$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa File: 429c2c19-e860-3ce9-8432-d4cd3f987677.roa (raw, json) Hash identifier: d4bHAF30m24lmZGeh3K1Ax2Z/NOCVriYBAtfGuYYFeY= Subject key identifier: 11:9F:B9:16:47:3C:DA:76:8D:6A:E7:B0:E2:6A:1B:06:96:9C:FC:FA Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EC05559D63B5648BEE5000 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:05:55:9d:63:b5:64:8b:ee:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=762a1856-f019-4fa3-a393-70b5507c0576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:3c:35:b9:66:16:ee:73:5a:a3:d5:fd:76: 2a:ed:27:ab:cd:9e:32:2a:f4:e0:f9:f4:3f:03:7c: 31:83:98:b3:30:88:bb:96:9f:55:34:6b:13:82:b7: 5f:88:48:8f:09:70:7f:61:67:37:c6:01:c8:e2:3b: 10:7d:46:8e:f3:4f:c8:e2:c4:71:91:31:02:a5:0c: a9:b1:65:8b:8c:5a:fd:50:98:62:17:f1:fc:4e:16: d1:9c:12:e0:c8:13:5d:63:bf:ff:39:4e:ad:98:1c: 9f:a1:ea:39:b1:40:c8:93:0f:18:7e:3d:92:d5:d2: f4:75:fd:ce:b6:78:64:08:89:01:46:8c:22:2b:a4: 18:96:7a:20:14:2c:fd:8b:65:b8:8c:9a:ed:63:2b: 72:81:f5:18:48:38:16:09:8a:40:97:ef:cc:d6:a5: 5f:7f:21:3c:8a:da:d6:ef:57:01:5e:1f:b6:ab:df: be:f9:a2:e2:dc:4d:b6:ca:63:6c:dd:c1:61:f0:c5: 60:1c:cf:80:46:02:c8:e3:81:62:5b:bd:37:df:e3: d2:f6:a7:80:0b:f1:22:69:c2:f0:13:1f:37:bd:98: 06:07:69:52:48:c2:40:8d:6a:ff:d7:53:29:af:b1: e7:de:1c:21:39:df:ea:23:36:ba:a6:cd:a0:6c:f8: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9F:B9:16:47:3C:DA:76:8D:6A:E7:B0:E2:6A:1B:06:96:9C:FC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:dc:3e:9e:3d:41:20:2e:2a:f2:ee:ba:63:49:f2:d8:dc:b3: 2c:ea:81:42:02:5e:a8:a0:8a:d9:63:da:3a:60:43:fe:d7:01: f1:9e:f4:89:32:4c:10:5f:5b:b0:cc:11:8e:fa:f7:6a:3f:80: 0e:a2:a3:71:17:a2:fa:fb:45:cd:92:c5:15:0c:0f:25:ca:25: 21:6b:89:c0:1b:75:c8:15:98:69:54:0f:e8:0f:ea:7a:77:80: e4:6f:00:7f:9d:b4:a5:f7:27:f9:a9:44:ce:86:35:f1:f9:37: 49:fc:03:cb:f2:40:e9:5d:b2:c5:ff:cc:5b:96:a7:22:96:94: 39:2c:e6:4b:4b:d5:e6:db:90:4e:21:2a:4b:f9:52:7e:6a:7f: 5b:14:4d:cc:bd:90:bf:55:3b:28:3f:a9:a6:59:ac:67:b1:11: 24:6e:4a:69:37:79:e8:7d:99:b4:68:0f:a3:c4:c7:e9:48:2c: 9d:ee:8c:20:90:8e:34:c5:54:a5:49:26:8f:52:24:dc:25:f4: bd:9d:28:fd:7a:36:2d:0e:d8:3c:c4:23:54:e5:c2:b9:b8:d4: 99:75:31:e6:d0:00:f7:94:92:7f:f3:70:7a:69:a7:66:6e:94: 67:03:0b:a5:b1:e8:9f:a7:5e:ff:92:e6:2d:67:91:b5:fe:72: f9:f9:53:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AVVnWO1ZIvuUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NzYyYTE4NTYtZjAxOS00ZmEzLWEzOTMtNzBiNTUwN2MwNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp48NblmFu5zWqPV/XYq7SerzZ4yKvTg+fQ/ A3wxg5izMIi7lp9VNGsTgrdfiEiPCXB/YWc3xgHI4jsQfUaO80/I4sRxkTECpQyp sWWLjFr9UJhiF/H8ThbRnBLgyBNdY7//OU6tmByfoeo5sUDIkw8Yfj2S1dL0df3O tnhkCIkBRowiK6QYlnogFCz9i2W4jJrtYytygfUYSDgWCYpAl+/M1qVffyE8itrW 71cBXh+2q9+++aLi3E22ymNs3cFh8MVgHM+ARgLI44FiW7033+PS9qeAC/EiacLw Ex83vZgGB2lSSMJAjWr/11Mpr7Hn3hwhOd/qIza6ps2gbPgrHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGfuRZHPNp2jWrnsOJqGwaWnPz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5YzJjMTktZTg2MC0z Y2U5LTg0MzItZDRjZDNmOTg3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4MSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3cPp49QSAuKvLuumNJ8tjcsyzqgUICXqigitlj2jpgQ/7XAfGe9Iky TBBfW7DMEY7692o/gA6io3EXovr7Rc2SxRUMDyXKJSFricAbdcgVmGlUD+gP6np3 gORvAH+dtKX3J/mpRM6GNfH5N0n8A8vyQOldssX/zFuWpyKWlDks5ktL1ebbkE4h Kkv5Un5qf1sUTcy9kL9VOyg/qaZZrGexESRuSmk3eeh9mbRoD6PEx+lILJ3ujCCQ jjTFVKVJJo9SJNwl9L2dKP16Ni0O2DzEI1Tlwrm41Jl1MebQAPeUkn/zcHppp2Zu lGcDC6Wx6J+nXv+S5i1nkbX+cvn5U+E= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:32 2025 by rpki-client