$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa File: 175419ee-8205-3ea6-95fa-eba20907ad30.roa (raw, json) Hash identifier: w9PbezNawfrq6p7vQ261H9Et/A71HVkB4/KmkvpC2LY= Subject key identifier: 43:97:4D:BE:48:53:56:18:C9:4A:6A:92:56:48:B2:95:E0:9F:0A:60 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584897708747C291866D2B5F3100 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:87:47:c2:91:86:6d:2b:5f:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=a8eff34a-26dc-4f32-b745-3902152364d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:44:d5:c0:51:1c:ab:03:73:fa:a3:29:23: 6e:0b:4c:96:85:ae:00:e5:92:e6:51:41:69:27:1a: 1d:2c:66:af:40:5e:86:e7:b0:ef:0f:59:5b:c1:7e: d3:e2:c2:c6:02:ad:71:6d:32:c5:2e:f0:cc:2e:35: b0:30:f5:ef:c9:3f:f6:80:97:dd:7e:77:83:ea:81: 7e:d5:d2:7c:20:9a:0e:66:28:04:a1:de:79:5c:26: 3e:3f:a7:60:9e:45:e1:a7:c4:1f:94:db:d0:2b:73: 7f:b1:46:58:9d:7e:62:52:1b:1c:46:3c:ad:0e:08: 62:f6:0f:7a:bd:84:95:6b:bf:5d:e4:93:51:ad:d8: 52:52:58:56:35:d9:be:6f:f5:46:c3:0b:d1:f9:a1: 3a:ae:9b:f7:a0:a4:e9:b9:d8:af:ea:db:ca:b0:e7: 86:ec:07:50:de:cb:3c:90:c2:74:fc:90:99:51:1f: 36:bf:f8:96:cb:ac:28:73:d5:f5:bd:14:b8:4a:cc: c8:f1:ef:fc:fc:39:d7:f6:0e:ea:8a:ca:eb:ad:47: c8:2f:41:fd:f5:ce:3f:0a:00:76:aa:16:67:44:3d: 31:a4:76:b8:9f:ea:4b:26:f2:cc:ac:aa:01:64:b7: 85:7b:e3:09:f3:0a:77:6b:83:5e:79:71:1c:34:07: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:97:4D:BE:48:53:56:18:C9:4A:6A:92:56:48:B2:95:E0:9F:0A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d6:c9:0a:20:ac:62:38:90:62:54:3a:db:12:2c:f8:74:de: ab:f2:3e:9e:16:84:99:42:9d:3e:57:5c:40:58:df:fd:1f:17: 62:55:af:6b:2a:11:6d:69:f5:d0:3c:65:39:35:32:a1:bd:7b: 07:c5:20:84:28:d7:35:b9:d9:14:5f:5d:79:6b:2d:ac:b0:a7: b4:7a:67:68:56:ac:8a:ff:a7:84:f4:6b:ec:eb:f3:97:3e:43: 15:de:50:ae:52:71:b7:4f:dd:19:b6:3e:8d:f1:2e:72:fb:6e: 71:16:44:e2:96:82:85:8b:07:87:e7:7e:88:6d:26:29:29:7b: f1:f3:2b:ed:b6:ab:c9:6e:c7:ca:56:ba:80:ef:45:a5:dc:81: b8:03:11:cb:8b:ee:9a:6f:4d:6d:d0:83:1d:16:16:f9:d9:11: 61:72:ca:22:a1:c7:95:7d:7a:e9:07:95:fc:12:7b:eb:11:1b: 04:b0:dc:ec:57:f0:b2:cc:1d:f3:30:d8:47:30:85:b0:de:f0: 53:fb:e8:b8:99:6c:6f:c9:52:13:35:a1:8c:a2:17:06:bc:a5: e4:ed:c0:ed:05:dd:81:9c:21:ae:72:e3:0e:a9:d6:52:23:66: d5:8f:18:19:78:99:36:23:e5:ae:e5:d1:23:d1:d7:2e:9a:1e: cf:56:0b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcIdHwpGGbStfMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk YThlZmYzNGEtMjZkYy00ZjMyLWI3NDUtMzkwMjE1MjM2NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd1E1cBRHKsDc/qjKSNuC0yWha4A5ZLmUUFp JxodLGavQF6G57DvD1lbwX7T4sLGAq1xbTLFLvDMLjWwMPXvyT/2gJfdfneD6oF+ 1dJ8IJoOZigEod55XCY+P6dgnkXhp8QflNvQK3N/sUZYnX5iUhscRjytDghi9g96 vYSVa79d5JNRrdhSUlhWNdm+b/VGwwvR+aE6rpv3oKTpudiv6tvKsOeG7AdQ3ss8 kMJ0/JCZUR82v/iWy6woc9X1vRS4SszI8e/8/DnX9g7qisrrrUfIL0H99c4/CgB2 qhZnRD0xpHa4n+pLJvLMrKoBZLeFe+MJ8wp3a4NeeXEcNAfTFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOXTb5IU1YYyUpqklZIspXgnwpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMTc1NDE5ZWUtODIwNS0z ZWE2LTk1ZmEtZWJhMjA5MDdhZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLWyQogrGI4kGJUOtsSLPh03qvyPp4WhJlCnT5XXEBY3/0fF2JVr2sq EW1p9dA8ZTk1MqG9ewfFIIQo1zW52RRfXXlrLaywp7R6Z2hWrIr/p4T0a+zr85c+ QxXeUK5ScbdP3Rm2Po3xLnL7bnEWROKWgoWLB4fnfohtJikpe/HzK+22q8lux8pW uoDvRaXcgbgDEcuL7ppvTW3Qgx0WFvnZEWFyyiKhx5V9eukHlfwSe+sRGwSw3OxX 8LLMHfMw2EcwhbDe8FP76LiZbG/JUhM1oYyiFwa8peTtwO0F3YGcIa5y4w6p1lIj ZtWPGBl4mTYj5a7l0SPR1y6aHs9WCxs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:41 2025 by rpki-client