$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa File: 89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa (raw, json) Hash identifier: ILY2YSLY/z6O5m5E5r2IF48cU+RMbI5JntUdTcWuR1Q= Subject key identifier: 68:F6:1F:F3:FA:81:12:2E:81:05:ED:D2:93:9D:FC:41:21:2F:4A:03 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F43285848B8F0C67C71A6C51F5DCE4E40 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 40501 IP address blocks: 216.235.80.0/24 maxlen: 24 216.235.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c6:7c:71:a6:c5:1f:5d:ce:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=0d0c18b1-b3d4-4ce2-a690-a10c590fe165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:75:af:b2:00:9f:b4:3e:c7:82:6c:a2:8e:43: c2:5d:7f:82:4a:71:09:ba:61:07:28:66:5b:93:eb: 18:81:b3:01:ee:b1:dc:83:2f:cf:e8:87:47:a3:91: c1:e9:37:56:f5:fd:ee:c1:7b:a1:64:76:e6:40:2e: be:e6:06:4c:7d:86:17:1d:37:26:23:03:4c:d2:e3: 04:28:87:94:83:8b:60:51:11:84:0a:76:fa:42:c4: 89:97:da:4d:c1:18:96:3e:c9:9c:2a:3a:e4:37:5a: ce:73:28:d8:35:76:d1:f1:83:5a:a3:b1:05:1a:a5: b8:da:94:17:34:5c:d1:45:92:45:6d:b6:d8:8e:b6: b5:f3:ad:36:b0:11:87:bc:a5:c2:32:e6:df:c1:c7: ca:24:42:52:c0:7b:7f:2b:14:2a:85:c7:04:47:e1: cc:ea:34:7e:8f:45:2a:de:b3:67:c4:7b:0d:a5:a1: 27:55:a6:48:c5:ef:42:7b:88:4a:42:2b:fa:b7:fa: c1:c5:7d:34:2e:72:42:88:c2:7d:52:96:89:05:05: dd:a3:52:de:41:99:1d:97:7c:a2:00:55:c7:7c:47: 62:e2:df:69:7d:ad:b4:da:55:df:58:4a:7b:00:dc: f7:d2:4d:aa:a1:ba:f4:2f:95:06:85:0c:c1:f3:a3: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:1F:F3:FA:81:12:2E:81:05:ED:D2:93:9D:FC:41:21:2F:4A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.80.0/24 216.235.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e0:8a:f2:be:0e:6e:15:99:8b:d2:c9:06:7d:ba:a3:76:21: 65:a9:08:86:14:f0:cf:af:f7:b8:f4:56:ae:54:60:ad:21:2d: b2:2d:2a:c4:2d:54:df:b2:b0:e7:b3:5a:04:2f:1b:63:88:9b: 17:1b:47:93:52:d1:2b:a3:c8:2c:8c:9e:d2:7f:81:3d:bb:c0: 9e:ef:f9:10:f3:41:ed:00:65:de:35:58:51:8d:58:51:f6:01: af:9d:b0:01:9a:58:96:e6:87:19:63:d0:df:7a:5c:1a:8b:d1: 84:c9:47:69:e4:81:e2:45:08:90:4a:07:99:d8:be:dd:0f:67: 01:4d:7c:78:d0:9c:a6:d3:2e:c6:b2:f7:50:98:d1:7c:0a:19: 03:80:b2:42:d8:a9:8c:1a:b7:fe:6a:51:0b:78:e2:a7:08:67: b0:ae:5e:f3:a1:85:1a:42:35:7c:4f:51:ac:d4:54:49:ed:78: 74:e6:94:79:da:49:96:87:90:98:de:54:c3:35:c0:93:b2:8a: 51:f1:74:94:20:3f:df:6f:0a:1b:21:b6:b5:84:f5:a4:2d:74: 62:ca:c8:fc:34:ce:d7:98:2b:24:5c:86:f3:18:8a:b0:ff:14: 1e:1b:e4:10:49:0c:23:f0:d3:f1:6e:82:27:89:3c:17:cb:26: fc:c3:f6:58 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi48MZ8cabFH13OTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MGQwYzE4YjEtYjNkNC00Y2UyLWE2OTAtYTEwYzU5MGZlMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HWvsgCftD7HgmyijkPCXX+CSnEJumEHKGZb k+sYgbMB7rHcgy/P6IdHo5HB6TdW9f3uwXuhZHbmQC6+5gZMfYYXHTcmIwNM0uME KIeUg4tgURGECnb6QsSJl9pNwRiWPsmcKjrkN1rOcyjYNXbR8YNao7EFGqW42pQX NFzRRZJFbbbYjra18602sBGHvKXCMubfwcfKJEJSwHt/KxQqhccER+HM6jR+j0Uq 3rNnxHsNpaEnVaZIxe9Ce4hKQiv6t/rBxX00LnJCiMJ9UpaJBQXdo1LeQZkdl3yi AFXHfEdi4t9pfa202lXfWEp7ANz30k2qobr0L5UGhQzB86O25QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGj2H/P6gRIugQXt0pOd/EEhL0oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvODlhMmEwOWQtMDdhYS0z NGQ0LTgwZDYtYzQ0YTRlZGU4MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2OtQAwQA 2OtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADvgivK+Dm4VmYvSyQZ9uqN2IWWpCIYU8M+v97j0Vq5UYK0h LbItKsQtVN+ysOezWgQvG2OImxcbR5NS0SujyCyMntJ/gT27wJ7v+RDzQe0AZd41 WFGNWFH2Aa+dsAGaWJbmhxlj0N96XBqL0YTJR2nkgeJFCJBKB5nYvt0PZwFNfHjQ nKbTLsay91CY0XwKGQOAskLYqYwat/5qUQt44qcIZ7CuXvOhhRpCNXxPUazUVEnt eHTmlHnaSZaHkJjeVMM1wJOyilHxdJQgP99vChshtrWE9aQtdGLKyPw0zteYKyRc hvMYirD/FB4b5BBJDCPw0/FugieJPBfLJvzD9lg= -----END CERTIFICATE-----Generated at Thu Apr 17 03:23:43 2025 by rpki-client