$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa File: 50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa (raw, json) Hash identifier: Xu91ce1wIZrne2Jdrk85N2u9+HlayLtULsHdRJUb+Ug= Subject key identifier: E4:58:28:EC:03:F1:15:91:FF:BB:19:E6:19:1A:E5:77:C2:C8:03:95 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285849ABB49E5996F586AC2F3B0B20 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 143.244.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9e:59:96:f5:86:ac:2f:3b:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=10a75f5f-638d-4a5a-bb0d-5973bbb0360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:88:88:dd:7c:8c:1b:af:7c:89:a4:b7:4a: 00:d4:08:e6:92:42:c4:e7:58:c9:2e:ee:65:90:27: a0:56:18:e1:e4:bc:59:c1:36:d9:2d:66:22:0f:15: a6:19:8f:3a:f3:f9:a6:aa:94:c6:78:78:3d:d6:9b: 28:d9:22:d9:22:f9:24:bd:9c:24:35:38:68:86:50: ed:af:35:8c:76:be:c8:d3:72:ea:8e:c1:8f:82:d8: 1b:25:90:69:98:ed:ca:6a:68:d9:d3:83:6e:b0:35: 27:e6:07:9d:35:2f:30:58:66:a0:cd:51:92:0f:fb: 4e:6f:97:f0:88:5c:4d:9c:c2:7a:d0:ef:f4:ac:c7: 71:e2:2f:dc:e6:d6:22:4d:a4:c1:48:66:bf:74:56: bb:f3:34:67:3d:ff:e8:6d:c5:34:95:c0:fb:8a:da: 54:f5:5d:54:8c:5e:56:39:ef:0f:03:08:63:d4:e6: 96:30:60:98:c8:99:59:65:64:2f:24:04:64:c3:35: c4:73:b2:9d:8e:fb:ce:13:55:c7:64:59:b5:df:88: ce:fb:af:9d:66:85:c0:2e:fb:d5:42:d1:89:55:d3: 39:dc:4b:61:36:d9:d9:36:37:56:cb:12:88:bf:07: 84:bb:fc:7c:35:18:24:90:cf:bc:ad:be:44:34:55: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:28:EC:03:F1:15:91:FF:BB:19:E6:19:1A:E5:77:C2:C8:03:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/50fdc64b-34ea-3604-aada-e3a8e20a3ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d5:bf:8d:ab:75:2d:e0:4f:8f:91:cb:65:a2:7f:cd:db:cb: 4d:74:5e:35:14:e9:f1:7d:21:67:11:03:fa:34:84:ac:6e:c0: 24:16:b1:b1:9f:42:f8:5d:07:32:c9:5c:2c:e2:56:a0:0a:99: 1c:ba:a7:42:6d:c5:36:c8:7d:d0:c5:56:21:78:e9:89:a7:8d: 61:2f:b0:a9:f8:d2:39:97:d1:3b:40:c4:f1:10:e0:d0:70:05: 87:e7:3f:65:b6:26:bd:16:0f:40:e9:32:76:4d:9a:78:27:de: b8:83:79:e3:6a:6c:21:45:eb:43:7e:df:24:c9:a0:37:79:39: 0c:5b:ad:98:64:dd:7b:0e:9d:3d:19:43:f3:fa:c2:1f:4c:14: 57:42:62:de:53:a7:9d:14:77:0a:48:57:e5:86:cf:6b:46:be: 13:e0:ed:77:7e:56:ac:bf:a3:ab:d3:24:7c:48:ad:5e:18:50: 9b:ba:ae:c1:68:ed:9a:b3:1a:29:3b:c1:10:79:7c:d2:ad:4d: 80:91:24:2c:f0:a8:39:1f:f5:3a:4f:90:d7:fe:ee:f6:69:3e: 16:31:a4:4b:b5:b9:b4:b1:8a:97:18:25:99:63:d2:e9:4c:bb: 89:85:10:d5:10:c1:03:3a:0b:f7:8f:d5:77:99:33:13:b0:10: ce:61:ac:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ5ZlvWGrC87CyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTBhNzVmNWYtNjM4ZC00YTVhLWJiMGQtNTk3M2JiYjAzNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh2IiN18jBuvfImkt0oA1AjmkkLE51jJLu5l kCegVhjh5LxZwTbZLWYiDxWmGY868/mmqpTGeHg91pso2SLZIvkkvZwkNThohlDt rzWMdr7I03LqjsGPgtgbJZBpmO3KamjZ04NusDUn5gedNS8wWGagzVGSD/tOb5fw iFxNnMJ60O/0rMdx4i/c5tYiTaTBSGa/dFa78zRnPf/obcU0lcD7itpU9V1UjF5W Oe8PAwhj1OaWMGCYyJlZZWQvJARkwzXEc7KdjvvOE1XHZFm134jO+6+dZoXALvvV QtGJVdM53EthNtnZNjdWyxKIvweEu/x8NRgkkM+8rb5ENFVLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORYKOwD8RWR/7sZ5hka5XfCyAOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNTBmZGM2NGItMzRlYS0z NjA0LWFhZGEtZTNhOGUyMGEzZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvVv42rdS3gT4+Ry2Wif83by010XjUU6fF9IWcRA/o0hKxuwCQWsbGf QvhdBzLJXCziVqAKmRy6p0JtxTbIfdDFViF46YmnjWEvsKn40jmX0TtAxPEQ4NBw BYfnP2W2Jr0WD0DpMnZNmngn3riDeeNqbCFF60N+3yTJoDd5OQxbrZhk3XsOnT0Z Q/P6wh9MFFdCYt5Tp50UdwpIV+WGz2tGvhPg7Xd+Vqy/o6vTJHxIrV4YUJu6rsFo 7ZqzGik7wRB5fNKtTYCRJCzwqDkf9TpPkNf+7vZpPhYxpEu1ubSxipcYJZlj0ulM u4mFENUQwQM6C/eP1XeZMxOwEM5hrJo= -----END CERTIFICATE-----Generated at Thu May 8 18:56:16 2025 by rpki-client