$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa File: 2a6bf328-cf96-3ace-bda5-7008e51790d7.roa (raw, json) Hash identifier: yPaJqs0S1EDis+6/2vJQuCNnT8N4ShlOpLqCjvLNB7A= Subject key identifier: 0A:B9:9C:21:F3:AF:A5:93:33:34:75:91:F4:F6:C5:0C:54:48:00:DB Certificate issuer: /CN=fd41a5ea-0768-429c-8541-83d829a5518c Certificate serial: 010D0C9F43285849194190B8CEF47D19DC388580 Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 139.64.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:90:b8:ce:f4:7d:19:dc:38:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=974fc21c-5322-4c01-b2aa-4ab5abb996c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:ac:8f:96:b1:ee:90:6e:3a:c9:c5:72:24: 96:99:28:c2:aa:c0:dc:5e:20:b0:a8:a3:88:c4:14: 00:4f:fb:08:7b:ce:89:ad:45:a9:7e:7c:e1:dc:a7: 09:97:fd:6f:e2:d1:8f:de:f6:c0:9d:40:41:ed:4c: 74:80:ce:d2:1b:be:bc:fa:2d:9d:e5:31:95:a2:6c: ce:89:c5:45:1e:b5:5b:5b:09:ac:29:3f:db:f3:07: 78:dd:5e:9c:43:70:4b:92:5e:0b:46:48:ee:8b:7b: 13:d0:82:d7:7b:72:57:32:69:dc:0c:ed:3a:ba:3d: c2:2d:99:e6:6c:5f:2d:5e:6b:92:df:40:c4:39:4d: b4:e8:64:d2:e8:83:68:a1:26:7b:e3:1e:6a:f8:f9: e4:f1:b3:76:db:6e:cc:ea:e8:ad:f0:bd:89:d1:19: 3f:53:9f:d2:ec:1d:30:e5:11:b4:d6:b6:84:ac:70: 9b:07:23:99:31:e9:36:70:a6:94:7c:82:6a:de:c4: 9c:d5:e0:f0:44:05:b9:6e:9b:eb:65:29:39:40:3e: 6f:27:70:3d:87:58:48:4a:99:52:5d:8a:30:9c:68: 40:6a:a6:56:c5:7e:e5:40:3c:c7:e0:3f:65:f1:e9: b8:2c:f4:00:71:60:4f:30:e2:80:0f:dd:6b:f6:38: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:9C:21:F3:AF:A5:93:33:34:75:91:F4:F6:C5:0C:54:48:00:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl X509v3 Authority Key Identifier: keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer sbgp-ipAddrBlock: critical IPv4: 139.64.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ad:06:c6:e1:a2:c2:cf:98:84:1b:52:d5:ce:f6:90:2f:f9: b5:13:20:b7:6f:f5:aa:c6:f9:7c:88:6c:db:22:c3:9d:f0:47: a4:39:3d:58:3f:f2:cc:a8:04:84:81:c1:7b:e1:73:77:1a:d8: 7a:71:8b:8f:fe:60:cd:73:b9:95:45:6c:56:7e:fd:ed:ab:1e: 7e:24:09:0e:8a:7c:f9:d0:05:7e:0d:3d:23:ba:05:07:21:18: 47:b9:4c:a6:e5:04:4c:45:e7:45:f1:13:81:79:2c:80:67:8d: 1e:aa:ef:90:64:bb:77:9d:69:b2:2f:ef:92:67:0c:22:63:2b: 38:da:2c:62:c3:3a:9a:59:4a:99:c7:80:22:da:02:be:eb:c9: 6e:1f:98:07:90:25:92:36:43:c2:d7:d3:07:7b:d8:a2:fa:6c: e5:91:80:c7:e0:32:51:8c:de:4e:f2:ab:f1:c0:27:08:73:32: 3b:ca:e2:27:27:a1:e0:d6:93:92:80:c1:bb:8f:d9:72:01:e9: 7c:18:07:79:2f:fc:18:df:89:46:f2:72:9a:58:0e:3d:94:25: ff:46:16:b7:39:77:61:64:a0:16:1b:ae:0f:9a:2f:4a:43:39: 53:75:80:01:42:39:c4:fa:f6:54:1d:c6:ca:d7:27:46:1b:83: 3b:69:83:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQZC4zvR9Gdw4hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ0MWE1ZWEtMDc2OC00MjljLTg1NDEtODNkODI5YTU1 MThjMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OTc0ZmMyMWMtNTMyMi00YzAxLWIyYWEtNGFiNWFiYjk5NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicmsj5ax7pBuOsnFciSWmSjCqsDcXiCwqKOI xBQAT/sIe86JrUWpfnzh3KcJl/1v4tGP3vbAnUBB7Ux0gM7SG768+i2d5TGVomzO icVFHrVbWwmsKT/b8wd43V6cQ3BLkl4LRkjui3sT0ILXe3JXMmncDO06uj3CLZnm bF8tXmuS30DEOU206GTS6INooSZ74x5q+Pnk8bN2227M6uit8L2J0Rk/U5/S7B0w 5RG01raErHCbByOZMek2cKaUfIJq3sSc1eDwRAW5bpvrZSk5QD5vJ3A9h1hISplS XYownGhAaqZWxX7lQDzH4D9l8em4LPQAcWBPMOKAD91r9jgFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq5nCHzr6WTMzR1kfT2xQxUSADbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQx YTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4MjlhNTUxOGMvMmE2YmYzMjgtY2Y5Ni0z YWNlLWJkYTUtNzAwOGU1MTc5MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQ0MWE1ZWEtMDc2OC00MjljLTg1 NDEtODNkODI5YTU1MThjL2ZkNDFhNWVhLTA3NjgtNDI5Yy04NTQxLTgzZDgyOWE1 NTE4Yy5jcmwwHwYDVR0jBBgwFoAU820DKve7/3fBl4oa0MkJUZI8pyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQxYTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4 MjlhNTUxOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqtBsbhosLPmIQbUtXO9pAv+bUTILdv9arG+XyIbNsiw53wR6Q5PVg/ 8syoBISBwXvhc3ca2Hpxi4/+YM1zuZVFbFZ+/e2rHn4kCQ6KfPnQBX4NPSO6BQch GEe5TKblBExF50XxE4F5LIBnjR6q75Bku3edabIv75JnDCJjKzjaLGLDOppZSpnH gCLaAr7ryW4fmAeQJZI2Q8LX0wd72KL6bOWRgMfgMlGM3k7yq/HAJwhzMjvK4icn oeDWk5KAwbuP2XIB6XwYB3kv/BjfiUbycppYDj2UJf9GFrc5d2FkoBYbrg+aL0pD OVN1gAFCOcT69lQdxsrXJ0Ybgztpgys= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:46 2025 by rpki-client