$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa File: dc1d157b-c428-308d-9aba-56de00fe1d82.roa (raw, json) Hash identifier: mmuHAv80+n0xHtzLaMW5aEqndxfwmMGbIrDdjhAr7mc= Subject key identifier: 5F:4C:73:F5:B9:3D:83:AB:13:E2:C6:B9:16:55:52:64:1D:75:A6:7B Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584816B3540725B28756B0272280 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa Signing time: Tue 03 Dec 2024 23:16:00 +0000 ROA not before: Tue 03 Dec 2024 23:16:00 +0000 ROA not after: Mon 03 Mar 2025 23:16:00 +0000 asID: 14618 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:16:b3:54:07:25:b2:87:56:b0:27:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Dec 3 23:16:00 2024 GMT Not After : Mar 3 23:16:00 2025 GMT Subject: CN=5cfc5f95-99c7-4b0c-b42a-4e9306cf75f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:0d:0b:88:74:c8:77:8d:69:55:2d:62:48: 27:db:b7:a9:53:31:97:f0:80:93:52:27:82:31:62: 03:63:6a:74:2e:2b:32:fb:ba:fa:eb:c9:e7:0c:7d: 43:46:c5:ef:7e:76:7b:02:33:33:5a:b0:22:3e:be: 33:a1:f2:b4:aa:db:ac:e2:ea:d5:8c:ce:69:44:85: 65:0d:2e:bd:ad:16:6e:14:85:15:d8:0c:9f:fa:23: 25:05:cc:4b:80:76:d3:40:29:4a:4b:8e:91:23:a4: 17:45:22:3f:9e:c4:3e:46:b9:35:bd:4d:9c:83:be: e8:47:58:89:c3:43:73:5c:e9:d8:aa:c1:50:a0:32: a0:fd:08:eb:1e:65:01:83:02:f1:f8:66:c8:d1:fd: 53:2d:72:a8:f4:06:44:4c:9e:1b:f3:c8:3f:14:21: ea:00:22:b5:d3:eb:9b:cd:01:b2:0d:5e:9b:26:be: ba:88:d8:23:66:c4:83:92:5a:53:5f:4b:0c:f5:9c: 29:33:bf:65:fa:85:e5:c6:3b:73:7f:5a:fe:fd:45: 4d:28:71:d0:51:28:0b:c4:0b:bb:cd:89:d5:bc:cb: 9a:73:7d:e1:ee:62:64:ab:25:b3:2f:d3:e4:1a:19: 32:69:73:03:58:31:35:79:db:f7:9e:00:d4:b2:90: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:73:F5:B9:3D:83:AB:13:E2:C6:B9:16:55:52:64:1D:75:A6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dc1d157b-c428-308d-9aba-56de00fe1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:50:bd:0b:64:d5:c4:c3:00:ac:2e:ba:ba:ee:f1:9a:8a:f3: b7:e4:69:83:f7:c2:ed:73:9c:a9:6a:ae:5c:16:6c:4e:20:eb: b8:fd:16:4f:e1:72:2a:66:36:ff:3b:25:c1:64:5e:6c:a8:dc: b0:b7:cb:04:f6:d8:d3:6d:d3:46:4e:ed:6e:94:c8:90:6c:59: 26:10:89:67:e4:d5:b3:d2:c2:31:c3:b7:16:68:c9:97:07:bb: 5d:c4:9b:49:69:46:8b:d3:86:be:a9:54:fd:e5:40:b4:bf:38: fa:24:7d:89:f1:69:cd:a6:d3:9a:ee:2a:29:3e:6f:1a:8e:d4: 1c:ad:a1:d7:2d:3a:95:07:23:56:59:96:5e:41:c1:2f:43:2e: 05:9b:18:d4:17:72:25:ee:f0:8d:e9:04:44:30:08:c8:e6:38: bb:37:5f:b2:43:e2:05:39:14:ca:0b:97:9e:06:d4:9d:23:56: 47:37:2b:86:c5:90:75:ec:af:28:fd:49:ac:3a:52:68:9b:6e: 1a:1e:74:f5:3a:fa:2a:d1:81:73:83:92:26:2d:b3:1b:17:b2: a9:4c:e3:cc:5c:c8:c9:d1:5d:e2:e3:39:82:e7:20:18:5e:d2: 1f:54:8f:68:4f:e4:44:c5:0d:19:a9:3a:79:64:7a:31:ae:ed: 74:cd:10:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgWs1QHJbKHVrAnIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI0MTIwMzIzMTYwMFoXDTI1MDMwMzIzMTYwMFowLzEtMCsGA1UEAxMk NWNmYzVmOTUtOTljNy00YjBjLWI0MmEtNGU5MzA2Y2Y3NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ0NC4h0yHeNaVUtYkgn27epUzGX8ICTUieC MWIDY2p0Lisy+7r668nnDH1DRsXvfnZ7AjMzWrAiPr4zofK0qtus4urVjM5pRIVl DS69rRZuFIUV2Ayf+iMlBcxLgHbTQClKS46RI6QXRSI/nsQ+Rrk1vU2cg77oR1iJ w0NzXOnYqsFQoDKg/QjrHmUBgwLx+GbI0f1TLXKo9AZETJ4b88g/FCHqACK10+ub zQGyDV6bJr66iNgjZsSDklpTX0sM9ZwpM79l+oXlxjtzf1r+/UVNKHHQUSgLxAu7 zYnVvMuac33h7mJkqyWzL9PkGhkyaXMDWDE1edv3ngDUspBKKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Mc/W5PYOrE+LGuRZVUmQddaZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZGMxZDE1N2ItYzQyOC0z MDhkLTlhYmEtNTZkZTAwZmUxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxQvQtk1cTDAKwuurru8ZqK87fkaYP3wu1znKlqrlwWbE4g67j9Fk/h cipmNv87JcFkXmyo3LC3ywT22NNt00ZO7W6UyJBsWSYQiWfk1bPSwjHDtxZoyZcH u13Em0lpRovThr6pVP3lQLS/OPokfYnxac2m05ruKik+bxqO1BytodctOpUHI1ZZ ll5BwS9DLgWbGNQXciXu8I3pBEQwCMjmOLs3X7JD4gU5FMoLl54G1J0jVkc3K4bF kHXsryj9Saw6UmibbhoedPU6+irRgXODkiYtsxsXsqlM48xcyMnRXeLjOYLnIBhe 0h9Uj2hP5ETFDRmpOnlkejGu7XTNEIw= -----END CERTIFICATE-----Generated at Wed Feb 5 09:55:30 2025 by rpki-client