$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa File: 89707528-a4b0-3570-9d8a-88acb7809bc6.roa (raw, json) Hash identifier: l99ZPjSyR+v7/onr5hQAQ+h7knyjnPD+29RCam+7B4c= Subject key identifier: DF:D5:B3:15:C3:65:8B:FF:B9:5F:4B:8E:A7:0F:2A:65:F6:B5:33:B2 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285848BE863598B2000960BAA6ACC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 54113 IP address blocks: 172.111.66.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:35:98:b2:00:09:60:ba:a6:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=c970e881-15e2-4bd5-9709-ec41dc4ec021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:4e:c3:24:fb:42:61:22:6a:8f:d1:da:f0: 90:46:81:35:b8:50:05:cb:ae:bb:f1:5d:c3:a4:4a: 2b:cd:18:23:24:58:de:63:ab:f3:50:c1:fb:2f:61: c8:d2:64:d9:f2:e6:0c:12:53:f6:65:77:5f:ba:69: 6b:71:5c:c8:3d:66:a9:d4:c3:10:8e:ac:35:dc:6b: 13:92:69:1e:a4:38:27:ee:23:10:72:9c:00:f9:d8: 61:70:4d:f7:86:3e:31:4d:9d:7d:48:02:dd:e4:18: 9e:33:9a:87:86:b4:19:e4:9b:a1:36:af:cd:64:ad: b0:54:9e:9e:14:24:a6:7b:3a:d6:e1:31:b6:91:98: d3:9e:f2:bb:d2:cb:f1:b1:35:c4:bd:83:10:8a:4f: d3:e6:17:3a:db:a0:41:a5:ff:72:d8:28:68:31:d6: 81:35:52:7e:47:3a:2d:6d:10:50:a8:ef:c8:eb:87: 52:0e:ba:9f:65:d5:c5:48:c7:12:20:ac:67:d0:f8: 5b:d1:40:0b:ce:d7:38:f4:d6:c0:dd:3c:4f:3b:31: 7e:ca:98:a2:d7:1c:6c:16:e9:c0:22:01:62:40:68: ff:43:de:e8:04:b9:ac:a3:60:7b:79:8b:30:60:4a: 67:3b:c8:cb:db:66:a2:bb:a7:bf:30:12:c5:47:a0: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:B3:15:C3:65:8B:FF:B9:5F:4B:8E:A7:0F:2A:65:F6:B5:33:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.66.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4f:c9:59:b6:5b:74:5d:8e:af:50:38:de:2f:78:88:5f:da: 03:1e:3d:ff:2a:93:12:25:5e:ad:51:e7:ab:a0:44:bd:90:0e: db:18:0e:46:10:d1:88:33:22:7b:30:15:23:56:05:1c:5b:01: 5e:e9:95:7a:3e:52:f5:45:78:bb:9f:14:5d:1e:2b:b1:f7:a9: cf:50:12:30:ce:4f:73:9e:a3:05:6e:27:4d:74:0b:be:a6:5b: b2:fd:26:fe:c9:ad:f4:0e:b8:54:48:32:6f:4b:11:7c:55:2b: 03:6b:32:cc:f6:9f:52:38:8a:c1:46:af:28:2a:64:41:5a:13: 9c:0c:0b:92:52:db:47:f4:8e:3e:c7:e8:1b:e6:b0:ee:28:27: a3:ef:0e:c7:3c:67:ad:28:31:53:a5:a0:21:99:d4:6a:89:04: ab:d3:1b:51:4a:25:2b:90:a4:88:4b:b7:5c:d2:b9:0b:ea:63: 99:88:a9:c2:f7:44:e5:19:ad:f9:7e:a9:e5:8f:12:e1:e2:bc: 49:15:ae:97:f8:81:ed:b9:14:d5:92:21:64:6e:8b:bf:6f:e2: 53:de:aa:fb:a2:54:82:24:1c:13:00:29:06:e2:6a:f6:b6:79: d5:5d:5d:7c:d4:4e:b5:5f:0b:d6:51:3d:e5:4c:2f:35:45:3e: 82:9f:c6:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi+hjWYsgAJYLqmrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Yzk3MGU4ODEtMTVlMi00YmQ1LTk3MDktZWM0MWRjNGVjMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEROwyT7QmEiao/R2vCQRoE1uFAFy6678V3D pEorzRgjJFjeY6vzUMH7L2HI0mTZ8uYMElP2ZXdfumlrcVzIPWap1MMQjqw13GsT kmkepDgn7iMQcpwA+dhhcE33hj4xTZ19SALd5BieM5qHhrQZ5JuhNq/NZK2wVJ6e FCSmezrW4TG2kZjTnvK70svxsTXEvYMQik/T5hc626BBpf9y2ChoMdaBNVJ+Rzot bRBQqO/I64dSDrqfZdXFSMcSIKxn0Phb0UALztc49NbA3TxPOzF+ypii1xxsFunA IgFiQGj/Q97oBLmso2B7eYswYEpnO8jL22aiu6e/MBLFR6CgOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN/VsxXDZYv/uV9LjqcPKmX2tTOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODk3MDc1MjgtYTRiMC0z NTcwLTlkOGEtODhhY2I3ODA5YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9CADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDT8lZtlt0XY6vUDjeL3iIX9oDHj3/KpMSJV6tUeeroES9kA7bGA5G ENGIMyJ7MBUjVgUcWwFe6ZV6PlL1RXi7nxRdHiux96nPUBIwzk9znqMFbidNdAu+ pluy/Sb+ya30DrhUSDJvSxF8VSsDazLM9p9SOIrBRq8oKmRBWhOcDAuSUttH9I4+ x+gb5rDuKCej7w7HPGetKDFTpaAhmdRqiQSr0xtRSiUrkKSIS7dc0rkL6mOZiKnC 90TlGa35fqnljxLh4rxJFa6X+IHtuRTVkiFkbou/b+JT3qr7olSCJBwTACkG4mr2 tnnVXV181E61XwvWUT3lTC81RT6Cn8Z1 -----END CERTIFICATE-----Generated at Thu Apr 3 02:58:58 2025 by rpki-client