$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: KqHVAz6DyLcFzu4sG1raI2krKtpETat+fhNnPeJUBJw= Subject key identifier: E9:04:E2:54:0F:75:EF:43:71:6C:68:E9:21:DA:51:21:F0:17:A1:FD Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F432858493243DBACA5D689F541685500 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:db:ac:a5:d6:89:f5:41:68:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=451a9889-b12b-4e8e-aa1d-6f830401d894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:39:5c:06:75:61:ec:f6:60:db:8a:b5:95: 78:ba:be:3f:ed:e7:03:63:7d:3a:c5:e4:71:81:1e: ca:a2:c1:44:77:01:ea:ec:25:18:81:65:e7:4d:1f: a1:1e:b4:87:ab:3a:57:90:ec:52:b6:d4:7d:8c:3c: 0d:c1:6f:65:95:ca:01:2c:a2:76:98:c1:68:0f:9d: 3b:38:35:d1:da:f7:50:b0:e1:63:33:35:1f:62:b4: f5:11:40:ae:35:c5:15:bb:7d:82:00:10:92:fd:b1: b3:74:54:fe:fb:88:fa:de:b4:93:be:3a:95:5d:ca: ed:a6:13:33:7f:e8:e8:a2:af:d4:5b:0a:94:d4:ea: d8:09:60:93:89:d6:84:a3:0e:0c:33:91:8a:fb:e9: d5:1d:8b:de:7e:1b:8a:74:4e:74:f2:25:d0:f0:d7: eb:e9:b5:ae:66:b0:ff:b2:1f:d6:90:49:6a:5d:7e: 54:bb:d0:2b:89:c5:63:9f:7a:82:10:8d:30:6f:37: 90:74:be:84:dc:5d:34:15:25:fe:33:9f:2b:ab:50: 4e:7b:49:e8:b0:c4:b8:cf:23:75:02:c7:c1:75:d1: 23:f8:6e:5b:90:92:33:d4:28:aa:10:54:35:44:d8: 69:2e:f4:3b:f4:a1:d1:a2:b0:54:f4:10:0d:ac:66: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:E2:54:0F:75:EF:43:71:6C:68:E9:21:DA:51:21:F0:17:A1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8f:54:3f:68:49:35:fe:20:65:dc:82:fa:70:9d:07:12:98: c7:25:88:5e:7d:c7:bd:2b:dc:d7:93:56:4b:cb:c8:8d:e7:87: 27:93:9e:fb:eb:4c:54:bb:d0:5c:55:27:77:5b:e2:25:23:c5: f2:fa:41:b5:31:8d:51:92:1a:a3:7e:70:94:3e:4e:74:2a:7d: 91:f9:0f:9f:3d:15:2f:08:60:1f:67:09:6e:76:9e:14:b5:4b: 34:07:ca:5e:59:90:32:82:be:65:e2:9c:c1:bc:f2:02:bc:5a: 35:63:b9:64:f0:f6:0b:95:90:57:e1:ab:f1:82:c7:74:bf:3b: 95:28:2f:2a:59:3c:4a:5b:68:67:96:50:2e:30:4c:35:96:bd: 5d:63:de:a9:d3:0d:cf:82:9f:37:a8:8a:7f:9b:f1:79:66:2e: e3:2a:3b:58:90:33:73:68:22:1e:8b:b7:fe:30:41:13:e0:92: cf:81:54:d3:77:e6:fa:be:c4:d2:37:cb:9f:f8:2d:d7:da:81: 68:93:fe:64:1b:94:24:61:4a:b4:db:f3:11:e5:3c:41:7e:37: 3e:9a:2e:30:49:ae:d1:9d:ab:3c:33:a8:48:4c:4c:95:73:bf: 3a:b4:89:45:f2:02:95:68:13:06:19:c3:89:c1:7b:4d:37:45: 74:d9:05:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9uspdaJ9UFoVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NDUxYTk4ODktYjEyYi00ZThlLWFhMWQtNmY4MzA0MDFkODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7g5XAZ1Yez2YNuKtZV4ur4/7ecDY306xeRx gR7KosFEdwHq7CUYgWXnTR+hHrSHqzpXkOxSttR9jDwNwW9llcoBLKJ2mMFoD507 ODXR2vdQsOFjMzUfYrT1EUCuNcUVu32CABCS/bGzdFT++4j63rSTvjqVXcrtphMz f+jooq/UWwqU1OrYCWCTidaEow4MM5GK++nVHYvefhuKdE508iXQ8Nfr6bWuZrD/ sh/WkElqXX5Uu9AricVjn3qCEI0wbzeQdL6E3F00FSX+M58rq1BOe0nosMS4zyN1 AsfBddEj+G5bkJIz1CiqEFQ1RNhpLvQ79KHRorBU9BANrGYlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkE4lQPde9DcWxo6SHaUSHwF6H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADePVD9oSTX+IGXcgvpwnQcSmMcliF59x70r3NeTVkvLyI3nhyeTnvvr TFS70FxVJ3db4iUjxfL6QbUxjVGSGqN+cJQ+TnQqfZH5D589FS8IYB9nCW52nhS1 SzQHyl5ZkDKCvmXinMG88gK8WjVjuWTw9guVkFfhq/GCx3S/O5UoLypZPEpbaGeW UC4wTDWWvV1j3qnTDc+Cnzeoin+b8XlmLuMqO1iQM3NoIh6Lt/4wQRPgks+BVNN3 5vq+xNI3y5/4LdfagWiT/mQblCRhSrTb8xHlPEF+Nz6aLjBJrtGdqzwzqEhMTJVz vzq0iUXyApVoEwYZw4nBe003RXTZBVg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:05 2025 by rpki-client