$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa File: 6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa (raw, json) Hash identifier: gfOvcqO/emKf/r6TlLlsQMCgc5PDaIA4lBuALgR/Mh4= Subject key identifier: EE:96:84:AD:4F:16:51:19:0C:57:96:43:78:4F:61:72:A0:90:95:BD Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F43285848E59BC29C02ED7FC8864BCB00 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 139.60.152.0/22 maxlen: 24 162.247.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c2:9c:02:ed:7f:c8:86:4b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=4ab7d25d-83ef-4af9-8d2e-b480c26b765f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:c3:f3:17:22:32:48:9e:ef:76:bf:28:30: ad:51:5f:e9:3f:ad:1b:7c:ec:aa:75:28:71:2e:f5: e2:ae:59:ed:64:74:df:0c:0b:ac:2d:03:1b:43:11: 3c:96:75:74:f1:44:67:07:d6:d9:dd:1e:31:88:3d: 61:df:de:98:94:8d:67:e0:d9:64:f8:6b:75:16:97: 86:68:8b:e7:e3:d4:84:6b:86:2f:0d:17:49:28:d1: d6:09:36:d9:e5:ee:6e:ba:65:db:ac:81:ba:0f:a9: 73:66:a6:5f:99:8c:a2:01:e7:e7:c5:ca:cb:a9:96: 14:a6:ec:0b:c7:99:b8:ee:06:25:64:90:58:45:4f: 8b:68:01:d5:0b:cc:88:b3:66:0f:c7:11:ad:ef:77: 59:83:0e:89:e4:35:f8:79:71:bd:e7:17:f9:de:ab: 49:d2:f4:ef:cb:9b:60:3b:a1:c0:0b:bb:d1:60:e5: 57:3b:eb:d5:f7:36:91:78:f9:7c:fb:3c:f4:eb:34: 91:d0:ae:1b:a8:e6:33:f3:71:74:06:9c:e7:4f:d0: cc:e1:aa:91:1a:61:7e:12:3e:61:b0:a1:be:c7:3b: ad:de:90:3a:6a:6d:9d:4e:3e:bb:27:65:f9:05:b7: c5:73:4e:de:d6:4a:49:aa:f7:30:cf:bb:3c:ba:9f: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:96:84:AD:4F:16:51:19:0C:57:96:43:78:4F:61:72:A0:90:95:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6f7ea8c0-80df-3eab-9517-0c3e882434a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv4: 139.60.152.0/22 162.247.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b4:d0:70:0d:6a:9d:b6:e1:44:b5:5d:84:cd:f2:61:28:02: 2b:a9:8c:b8:47:18:e3:5f:73:95:67:33:5d:55:ad:35:3f:6e: c5:4f:91:c9:e9:72:42:a1:aa:e3:71:63:b8:44:ce:bd:a6:b3: 52:7b:a3:cd:a5:14:21:bf:58:5a:ef:d3:cd:d9:c9:42:00:04: 0a:b0:33:9a:a2:2d:11:72:00:85:e3:94:a9:2c:28:37:9c:84: a3:56:a2:a4:48:0a:93:3e:76:bb:5b:76:22:37:2f:2d:75:36: 3c:db:a5:8f:69:30:56:40:da:1b:0c:8a:d3:de:ca:07:08:4b: a9:47:8e:d0:b7:a9:07:2e:9e:52:19:0f:a9:70:ce:eb:9c:2c: 9a:27:51:50:e6:e7:35:ab:f0:ac:d5:13:1a:a6:aa:b7:c9:ea: f4:45:2c:ce:57:e3:a1:6e:2c:9f:ef:97:76:5b:ca:51:dd:cc: b2:a0:97:52:9a:ae:af:fa:70:e8:c5:16:80:70:0f:fb:4b:1f: cf:68:04:7f:84:d7:f9:dd:07:4f:bb:c9:35:2c:26:6e:62:57: 92:8c:80:30:ae:3b:67:30:99:84:64:42:c2:64:6e:2d:28:85: 06:ab:2e:a9:80:2b:9a:b6:94:6f:ea:85:d8:d1:1c:fe:7f:f1: c0:b4:6e:ad -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm8KcAu1/yIZLywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NGFiN2QyNWQtODNlZi00YWY5LThkMmUtYjQ4MGMyNmI3NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMLD8xciMkie73a/KDCtUV/pP60bfOyqdShx LvXirlntZHTfDAusLQMbQxE8lnV08URnB9bZ3R4xiD1h396YlI1n4Nlk+Gt1FpeG aIvn49SEa4YvDRdJKNHWCTbZ5e5uumXbrIG6D6lzZqZfmYyiAefnxcrLqZYUpuwL x5m47gYlZJBYRU+LaAHVC8yIs2YPxxGt73dZgw6J5DX4eXG95xf53qtJ0vTvy5tg O6HAC7vRYOVXO+vV9zaRePl8+zz06zSR0K4bqOYz83F0BpznT9DM4aqRGmF+Ej5h sKG+xzut3pA6am2dTj67J2X5BbfFc07e1kpJqvcwz7s8up+ThwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO6WhK1PFlEZDFeWQ3hPYXKgkJW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvNmY3ZWE4YzAtODBkZi0z ZWFiLTk1MTctMGMzZTg4MjQzNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADm00HANap224US1XYTN8mEoAiupjLhHGONfc5VnM11VrTU/ bsVPkcnpckKhquNxY7hEzr2ms1J7o82lFCG/WFrv083ZyUIABAqwM5qiLRFyAIXj lKksKDechKNWoqRICpM+drtbdiI3Ly11NjzbpY9pMFZA2hsMitPeygcIS6lHjtC3 qQcunlIZD6lwzuucLJonUVDm5zWr8KzVExqmqrfJ6vRFLM5X46FuLJ/vl3ZbylHd zLKgl1Karq/6cOjFFoBwD/tLH89oBH+E1/ndB0+7yTUsJm5iV5KMgDCuO2cwmYRk QsJkbi0ohQarLqmAK5q2lG/qhdjRHP5/8cC0bq0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:36 2025 by rpki-client