$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa File: 0a788a24-b681-3c92-b517-2e067d686116.roa (raw, json) Hash identifier: TxUk+nA9TRzK2egSNKij+SUrEbhtSsPwzyylHKTpucQ= Subject key identifier: A7:7B:16:85:3B:02:1E:E4:8F:4E:22:5D:F0:39:DB:3E:90:01:3C:E6 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858486D904F058B9567B862B2B840 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 53927 IP address blocks: 139.131.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4f:05:8b:95:67:b8:62:b2:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=d0a98cb9-94fe-403c-b285-ce5cfcd5c181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:c8:94:ec:aa:c8:3d:d7:99:8b:dd:5f:06: 0b:9a:dd:17:cd:d6:fe:30:ca:4c:70:38:d1:1f:47: 37:98:b2:b9:5e:4d:ca:5e:0a:ee:c9:53:2d:11:18: 26:44:d5:89:b6:55:b6:75:9a:53:21:86:77:0c:b4: 62:8f:45:86:2a:f4:3b:1e:46:d7:91:72:cf:8a:7f: 74:07:ee:e2:98:f3:44:1c:d0:fc:e0:8e:ea:a4:db: bd:fa:fc:91:15:30:57:50:53:67:83:bb:a2:ad:49: 4b:c2:aa:78:64:e8:6c:d6:02:48:5f:1b:50:83:5c: ab:e8:7c:13:28:27:f6:1a:89:f0:32:9f:b2:ac:95: a6:58:f5:48:f0:d3:f9:0d:6a:a8:25:80:10:94:57: 7c:fc:ee:48:24:bd:c3:05:17:28:4c:ba:39:d2:82: 11:f9:32:ce:3c:13:89:91:6d:bb:9e:f3:09:9f:8f: 9e:52:ac:a0:cb:7e:f1:49:93:db:00:8e:94:01:20: fe:c5:f8:78:e2:36:f3:d4:fb:45:6d:1f:be:06:0b: 9d:25:a3:da:a0:c9:83:44:00:69:84:49:f7:51:dc: 89:0b:9d:3d:ba:b9:79:9b:9e:4f:ed:ab:70:2e:69: cc:dd:3e:b1:20:8b:97:59:12:4f:fa:fc:a6:6c:e9: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:16:85:3B:02:1E:E4:8F:4E:22:5D:F0:39:DB:3E:90:01:3C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:22:d0:9a:a1:ec:65:4e:15:6a:53:c3:05:0e:a7:32:69:89: a4:25:c4:28:c4:a0:9c:95:18:44:c1:26:d4:d4:3f:0a:cf:e0: fd:25:3e:3b:b9:e8:59:c6:df:c7:7a:42:61:b0:ea:c4:2b:b8: 71:ec:62:30:4d:59:40:4d:e0:a8:c4:19:08:fa:0f:37:08:67: cb:d8:b1:41:ce:20:c6:cb:c3:56:fc:58:fe:3c:43:cf:57:3c: 7d:cc:51:c6:12:3d:a7:ff:d7:c8:ef:1e:ec:60:19:e5:64:72: 16:4c:bf:4e:c1:77:aa:53:f2:40:0f:85:5a:50:c8:ff:21:7c: dc:f5:4a:3a:c3:ee:78:e0:26:c9:b4:db:2e:eb:2b:e4:4c:f9: 1a:16:c7:68:b9:19:d8:7e:c1:bd:21:2f:48:05:64:43:0b:1d: 2b:d0:35:af:51:af:d2:16:11:5d:25:ff:1c:b7:eb:c9:22:66: 7c:17:38:dc:b0:d6:91:5c:9d:be:ef:df:72:c8:5c:1d:84:30: ee:67:81:21:2c:ea:5e:51:ff:8d:89:d1:8a:44:e5:5d:d2:ed: 26:b6:95:70:fa:08:7d:f8:06:87:52:d3:75:1a:40:b5:74:55: fb:cf:d8:1d:53:52:6a:e6:8f:9f:34:f7:f5:76:d0:81:d3:cb: 6a:f7:98:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE8Fi5VnuGKyuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDBhOThjYjktOTRmZS00MDNjLWIyODUtY2U1Y2ZjZDVjMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+jIlOyqyD3XmYvdXwYLmt0Xzdb+MMpMcDjR H0c3mLK5Xk3KXgruyVMtERgmRNWJtlW2dZpTIYZ3DLRij0WGKvQ7HkbXkXLPin90 B+7imPNEHND84I7qpNu9+vyRFTBXUFNng7uirUlLwqp4ZOhs1gJIXxtQg1yr6HwT KCf2GonwMp+yrJWmWPVI8NP5DWqoJYAQlFd8/O5IJL3DBRcoTLo50oIR+TLOPBOJ kW27nvMJn4+eUqygy37xSZPbAI6UASD+xfh44jbz1PtFbR++BgudJaPaoMmDRABp hEn3UdyJC509url5m55P7atwLmnM3T6xIIuXWRJP+vymbOkANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd7FoU7Ah7kj04iXfA52z6QATzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMGE3ODhhMjQtYjY4MS0z YzkyLWI1MTctMmUwNjdkNjg2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgi0Jqh7GVOFWpTwwUOpzJpiaQlxCjEoJyVGETBJtTUPwrP4P0lPju5 6FnG38d6QmGw6sQruHHsYjBNWUBN4KjEGQj6DzcIZ8vYsUHOIMbLw1b8WP48Q89X PH3MUcYSPaf/18jvHuxgGeVkchZMv07Bd6pT8kAPhVpQyP8hfNz1SjrD7njgJsm0 2y7rK+RM+RoWx2i5Gdh+wb0hL0gFZEMLHSvQNa9Rr9IWEV0l/xy368kiZnwXONyw 1pFcnb7v33LIXB2EMO5ngSEs6l5R/42J0YpE5V3S7Sa2lXD6CH34BodS03UaQLV0 VfvP2B1TUmrmj5809/V20IHTy2r3mDg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:59 2025 by rpki-client