$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa File: e95e7009-bba1-3d4c-907f-59184c496169.roa (raw, json) Hash identifier: 9bD4V87f1LSFZ/HGKJI/avTduo5zb3G7X8JjIwANRdI= Subject key identifier: 46:30:13:2A:A9:B9:44:95:C2:E5:C1:A8:75:52:D0:8D:83:A2:E9:2E Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848F65BE0B275D87ABD50DC2840 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 143.244.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e0:b2:75:d8:7a:bd:50:dc:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=1d609dc9-3a87-4686-9a4b-dc8b50c85941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:30:db:f5:b6:c0:a9:c7:eb:e9:6d:29:d2: 6c:f0:b7:1f:64:5f:83:a4:5d:ea:7b:5e:09:4a:b8: bd:18:17:2f:d0:c3:b8:e1:0a:8d:6a:19:66:35:65: 99:83:7e:8d:16:c0:47:7c:bf:ef:65:c9:34:5f:01: 0a:86:c1:36:a3:8f:b8:7d:f8:99:60:4e:13:4d:30: cf:0c:10:f0:6c:0d:13:84:23:d4:7d:c7:b8:78:91: cc:c5:12:34:48:bc:26:9c:9b:28:86:c6:a0:92:e7: 69:2b:49:15:dc:61:d3:1b:df:b1:5f:c7:f3:a7:8f: a5:a1:b9:f1:43:26:ae:15:32:35:74:7d:89:e9:66: 34:84:94:1f:3b:51:ab:c3:a6:9a:90:f2:26:f9:34: e9:16:06:90:cc:33:4c:4d:96:aa:4e:75:1a:7d:5b: 45:3c:41:5b:f1:ce:3f:76:4f:8c:a7:b6:9b:c0:04: ef:15:e3:d7:62:ea:78:8a:45:3f:2f:11:29:4d:f0: cb:57:d1:50:34:b9:46:bc:a9:8a:8d:10:48:0c:26: 7d:cf:3b:32:77:d3:89:a9:52:7a:0b:35:df:3c:0c: 60:b6:38:13:02:77:0b:0d:d3:fb:d1:c2:d0:0b:a6: 77:5c:af:17:c6:92:b6:f2:c5:bc:fb:80:48:89:f6: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:13:2A:A9:B9:44:95:C2:E5:C1:A8:75:52:D0:8D:83:A2:E9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:72:92:1b:92:ba:85:8f:8b:ed:2d:e5:27:1d:50:86:fa:46: 19:88:6c:5b:27:83:d7:33:87:3e:4d:86:1e:68:b2:20:85:03: 82:79:4f:b6:4f:ca:1f:73:6f:e1:ae:e7:79:63:5d:cb:cc:57: e5:1d:34:62:c6:da:7f:37:a8:04:bc:2a:9e:61:80:4d:ce:53: 49:e1:e2:74:1f:17:70:21:1e:dc:c7:e1:ed:f9:b7:d1:bd:88: c0:20:fc:43:52:c1:40:e9:fd:ed:cb:ea:45:7d:d9:58:1c:2f: ea:b5:82:d2:c7:09:2c:6b:17:e6:fd:a3:bc:2b:4f:77:07:bc: 6b:95:22:bc:4d:c7:ae:b3:ac:b6:db:1a:8f:e9:19:c6:67:a8: 16:90:d6:9f:35:72:45:6b:0d:a4:96:97:90:d9:75:42:91:93: 81:42:ca:fa:6a:fc:7d:70:24:2a:91:97:54:04:a2:ef:f5:6e: 17:76:4b:ea:b7:b3:34:56:0f:09:da:5b:82:f5:74:7d:15:ae: 8f:8d:fd:06:44:ab:27:5d:0c:01:64:b9:13:ec:a6:d4:65:85: f8:9a:81:3d:39:98:b9:45:34:31:31:db:36:ab:2c:53:f0:87: 4f:1d:83:60:a8:37:73:c4:16:40:e6:8c:05:b3:4b:93:32:92: 3b:c7:cc:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+Cyddh6vVDcKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MWQ2MDlkYzktM2E4Ny00Njg2LTlhNGItZGM4YjUwYzg1OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4w2/W2wKnH6+ltKdJs8LcfZF+DpF3qe14J Sri9GBcv0MO44QqNahlmNWWZg36NFsBHfL/vZck0XwEKhsE2o4+4ffiZYE4TTTDP DBDwbA0ThCPUfce4eJHMxRI0SLwmnJsohsagkudpK0kV3GHTG9+xX8fzp4+lobnx QyauFTI1dH2J6WY0hJQfO1Grw6aakPIm+TTpFgaQzDNMTZaqTnUafVtFPEFb8c4/ dk+Mp7abwATvFePXYup4ikU/LxEpTfDLV9FQNLlGvKmKjRBIDCZ9zzsyd9OJqVJ6 CzXfPAxgtjgTAncLDdP70cLQC6Z3XK8XxpK28sW8+4BIifa21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYwEyqpuUSVwuXBqHVS0I2DoukuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTk1ZTcwMDktYmJhMS0z ZDRjLTkwN2YtNTkxODRjNDk2MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/RQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhykhuSuoWPi+0t5ScdUIb6RhmIbFsng9czhz5Nhh5osiCFA4J5T7ZP yh9zb+Gu53ljXcvMV+UdNGLG2n83qAS8Kp5hgE3OU0nh4nQfF3AhHtzH4e35t9G9 iMAg/ENSwUDp/e3L6kV92VgcL+q1gtLHCSxrF+b9o7wrT3cHvGuVIrxNx66zrLbb Go/pGcZnqBaQ1p81ckVrDaSWl5DZdUKRk4FCyvpq/H1wJCqRl1QEou/1bhd2S+q3 szRWDwnaW4L1dH0Vro+N/QZEqyddDAFkuRPsptRlhfiagT05mLlFNDEx2zarLFPw h08dg2CoN3PEFkDmjAWzS5MykjvHzEw= -----END CERTIFICATE-----Generated at Fri Mar 14 13:30:35 2025 by rpki-client