$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa File: d1acf045-6547-38ea-ae4b-98388f48d9f8.roa (raw, json) Hash identifier: fSsyM8jkj60eGIw7HmrPxU56ueK6J3KKUr4SVQerODQ= Subject key identifier: 96:B5:71:9A:42:FD:48:73:95:46:B5:F7:85:EA:96:34:D9:BA:E6:3A Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F432858493DC2205C2A080E077C143300 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa Signing time: Wed 19 Mar 2025 15:49:16 +0000 ROA not before: Wed 19 Mar 2025 15:49:16 +0000 ROA not after: Tue 17 Jun 2025 15:49:16 +0000 asID: 8075 IP address blocks: 216.9.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3d:c2:20:5c:2a:08:0e:07:7c:14:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Mar 19 15:49:16 2025 GMT Not After : Jun 17 15:49:16 2025 GMT Subject: CN=8aa81ae7-92c3-426f-9356-7160059db156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:6c:46:ea:ca:e0:62:fa:6a:b3:73:f0:64: 32:fa:51:71:01:06:f3:98:25:71:b7:3b:68:f4:6a: 10:2c:18:47:ca:81:ff:ea:fa:b2:08:6d:6a:cd:6d: 9e:47:c3:89:0a:10:ff:ff:5f:ba:ea:b3:57:5c:a3: 79:00:6f:5d:cd:a5:cc:f2:e5:74:34:ed:99:7a:9e: 33:c5:d1:ac:79:4d:ed:74:25:da:45:5a:b2:2e:11: ff:1c:5b:15:ba:3e:22:0b:bf:9f:e7:88:9f:4a:06: c3:93:bc:47:27:ef:d9:38:7a:c2:b2:96:d9:ee:ad: b5:e7:6d:1c:ba:9f:fd:d3:10:9b:1a:3b:c2:6c:12: 78:53:24:e8:35:25:3b:fc:76:a9:7f:92:94:c1:9b: d5:a3:fb:86:01:39:36:bc:1a:e1:38:ee:e3:d7:a6: 2b:e2:95:2b:8a:23:55:6e:8a:d3:09:3e:ae:99:7f: 16:a2:31:25:28:72:86:88:b9:43:6d:cb:20:8c:6d: bc:6f:d4:19:20:90:d1:94:8e:f6:8c:b8:bc:ac:9f: dc:03:62:c6:75:1e:17:eb:71:b3:91:1a:bc:81:f7: 30:bd:74:3c:90:21:98:b3:55:f0:19:bb:b0:6f:47: a7:ac:71:d1:46:30:ee:02:c9:15:2b:47:94:c2:90: bc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:71:9A:42:FD:48:73:95:46:B5:F7:85:EA:96:34:D9:BA:E6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 216.9.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:47:c4:77:07:3b:84:82:b0:fa:9f:d6:b9:99:29:42:a3:2c: 7b:c9:2c:ee:b7:14:13:86:cc:42:98:22:ca:7e:0d:11:42:24: 2b:7f:b8:57:3c:3a:83:dc:a9:6e:28:57:c2:21:93:62:c4:bd: ce:af:89:4d:18:f9:3b:a4:04:ca:ae:5d:0b:4b:d4:14:18:71: 8f:d3:84:fe:9c:10:87:12:59:21:06:7f:eb:98:22:e7:ca:f6: a7:b2:72:fb:26:1f:80:41:27:77:69:96:3d:6c:34:b1:81:d0: 5e:c3:e6:07:09:d3:48:bb:13:06:5e:f5:7f:b9:d3:db:2e:14: 0d:b2:c2:ac:96:8a:69:d2:75:6a:10:18:14:10:0b:fa:50:d6: 90:86:eb:60:26:98:f1:5c:93:33:a9:07:ee:c8:90:f3:b3:ed: c3:ac:57:d3:2e:74:b7:76:e6:8d:ba:81:66:04:1c:71:64:b2: 64:7f:b3:cc:0a:2f:5d:0a:91:32:45:e9:bd:4b:88:78:f5:59: be:13:b2:e9:5c:b0:ea:ee:37:f0:91:5b:3a:25:d4:a0:77:bd: b9:3c:63:63:2f:ee:36:ce:5e:43:f7:16:db:ff:2a:a9:1c:4a: be:57:63:bb:be:19:3e:36:ab:db:a1:9e:49:b9:bd:ed:59:20: e2:f5:30:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk9wiBcKggOB3wUMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDMxOTE1NDkxNloXDTI1MDYxNzE1NDkxNlowLzEtMCsGA1UEAxMk OGFhODFhZTctOTJjMy00MjZmLTkzNTYtNzE2MDA1OWRiMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zNsRurK4GL6arNz8GQy+lFxAQbzmCVxtzto 9GoQLBhHyoH/6vqyCG1qzW2eR8OJChD//1+66rNXXKN5AG9dzaXM8uV0NO2Zep4z xdGseU3tdCXaRVqyLhH/HFsVuj4iC7+f54ifSgbDk7xHJ+/ZOHrCspbZ7q21520c up/90xCbGjvCbBJ4UyToNSU7/Hapf5KUwZvVo/uGATk2vBrhOO7j16Yr4pUriiNV borTCT6umX8WojElKHKGiLlDbcsgjG28b9QZIJDRlI72jLi8rJ/cA2LGdR4X63Gz kRq8gfcwvXQ8kCGYs1XwGbuwb0enrHHRRjDuAskVK0eUwpC8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa1cZpC/UhzlUa194XqljTZuuY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvZDFhY2YwNDUtNjU0Ny0z OGVhLWFlNGItOTgzODhmNDhkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5HxHcHO4SCsPqf1rmZKUKjLHvJLO63FBOGzEKYIsp+DRFCJCt/uFc8 OoPcqW4oV8Ihk2LEvc6viU0Y+TukBMquXQtL1BQYcY/ThP6cEIcSWSEGf+uYIufK 9qeycvsmH4BBJ3dplj1sNLGB0F7D5gcJ00i7EwZe9X+509suFA2ywqyWimnSdWoQ GBQQC/pQ1pCG62AmmPFckzOpB+7IkPOz7cOsV9MudLd25o26gWYEHHFksmR/s8wK L10KkTJF6b1LiHj1Wb4TsulcsOruN/CRWzol1KB3vbk8Y2Mv7jbOXkP3Ftv/Kqkc Sr5XY7u+GT42q9uhnkm5ve1ZIOL1MFw= -----END CERTIFICATE-----Generated at Wed Apr 9 14:04:42 2025 by rpki-client