$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa File: 44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa (raw, json) Hash identifier: UOkaabtmkBj2iJ7+p9E1C1yt7BYa7+fOcy2cx7YWihM= Subject key identifier: 36:2B:05:1A:14:6D:76:C2:88:2A:AA:6C:17:11:E7:A0:2B:93:D7:3A Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584875F0565E442B44C8A0971700 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 4540 IP address blocks: 170.89.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:56:5e:44:2b:44:c8:a0:97:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=5c490bf1-e76b-4845-ae24-dd3c1ee6cbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:7e:4b:52:5a:1a:cb:94:f0:27:48:b5:ea: 40:44:06:00:a7:d6:84:a9:d7:40:58:d8:e0:54:e7: 9b:29:b6:fd:48:00:ef:5f:91:37:da:64:7d:19:6a: f2:9b:55:88:b8:5f:51:4c:64:a0:44:cd:26:1e:c8: 78:22:ce:f7:e7:0f:64:23:48:c7:2f:a5:72:43:38: 32:53:92:fc:23:2d:c0:7c:e1:07:e7:a5:77:eb:f3: e3:15:e1:c0:25:75:b0:fb:7f:94:3f:09:0b:61:2d: a5:54:56:6d:2b:24:de:31:ca:ab:35:80:3e:e3:23: a0:39:ba:86:90:ec:a6:18:7a:cd:c4:a0:f6:77:bd: fc:b5:a7:24:2c:aa:82:18:da:ca:6a:ad:99:ef:69: cb:e5:db:5e:0c:c7:7f:5b:9d:91:36:07:bf:e9:bd: 14:bd:dc:44:45:da:54:af:25:1b:f8:57:d8:76:f3: 48:48:a5:41:f1:4d:54:5e:64:7b:76:b1:4d:b1:e2: 2b:c4:7a:a8:01:78:dd:6e:de:54:33:8a:af:bb:75: ec:f5:23:5b:ed:9b:55:b9:c6:92:14:1f:39:ac:a0: e0:0e:3d:6a:76:2b:d2:db:7f:ae:d5:b3:93:c4:8f: aa:52:ef:08:00:59:76:88:28:8c:6f:94:c0:29:ca: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2B:05:1A:14:6D:76:C2:88:2A:AA:6C:17:11:E7:A0:2B:93:D7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:75:f9:18:dc:f5:33:bc:05:72:93:47:99:32:c2:db:ff:8b: 24:4b:8d:69:0c:23:bc:4f:45:5f:4e:51:8b:55:98:a2:e7:d1: c4:77:7a:4a:71:5d:6b:7d:db:39:f9:d6:74:b0:77:e8:47:ae: 75:96:06:61:da:08:a6:42:d5:4c:1a:f6:a9:7a:8f:b3:a5:d8: 9f:6a:c0:9f:f2:22:df:44:ac:82:a7:ec:69:ec:cd:ac:ae:9c: 94:26:1e:85:c0:8a:f6:dc:aa:6c:5f:3f:0e:49:0b:82:ec:c5: 66:9f:25:47:b8:fe:f8:05:29:d3:62:ab:4b:18:6f:e4:2c:cf: 57:ca:f4:df:b4:6b:6e:39:3c:f2:e1:58:c0:74:e4:ac:1e:67: a0:84:f8:48:30:85:13:41:5f:16:c8:e3:55:1e:63:2f:67:aa: 24:cf:4c:e4:f3:0a:89:bc:22:4b:ec:25:0a:52:14:d2:ea:74: 34:cf:cb:ca:2f:36:0a:14:eb:1a:3a:ba:3b:65:ef:31:70:2e: 59:72:7e:3b:9c:6b:14:b9:9e:1d:bd:ac:cb:af:a9:13:32:c4: bc:db:dd:28:49:73:e5:3c:6e:f1:e7:c2:31:3f:5a:e5:c5:f2: 86:17:24:5b:a7:89:c8:7d:92:0c:62:08:80:af:9e:97:08:7e: e3:f6:d0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FZeRCtEyKCXFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk NWM0OTBiZjEtZTc2Yi00ODQ1LWFlMjQtZGQzYzFlZTZjYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNB+S1JaGsuU8CdItepARAYAp9aEqddAWNjg VOebKbb9SADvX5E32mR9GWrym1WIuF9RTGSgRM0mHsh4Is735w9kI0jHL6VyQzgy U5L8Iy3AfOEH56V36/PjFeHAJXWw+3+UPwkLYS2lVFZtKyTeMcqrNYA+4yOgObqG kOymGHrNxKD2d738tackLKqCGNrKaq2Z72nL5dteDMd/W52RNge/6b0UvdxERdpU ryUb+FfYdvNISKVB8U1UXmR7drFNseIrxHqoAXjdbt5UM4qvu3Xs9SNb7ZtVucaS FB85rKDgDj1qdivS23+u1bOTxI+qUu8IAFl2iCiMb5TAKcoYTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYrBRoUbXbCiCqqbBcR56Ark9c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNDRjZWQ5NDctY2UwNy0z ZmEzLTk2NjktYzYzZWQ0ZWU3NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJ1+Rjc9TO8BXKTR5kywtv/iyRLjWkMI7xPRV9OUYtVmKLn0cR3ekpx XWt92zn51nSwd+hHrnWWBmHaCKZC1Uwa9ql6j7Ol2J9qwJ/yIt9ErIKn7Gnszayu nJQmHoXAivbcqmxfPw5JC4LsxWafJUe4/vgFKdNiq0sYb+Qsz1fK9N+0a245PPLh WMB05KweZ6CE+EgwhRNBXxbI41UeYy9nqiTPTOTzCom8IkvsJQpSFNLqdDTPy8ov NgoU6xo6ujtl7zFwLllyfjucaxS5nh29rMuvqRMyxLzb3ShJc+U8bvHnwjE/WuXF 8oYXJFunich9kgxiCICvnpcIfuP20Bk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:23 2025 by rpki-client