$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa File: 121a4e34-1b32-3478-b85b-832ea45ef7f6.roa (raw, json) Hash identifier: gO5isUC4eu6mtVTacTxJqCPeSj8F6CmsGw7W2f5dX28= Subject key identifier: 7C:04:75:7C:AE:0A:94:79:D1:A5:31:60:62:6C:6D:28:D9:18:6D:46 Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F43285848E59BC2F00CA8650AFE6BB800 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 3356 IP address blocks: 139.60.152.0/22 maxlen: 24 162.247.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c2:f0:0c:a8:65:0a:fe:6b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=16a0bbf1-bfc9-4384-851d-0227225255ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:58:41:16:17:d1:0a:fd:9e:5d:ac:86:bc: 7e:1b:e7:86:61:44:e3:33:33:a7:aa:07:9d:66:14: b4:d8:a2:e2:f7:26:cf:e4:17:a4:70:9a:ef:d0:37: 8c:5e:3c:d0:d5:3f:82:51:b7:d8:c7:72:f1:69:39: f1:c9:79:25:7b:69:ee:39:28:e6:c0:88:e3:93:34: bb:d5:7b:15:3c:50:d4:84:66:6c:e7:44:c2:31:ab: 07:21:e0:c1:55:f0:94:70:27:fa:d5:67:da:9b:e9: 0f:36:52:94:31:3b:18:12:5e:fc:4d:30:4f:19:b2: 0f:15:85:6e:bf:d1:9c:85:15:48:38:c6:d9:ff:79: 99:da:f6:a3:8a:2b:31:5e:02:f0:4a:c2:5b:ea:f2: b4:7c:fc:4b:69:14:7b:78:82:06:fc:00:0b:6c:82: 5c:c1:41:57:e5:62:07:07:02:69:56:c4:e3:98:39: 5a:77:aa:f0:e5:59:bd:4c:ff:1d:04:ef:91:76:b1: 11:79:ad:63:16:30:a4:08:b2:44:65:a1:85:a8:63: 24:8f:dd:c3:07:d4:00:c1:bd:f5:98:f2:91:39:58: 6c:fd:39:9a:af:be:8b:36:a4:f2:a2:36:ec:9c:a3: 1c:dd:37:43:a3:6e:94:ce:76:43:65:82:24:9f:05: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:75:7C:AE:0A:94:79:D1:A5:31:60:62:6C:6D:28:D9:18:6D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv4: 139.60.152.0/22 162.247.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:7a:cb:24:49:68:91:07:5c:1f:3e:1f:d3:b6:11:79:f8:8e: 2a:31:87:4e:b7:f2:8b:62:09:7a:1d:9a:4e:4e:63:fe:cd:f3: 95:8f:59:35:b4:ee:4f:42:5a:ae:cb:13:8e:96:7a:32:43:d0: b6:d7:e0:a3:89:ae:17:c0:e9:34:b0:5b:fa:33:ec:4c:f5:9f: df:76:04:81:30:ff:98:44:3c:c7:e6:c7:10:ed:77:9e:f8:c5: 4a:65:3f:2a:66:44:cb:1e:6f:6c:8e:b2:6f:3c:c6:8a:87:5f: 84:5a:5f:dc:d4:c5:ca:8a:7b:35:7a:6b:56:b7:6d:b2:f9:7f: 1f:82:e2:a3:a4:fd:9d:0f:ff:5b:c8:51:c3:5e:aa:35:53:44: 92:d3:a8:13:04:9f:e1:a9:f8:ab:05:23:c4:90:4b:a7:83:75: 44:ef:29:63:1f:e5:f7:ee:7a:ee:37:9d:a6:2c:4c:2d:9d:46: 6d:58:48:0b:d8:79:8e:c2:be:45:57:2b:62:d8:37:43:3e:c9: cf:37:1d:c1:33:49:73:4c:ff:1c:dc:64:40:b7:17:6d:73:c9: 5b:e5:03:98:67:4e:83:3b:22:93:f6:12:cd:c0:4a:30:7d:bb: 3f:79:a8:b5:ed:1c:81:68:9c:7a:48:c4:27:49:17:ca:93:ac: 9a:99:36:b8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm8LwDKhlCv5ruAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTZhMGJiZjEtYmZjOS00Mzg0LTg1MWQtMDIyNzIyNTI1NWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UtYQRYX0Qr9nl2shrx+G+eGYUTjMzOnqged ZhS02KLi9ybP5BekcJrv0DeMXjzQ1T+CUbfYx3LxaTnxyXkle2nuOSjmwIjjkzS7 1XsVPFDUhGZs50TCMasHIeDBVfCUcCf61Wfam+kPNlKUMTsYEl78TTBPGbIPFYVu v9GchRVIOMbZ/3mZ2vajiisxXgLwSsJb6vK0fPxLaRR7eIIG/AALbIJcwUFX5WIH BwJpVsTjmDlad6rw5Vm9TP8dBO+RdrERea1jFjCkCLJEZaGFqGMkj93DB9QAwb31 mPKROVhs/Tmar76LNqTyojbsnKMc3TdDo26UznZDZYIknwVa8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHwEdXyuCpR50aUxYGJsbSjZGG1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvMTIxYTRlMzQtMWIzMi0z NDc4LWI4NWItODMyZWE0NWVmN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMF6yyRJaJEHXB8+H9O2EXn4jioxh0638otiCXodmk5OY/7N 85WPWTW07k9CWq7LE46WejJD0LbX4KOJrhfA6TSwW/oz7Ez1n992BIEw/5hEPMfm xxDtd574xUplPypmRMseb2yOsm88xoqHX4RaX9zUxcqKezV6a1a3bbL5fx+C4qOk /Z0P/1vIUcNeqjVTRJLTqBMEn+Gp+KsFI8SQS6eDdUTvKWMf5ffueu43naYsTC2d Rm1YSAvYeY7CvkVXK2LYN0M+yc83HcEzSXNM/xzcZEC3F21zyVvlA5hnToM7IpP2 Es3ASjB9uz95qLXtHIFonHpIxCdJF8qTrJqZNrg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:21 2025 by rpki-client