$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa File: eaf54f35-82ef-3086-948d-7f841dfe1f72.roa (raw, json) Hash identifier: lJd+6UjUTKbNa/W5jphtROo0YeEqkzPBldtSa+eQSGY= Subject key identifier: 33:D9:D6:FB:9A:1D:1B:8D:DF:9A:62:E6:52:32:58:DB:1E:69:B7:3C Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285848AAFB4F1DD6CF12273A844C40 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 14618 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:4f:1d:d6:cf:12:27:3a:84:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=a384bdfd-5cee-476c-a363-63e6699a653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:b3:34:bb:cb:4d:04:68:0f:ae:e3:38:56: c4:4d:74:50:dc:4f:6a:c0:4d:5e:ee:ea:12:44:3c: 6c:31:3a:77:22:85:80:5f:b5:80:37:61:e0:eb:c7: 3e:38:5b:34:6b:e4:fb:25:8f:a6:27:79:ea:0f:92: 5e:c0:a5:36:95:a2:10:c2:63:23:48:25:9b:37:4f: 0d:dd:d8:e3:c9:54:57:f2:68:a4:40:0e:c9:0d:42: 8c:23:80:5f:66:b7:67:e1:c9:c1:d3:8e:8e:0c:98: d6:f5:9e:df:7b:5f:36:bc:81:4e:a1:4c:e7:c1:c8: 16:a9:d5:68:db:3b:d8:e5:21:a9:af:e2:f0:32:46: de:b5:2d:ee:70:89:e2:5d:49:76:e2:a8:5b:db:9b: bb:83:39:b5:79:1f:e0:9b:98:00:75:08:f5:b5:5b: 1f:67:7b:b2:79:35:7d:e6:9c:3f:c5:24:d1:9f:f8: 77:34:65:d6:0f:4f:be:a2:ba:ea:01:eb:99:e4:48: 04:2b:35:f4:22:38:e2:18:da:70:f7:7a:26:91:de: e6:36:d4:4f:11:ed:19:e6:d7:66:27:b4:9d:86:cb: 57:75:aa:1e:54:4c:3b:2a:31:9f:ea:b9:ca:34:28: 21:69:c0:38:d0:1b:87:f1:26:dc:2b:49:87:5a:af: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:D6:FB:9A:1D:1B:8D:DF:9A:62:E6:52:32:58:DB:1E:69:B7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c5:96:7d:69:46:49:51:75:39:a6:01:b2:0d:71:cf:1b:43: a8:d5:a5:95:28:a6:49:62:19:19:61:3d:4a:8e:52:f5:bb:dd: 1f:ea:d2:f8:21:ca:2e:08:ea:fd:91:d1:5a:88:ec:15:76:52: 4b:f5:6f:68:49:b4:09:1d:48:4e:03:a8:8b:83:d4:b7:31:20: 47:4f:18:2f:2c:be:19:29:b7:e2:de:ef:1a:cb:de:b8:ff:f7: 16:32:a5:54:6f:4f:11:49:77:6e:1a:07:a1:0c:f1:41:9d:53: 60:74:25:b6:b6:5d:0d:3c:7a:f6:87:1b:13:18:ed:06:0a:6d: e1:7c:b7:3e:2a:50:bd:ce:45:11:95:bc:98:c1:0f:75:93:fb: 6e:8c:34:06:68:18:bc:ca:b2:00:6b:b5:92:75:de:11:ba:9b: fd:20:d0:ae:eb:3c:57:3f:49:ef:69:e7:1b:0c:20:fc:10:d1: c5:d2:3d:cf:e5:99:03:c8:95:2d:ca:92:10:57:88:33:3a:78: 50:32:d6:f9:a3:6c:a9:e2:ca:55:2a:9d:54:43:7e:9d:5e:0f: c5:e4:3c:62:7f:7d:93:37:d3:52:44:19:5d:53:c6:6d:c4:5c: 3e:1d:c4:73:cd:7c:c5:5a:97:30:bc:f8:94:f6:97:33:aa:03: 68:6f:83:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+08d1s8SJzqETEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YTM4NGJkZmQtNWNlZS00NzZjLWEzNjMtNjNlNjY5OWE2NTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRGzNLvLTQRoD67jOFbETXRQ3E9qwE1e7uoS RDxsMTp3IoWAX7WAN2Hg68c+OFs0a+T7JY+mJ3nqD5JewKU2laIQwmMjSCWbN08N 3djjyVRX8mikQA7JDUKMI4BfZrdn4cnB046ODJjW9Z7fe182vIFOoUznwcgWqdVo 2zvY5SGpr+LwMkbetS3ucIniXUl24qhb25u7gzm1eR/gm5gAdQj1tVsfZ3uyeTV9 5pw/xSTRn/h3NGXWD0++orrqAeuZ5EgEKzX0IjjiGNpw93omkd7mNtRPEe0Z5tdm J7SdhstXdaoeVEw7KjGf6rnKNCghacA40BuH8SbcK0mHWq8vjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPZ1vuaHRuN35pi5lIyWNseabc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZWFmNTRmMzUtODJlZi0z MDg2LTk0OGQtN2Y4NDFkZmUxZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHFln1pRklRdTmmAbINcc8bQ6jVpZUopkliGRlhPUqOUvW73R/q0vgh yi4I6v2R0VqI7BV2Ukv1b2hJtAkdSE4DqIuD1LcxIEdPGC8svhkpt+Le7xrL3rj/ 9xYypVRvTxFJd24aB6EM8UGdU2B0Jba2XQ08evaHGxMY7QYKbeF8tz4qUL3ORRGV vJjBD3WT+26MNAZoGLzKsgBrtZJ13hG6m/0g0K7rPFc/Se9p5xsMIPwQ0cXSPc/l mQPIlS3KkhBXiDM6eFAy1vmjbKniylUqnVRDfp1eD8XkPGJ/fZM301JEGV1Txm3E XD4dxHPNfMValzC8+JT2lzOqA2hvg40= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:31 2025 by rpki-client