$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa File: 1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa (raw, json) Hash identifier: p94EYvK4Mmdhgp3hSWx8Xy7bdjVkRHgDmf1k2H1Yt9s= Subject key identifier: 4C:D0:72:B6:9C:61:D1:3C:6F:88:B1:F6:92:05:17:91:3D:AB:40:BD Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Certificate serial: 010D0C9F4328584913AC1EE61CDA5B9587801580 Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 139.64.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1e:e6:1c:da:5b:95:87:80:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=a6f3ff09-b1fc-4e8e-8e0c-6948d7c988b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:c9:a9:71:19:26:60:4e:0e:0f:ee:15:5c: c6:fe:97:8d:32:3f:56:40:dd:76:45:f1:44:a4:20: 4b:2a:fd:9d:86:fa:12:1a:80:29:aa:95:bf:e4:fc: 81:1c:75:10:41:5d:a8:ce:48:f3:e0:1e:34:24:53: 52:41:e0:95:06:d1:03:39:97:46:c7:42:3a:c9:3a: cd:f4:92:72:84:56:a3:fd:3e:8b:54:8e:89:fd:ca: 44:54:c6:18:66:3c:f0:32:f3:e2:a8:cd:6a:8f:81: 81:17:e8:7c:b0:c3:b9:f4:15:50:b3:52:5e:b1:e8: 61:96:51:68:db:54:88:b8:a9:71:a3:ba:7f:4f:db: e1:70:6c:b4:61:49:ed:40:eb:05:d2:3b:31:3c:62: d6:4a:de:84:28:e5:e4:a1:45:bb:a9:48:23:46:b3: 16:81:8c:83:1d:fc:67:57:a2:13:df:d7:60:c6:03: 79:b9:bd:05:cb:be:4e:20:f6:5a:08:3f:b1:44:0d: 8d:7b:36:a8:61:3c:47:6b:f9:d0:5b:1b:c8:3b:76: 94:2a:6f:f7:17:f3:73:44:a2:c6:50:20:98:4c:81: 33:cf:bb:c2:74:4f:ae:04:ac:31:1c:85:76:b2:00: 23:28:a5:ca:a0:93:c6:ea:0e:7d:6a:63:72:4e:08: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D0:72:B6:9C:61:D1:3C:6F:88:B1:F6:92:05:17:91:3D:AB:40:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl X509v3 Authority Key Identifier: keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer sbgp-ipAddrBlock: critical IPv4: 139.64.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cd:32:f7:0c:85:b6:52:5e:22:c7:8a:e7:87:bf:b1:4f:31: 80:40:2d:3c:2b:5a:b1:07:25:98:66:9a:a8:18:f3:45:c0:73: 8b:73:d6:f4:65:e5:b9:28:0c:72:ea:85:3a:2f:35:b8:af:b8: 07:dc:bc:f2:9c:eb:bb:5a:45:5c:10:d6:d8:4b:bb:70:60:ed: b1:a2:c1:02:63:70:a2:4a:40:b9:ef:d3:6a:32:c0:47:64:01: d7:3f:1d:93:f4:1f:ab:04:29:5b:2a:57:49:9f:b9:02:0b:ee: 6e:2e:21:ff:8b:82:22:26:10:e0:99:06:73:59:5f:8e:b0:14: ca:d8:f5:5d:fc:0b:8d:23:84:28:38:9c:a9:fe:91:9d:73:f4: f0:71:fb:00:6e:2c:52:56:ca:5e:94:f0:0b:8f:bc:c4:ab:e0: 76:a9:e2:e9:9d:22:1d:59:6b:d6:f8:ff:39:ad:f2:ec:b1:80: f4:6e:57:cd:3a:a5:06:fc:44:d8:70:ce:39:6e:81:f4:8a:3d: ef:49:f8:16:46:0a:39:bc:68:3b:e7:82:6d:99:33:06:6b:bc: 14:3d:c9:93:04:c8:ce:f6:62:ec:78:b2:39:84:07:08:08:6f: 3b:53:02:ef:c0:39:32:03:07:ca:7a:9a:5d:52:1f:cf:9d:9b: d1:89:5c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB7mHNpblYeAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5 YjJiMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTZmM2ZmMDktYjFmYy00ZThlLThlMGMtNjk0OGQ3Yzk4OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkbJqXEZJmBODg/uFVzG/peNMj9WQN12RfFE pCBLKv2dhvoSGoApqpW/5PyBHHUQQV2ozkjz4B40JFNSQeCVBtEDOZdGx0I6yTrN 9JJyhFaj/T6LVI6J/cpEVMYYZjzwMvPiqM1qj4GBF+h8sMO59BVQs1JesehhllFo 21SIuKlxo7p/T9vhcGy0YUntQOsF0jsxPGLWSt6EKOXkoUW7qUgjRrMWgYyDHfxn V6IT39dgxgN5ub0Fy75OIPZaCD+xRA2NezaoYTxHa/nQWxvIO3aUKm/3F/NzRKLG UCCYTIEzz7vCdE+uBKwxHIV2sgAjKKXKoJPG6g59amNyTgjJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzQcracYdE8b4ix9pIFF5E9q0C9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3 NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvMWJiYzdlMjUtZTcyYi0z ZWZjLTkzMzItY2IyY2UxZDUwMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy ODM2YTliMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXNMvcMhbZSXiLHiueHv7FPMYBALTwrWrEHJZhmmqgY80XAc4tz1vRl 5bkoDHLqhTovNbivuAfcvPKc67taRVwQ1thLu3Bg7bGiwQJjcKJKQLnv02oywEdk Adc/HZP0H6sEKVsqV0mfuQIL7m4uIf+LgiImEOCZBnNZX46wFMrY9V38C40jhCg4 nKn+kZ1z9PBx+wBuLFJWyl6U8AuPvMSr4Hap4umdIh1Za9b4/zmt8uyxgPRuV806 pQb8RNhwzjlugfSKPe9J+BZGCjm8aDvngm2ZMwZrvBQ9yZMEyM72Yux4sjmEBwgI bztTAu/AOTIDB8p6ml1SH8+dm9GJXAs= -----END CERTIFICATE-----Generated at Fri Apr 11 21:29:49 2025 by rpki-client