$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa File: 89cbdbb2-14b8-3187-878e-9d37888c582c.roa (raw, json) Hash identifier: P+5gInD3WfVR4MU9io0Bk7fpdiNPaiyKnRzCOww0C2Y= Subject key identifier: 63:57:B8:91:18:17:6E:85:ED:A3:2C:E7:60:71:B2:C8:C9:D6:6B:71 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F43285848E9CBD7DB8C1D3EDAEABFA900 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 155.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d7:db:8c:1d:3e:da:ea:bf:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=aa7fb711-da58-4236-a06f-0fb7f843fd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:e9:79:81:cd:87:9c:e9:e6:c1:a9:bc:bb: 28:6e:3e:1b:35:08:02:7b:85:10:16:d0:71:92:ec: 2d:62:38:3a:61:b1:73:ca:e5:57:04:65:10:41:4b: 92:83:ac:54:c2:67:3c:71:4f:b2:a7:5a:93:85:fc: c6:19:3d:05:96:52:e6:bc:17:a3:97:cd:39:04:30: 5e:7a:3c:a8:98:f0:28:76:f3:01:40:56:23:1f:9d: 7a:08:1e:80:56:23:fb:2e:59:91:ee:2a:86:fa:1f: 6a:ec:d5:3f:3f:b7:03:d9:de:85:5b:03:67:bd:c8: c1:45:6f:72:35:1d:1f:e1:1f:17:1f:56:68:ed:ec: 54:4b:4b:a6:09:f2:89:f9:24:50:fe:4c:13:11:af: 0a:08:11:a5:0a:08:0b:83:0d:23:76:a1:56:54:e7: e7:8b:50:ea:59:60:39:b2:ae:38:7f:63:87:9f:69: 3d:b1:c2:68:ae:52:5f:6a:84:7b:a5:7e:01:33:7c: 42:69:01:48:42:10:03:c3:91:ce:18:16:e6:db:fc: d5:42:98:3e:dc:1c:80:13:ea:0c:44:2d:d8:b6:98: 2b:c6:42:19:4f:99:0c:8a:f1:1c:7b:8b:8a:3a:f2: bd:5b:d6:f1:1e:1c:93:a8:7d:0d:94:7c:76:b6:4a: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:B8:91:18:17:6E:85:ED:A3:2C:E7:60:71:B2:C8:C9:D6:6B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/89cbdbb2-14b8-3187-878e-9d37888c582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:64:a3:23:77:57:e3:e6:40:12:1d:23:13:83:ba:14:da:2b: 6e:b2:55:6c:cd:7e:b5:96:d1:f2:e5:76:2f:51:e9:ad:6a:cb: 1b:03:b3:f3:0e:f6:7f:95:f1:9e:fd:3e:79:25:c3:cd:dc:d4: 2a:99:63:d0:95:a0:46:a2:46:46:4f:07:94:a4:17:21:29:f3: 97:c8:23:0f:20:66:00:03:d2:22:38:d5:8a:34:f9:fd:68:4b: f7:fa:b4:4b:47:b6:6f:41:51:28:3c:f5:1c:63:04:a4:a2:e5: 29:f7:2f:24:a2:4f:a7:10:45:41:d9:ba:29:f9:49:21:64:e6: 69:7a:05:4e:cd:7a:8b:08:00:8c:43:72:3b:bb:c9:f5:1e:c4: 01:dd:c5:82:40:66:11:59:da:bd:ba:a9:39:75:2e:11:d9:9a: b2:43:6a:ec:c7:9f:75:e8:27:3e:e3:30:dd:63:ec:53:cc:37: 7d:a1:04:d6:6e:64:70:96:5c:7d:6f:8e:6a:2c:f2:e2:71:d2: 01:a7:dd:64:ce:36:d9:76:b5:89:8d:94:8b:09:7e:22:b4:5c: 05:62:6b:5f:63:c5:2b:4a:8a:9b:55:a5:70:40:f6:42:b0:fd: 1b:22:e7:99:8a:af:47:e8:c5:d5:b8:65:31:4b:cb:7b:9e:34: c2:5f:bc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9fbjB0+2uq/qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YWE3ZmI3MTEtZGE1OC00MjM2LWEwNmYtMGZiN2Y4NDNmZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTTpeYHNh5zp5sGpvLsobj4bNQgCe4UQFtBx kuwtYjg6YbFzyuVXBGUQQUuSg6xUwmc8cU+yp1qThfzGGT0FllLmvBejl805BDBe ejyomPAodvMBQFYjH516CB6AViP7LlmR7iqG+h9q7NU/P7cD2d6FWwNnvcjBRW9y NR0f4R8XH1Zo7exUS0umCfKJ+SRQ/kwTEa8KCBGlCggLgw0jdqFWVOfni1DqWWA5 sq44f2OHn2k9scJorlJfaoR7pX4BM3xCaQFIQhADw5HOGBbm2/zVQpg+3ByAE+oM RC3YtpgrxkIZT5kMivEce4uKOvK9W9bxHhyTqH0NlHx2tkq30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNXuJEYF26F7aMs52BxssjJ1mtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvODljYmRiYjItMTRiOC0z MTg3LTg3OGUtOWQzNzg4OGM1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdkoyN3V+PmQBIdIxODuhTaK26yVWzNfrWW0fLldi9R6a1qyxsDs/MO 9n+V8Z79Pnklw83c1CqZY9CVoEaiRkZPB5SkFyEp85fIIw8gZgAD0iI41Yo0+f1o S/f6tEtHtm9BUSg89RxjBKSi5Sn3LySiT6cQRUHZuin5SSFk5ml6BU7NeosIAIxD cju7yfUexAHdxYJAZhFZ2r26qTl1LhHZmrJDauzHn3XoJz7jMN1j7FPMN32hBNZu ZHCWXH1vjmos8uJx0gGn3WTONtl2tYmNlIsJfiK0XAVia19jxStKiptVpXBA9kKw /Rsi55mKr0foxdW4ZTFLy3ueNMJfvNA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:45:52 2025 by rpki-client