:04:16:81:ec:e9:25:67: a6:a7:8e:16:7a:d8:57:96:ac:cb:39:79:69:a6:4c:ad:0d:4e: b4:6f:f2:9d:ba:e6:cb:94:1b:aa:6e:d5:b9:f0:f9:a6:2c:8e: a9:7f:15:13:70:34:91:78:b7:89:fd:cc:ad:85:80:fa:a6:ae: 94:0c:77:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/UvSZBltrmjroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDhiNjMyZWQtMDFkMC00OWEyLWI3N2UtMTM4NzZlYTgyYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dtJwEOP989QP+BIr86UgvXnoLNU28ppzJfE bk3//PdfZ4T9W1MoJnFXEHOcq4NOJb92A8gW1+P/nTci7mlorKKqYDU+9X1yvlx4 d2+RBEmiiGpBwtD/V8f+pVYbn/9T+3JtO6an3xEhUaUydtdNUdKPnksuG4B/zr3o ZdTSN4qE6CvAMoB70H9YyVt90GGKv5TfQ+JgaYS3dSWZmFrXxh3J3ZyZZ29EpfRJ 4BtzVXfStMn0QmHjrDskP0Y3yVnml/1VDkQAdC0pcR9l53uhj9mXjaUzn24bjeCA SMtDZ6Sdfbs0R0gPpnov7XvrE8EsaFut07+zFQougEPE22bx7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+rWO0KXjAYaM6GjnIL9gKaXDcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDAwYTRkMjYtODljMC0z ZjQxLTkwNTUtOTczMGEwZjRkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbuzlCpTdpofSkcQe7OI4KUaatGIplxm/hdV7nc1gZJ57BBecirkRQn 249HM6fzNzjiH7JnYtSZfiTz8xxMWLC+ysttHmXMlcsP5ViT2CbZJegMBA/FJSN0 /PFbzP0FislLKQijHNg9SFfA0sWzUK3of7FkMws9o0UhFhwTxHUEU/YSZS6F81BZ zSgz2reJas7SyhTZ2k6peaiO6EZpjHfJkMLsPLGLyf+47sPRvLkjAYqJqCnSZiXM UqB9GErqBBaB7OklZ6anjhZ62FeWrMs5eWmmTK0NTrRv8p265suUG6pu1bnw+aYs jql/FRNwNJF4t4n9zK2FgPqmrpQMd0I= -----END CERTIFICATE-----Generated at Fri Mar 14 17:47:56 2025 by rpki-client