$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa File: 5bee3bdf-2522-3fcc-851d-13be40a578cf.roa (raw, json) Hash identifier: RPBS12O3eKrMEQhDVpaoLfD1xogQrlbfv8fzdR4gDJY= Subject key identifier: F4:BD:16:C2:B3:F7:AA:9F:D3:1E:8E:4B:C8:F4:96:38:2B:1C:A5:7E Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285849ABB49E48C73AC7B804EB03A0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 143.244.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9e:48:c7:3a:c7:b8:04:eb:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=7c155799-54ef-4eb9-b598-3f05171d2229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:e5:3a:8f:87:ca:f9:75:b4:9c:ff:ee:b6: 13:a8:46:77:54:81:e5:64:5c:10:7c:04:a3:06:9f: 64:f4:0d:6e:f3:15:00:21:dd:75:0e:e0:6f:84:98: 75:86:b8:82:76:08:3c:dc:11:26:68:43:25:53:cc: f5:ac:5d:94:89:4c:f4:c8:9e:c7:5d:da:53:52:16: 88:b2:4b:cc:78:44:bc:09:c3:80:f4:5f:71:46:1e: c3:bc:44:72:1c:e1:1d:a0:18:c0:26:60:2a:ee:cb: d3:1a:5a:15:be:67:f2:37:30:fe:39:eb:ae:c9:e0: 0b:a8:e2:8b:d1:b2:bf:f4:71:d9:ab:30:0d:6c:9d: a4:68:9b:f6:e0:f1:1d:c4:3a:78:aa:87:6e:50:19: 86:8b:97:04:19:a4:e6:40:f5:a4:b8:68:3b:10:60: e2:3a:50:03:66:39:32:f2:8a:ee:e7:86:a8:a9:be: 2e:b0:a2:b4:08:46:d0:c8:96:23:69:6a:f3:d1:43: 3f:48:6b:e6:e8:ec:e9:bd:8d:94:89:db:12:a9:e0: 6c:dd:e1:9a:6a:9c:c5:20:5f:72:73:be:b3:e6:a5: ef:34:41:b6:97:50:04:bd:2f:1d:32:35:c7:49:69: 5d:d8:b3:58:82:e3:8a:ac:61:78:36:5d:d4:c5:bd: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:16:C2:B3:F7:AA:9F:D3:1E:8E:4B:C8:F4:96:38:2B:1C:A5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/5bee3bdf-2522-3fcc-851d-13be40a578cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b0:a7:a7:09:58:3d:e7:a5:74:99:05:62:56:71:1d:4e:d5: 71:f2:ce:55:5b:cd:a0:81:ec:cb:7d:ca:b6:f9:1a:ec:4a:b8: 19:08:d9:9d:2b:37:66:43:27:44:a4:ce:79:c4:61:04:13:63: 0d:0c:13:ac:7e:ce:2d:23:98:4d:72:b5:90:54:1f:71:4d:0a: 69:dd:cb:4f:61:55:6c:d5:d5:55:28:22:5e:26:b4:66:8e:d1: a7:4e:27:89:cc:db:cd:54:66:78:97:0b:2d:c7:84:7b:e1:57: 17:9e:67:c6:ee:78:0f:62:f2:75:e8:b1:ab:68:a0:55:0f:a0: 29:53:44:c1:74:e8:25:dd:a2:b6:9b:ae:cf:aa:09:d0:61:c9: 3e:47:95:bc:33:96:11:a1:b1:c0:b3:34:16:90:51:9e:ef:49: 0a:81:a6:3f:04:7c:36:1c:a5:11:e4:3e:92:db:93:cb:02:39: e3:2d:13:72:07:f6:b0:86:e7:85:ed:4e:79:9a:04:6f:5c:a9: 2e:39:77:8b:88:37:2e:00:ee:b0:bf:f2:67:d1:05:e9:76:14: 4b:7b:34:f1:ad:c3:07:fa:ca:47:e9:ca:c7:fc:82:10:56:e4: 47:8b:a8:9b:d4:e1:76:ad:ca:b5:7c:ca:b7:d2:1f:31:9d:cf: 26:ce:94:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ5IxzrHuATrA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2MxNTU3OTktNTRlZi00ZWI5LWI1OTgtM2YwNTE3MWQyMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLlOo+Hyvl1tJz/7rYTqEZ3VIHlZFwQfASj Bp9k9A1u8xUAId11DuBvhJh1hriCdgg83BEmaEMlU8z1rF2UiUz0yJ7HXdpTUhaI skvMeES8CcOA9F9xRh7DvERyHOEdoBjAJmAq7svTGloVvmfyNzD+OeuuyeALqOKL 0bK/9HHZqzANbJ2kaJv24PEdxDp4qoduUBmGi5cEGaTmQPWkuGg7EGDiOlADZjky 8oru54aoqb4usKK0CEbQyJYjaWrz0UM/SGvm6OzpvY2UidsSqeBs3eGaapzFIF9y c76z5qXvNEG2l1AEvS8dMjXHSWld2LNYguOKrGF4Nl3Uxb2WjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS9FsKz96qf0x6OS8j0ljgrHKV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNWJlZTNiZGYtMjUyMi0z ZmNjLTg1MWQtMTNiZTQwYTU3OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSwp6cJWD3npXSZBWJWcR1O1XHyzlVbzaCB7Mt9yrb5GuxKuBkI2Z0r N2ZDJ0SkznnEYQQTYw0ME6x+zi0jmE1ytZBUH3FNCmndy09hVWzV1VUoIl4mtGaO 0adOJ4nM281UZniXCy3HhHvhVxeeZ8bueA9i8nXosatooFUPoClTRMF06CXdorab rs+qCdBhyT5HlbwzlhGhscCzNBaQUZ7vSQqBpj8EfDYcpRHkPpLbk8sCOeMtE3IH 9rCG54XtTnmaBG9cqS45d4uINy4A7rC/8mfRBel2FEt7NPGtwwf6ykfpysf8ghBW 5EeLqJvU4XatyrV8yrfSHzGdzybOlMw= -----END CERTIFICATE-----Generated at Sun May 11 15:14:05 2025 by rpki-client