$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa File: 3284b412-8828-3c30-abd3-dffc9d12cb9a.roa (raw, json) Hash identifier: /1U1VMH09o68dXlniJOPZMGsRnRptxp0Vh5t0en4xq4= Subject key identifier: 60:6D:3A:E4:43:DB:B7:A2:CA:36:B1:F6:28:37:E6:7E:67:2C:DF:5E Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584A146575266220E990F51ED810 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 14297 IP address blocks: 139.131.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:75:26:62:20:e9:90:f5:1e:d8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=ea8931ec-53df-4b1f-b0e2-aa687e958cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:d4:94:ec:92:70:e7:dd:2b:eb:85:f3:b7: 5f:08:1a:de:1e:50:dc:92:74:d3:de:68:aa:61:3b: 5b:91:0a:f9:3b:c0:5c:93:80:f2:7b:4b:af:6e:18: a4:7f:6e:c1:c6:b1:dd:ac:69:e7:62:62:d7:1c:07: 76:60:e1:a6:45:90:2c:b8:a4:b9:e8:b3:8d:18:b3: 9f:9a:21:c1:0b:65:10:e6:31:6a:0d:c2:75:ae:82: 7a:e7:31:34:4e:59:d5:a3:4e:a1:0d:d8:dd:fb:80: 1e:d8:b1:f9:7d:16:b5:10:f0:f6:19:28:68:b3:51: 52:31:c6:7a:23:28:26:d1:e9:25:fe:64:fc:8e:9b: 93:23:72:94:9d:99:7c:e6:6f:01:32:6d:f8:0c:81: ec:3a:c3:a3:ea:b5:44:c8:f1:5b:ce:52:4b:87:10: 81:c1:cc:62:84:e5:76:98:a7:f4:b8:fe:14:00:c9: 96:07:6d:e7:c7:56:ef:60:0a:4c:be:a0:d6:e3:4b: 03:70:b0:f8:9d:25:c0:49:fa:e0:36:85:8f:a7:a1: b0:12:97:20:65:c5:d2:a4:92:7d:68:fc:60:7b:3f: 10:7a:e7:c6:5c:6e:09:25:87:1f:7e:f3:2c:a9:08: 4b:07:76:b7:72:14:dd:69:d6:e1:b9:1d:84:93:3c: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:3A:E4:43:DB:B7:A2:CA:36:B1:F6:28:37:E6:7E:67:2C:DF:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:73:86:c3:a7:31:31:d5:a4:c3:e5:f1:46:9c:43:ec:c4:72: c0:ec:42:e9:d4:9b:74:24:86:d1:e1:b6:ce:30:1b:39:87:f5: 84:aa:5a:8b:f9:05:cb:bd:13:aa:8a:f0:b1:2a:81:2e:99:c7: 87:41:a3:2f:3b:86:aa:e2:e5:0a:3f:c8:71:a3:b8:c3:d3:bf: 9d:ba:06:fa:92:1c:1b:1f:ef:9d:5b:21:e8:dc:d4:b1:96:59: 7c:ca:0d:6a:5d:46:0f:78:2f:a5:ab:23:09:80:e3:e3:3c:03: 81:8e:ac:a9:d0:0f:ae:49:82:3a:8c:38:e7:ec:95:2a:33:ef: 8a:88:65:07:83:ac:f6:91:0c:25:38:bf:81:73:fd:1f:5b:22: d9:71:c5:56:29:1b:be:6d:73:58:6e:13:6d:32:33:4e:8a:c1: e6:bf:96:d5:c3:80:aa:13:d5:3f:5c:84:f0:a5:7a:5f:64:4e: b8:f4:f8:c4:d8:55:15:3c:40:1f:31:42:d9:92:e3:f0:87:5e: 65:ba:52:49:81:20:ca:17:74:44:22:c9:ba:90:1c:18:81:4b: 14:c1:16:35:43:00:67:78:f7:b5:f7:5e:e1:11:a2:ad:a2:bb: 47:e7:70:94:c6:14:ff:91:6f:c0:6c:83:e8:e5:4c:84:45:c9: e7:b0:75:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXUmYiDpkPUe2BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWE4OTMxZWMtNTNkZi00YjFmLWIwZTItYWE2ODdlOTU4Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d7UlOyScOfdK+uF87dfCBreHlDcknTT3miq YTtbkQr5O8Bck4Dye0uvbhikf27BxrHdrGnnYmLXHAd2YOGmRZAsuKS56LONGLOf miHBC2UQ5jFqDcJ1roJ65zE0TlnVo06hDdjd+4Ae2LH5fRa1EPD2GShos1FSMcZ6 Iygm0ekl/mT8jpuTI3KUnZl85m8BMm34DIHsOsOj6rVEyPFbzlJLhxCBwcxihOV2 mKf0uP4UAMmWB23nx1bvYApMvqDW40sDcLD4nSXASfrgNoWPp6GwEpcgZcXSpJJ9 aPxgez8QeufGXG4JJYcffvMsqQhLB3a3chTdadbhuR2EkzyvAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBtOuRD27eiyjax9ig35n5nLN9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMzI4NGI0MTItODgyOC0z YzMwLWFiZDMtZGZmYzlkMTJjYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi4PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxzhsOnMTHVpMPl8UacQ+zEcsDsQunUm3QkhtHhts4wGzmH9YSqWov5 Bcu9E6qK8LEqgS6Zx4dBoy87hqri5Qo/yHGjuMPTv526BvqSHBsf751bIejc1LGW WXzKDWpdRg94L6WrIwmA4+M8A4GOrKnQD65JgjqMOOfslSoz74qIZQeDrPaRDCU4 v4Fz/R9bItlxxVYpG75tc1huE20yM06Kwea/ltXDgKoT1T9chPClel9kTrj0+MTY VRU8QB8xQtmS4/CHXmW6UkmBIMoXdEQiybqQHBiBSxTBFjVDAGd497X3XuERoq2i u0fncJTGFP+Rb8Bsg+jlTIRFyeewdTQ= -----END CERTIFICATE-----Generated at Fri Jun 13 06:52:18 2025 by rpki-client