$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa File: 429c2c19-e860-3ce9-8432-d4cd3f987677.roa (raw, json) Hash identifier: jX89TWDpiXWDHoYCCr0L1iDgTPdsLOSMDXA67ZCMJL4= Subject key identifier: 5D:BA:53:03:62:67:C4:C1:CC:28:4B:0D:70:10:5C:AA:A1:73:EE:B2 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285848222FDA11098E9AF2338DF768 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 14297 IP address blocks: 139.131.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:da:11:09:8e:9a:f2:33:8d:f7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=9e6cb5e1-4571-4f68-b670-1a0cd4f16a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:7e:41:7f:4b:6c:3a:be:c4:34:6e:ac:46: 5f:d7:9e:1d:38:8b:17:c3:8a:67:14:ff:29:11:b7: f9:97:b9:bf:f7:8f:c9:bd:f8:94:86:92:67:df:f4: 5a:82:c2:06:c2:74:22:8f:81:ce:1f:b0:6f:54:bc: 76:8f:8b:48:2d:fa:da:4b:59:74:61:61:d1:7f:bb: fe:6e:3e:8f:45:d7:73:4e:b7:5e:ed:08:cd:94:5e: 82:96:c5:1f:55:75:9b:6f:72:ff:70:dc:5b:28:bf: df:8a:f8:34:59:28:13:d9:46:17:d4:2b:d1:3a:10: e7:89:4c:dc:75:20:37:0f:3a:02:46:6b:6b:d4:4c: 98:8e:a4:e6:d2:18:c0:b7:7f:93:07:43:da:53:77: f5:0e:d8:31:d1:91:e6:d8:f9:d8:af:4c:b0:d3:9c: 48:28:9b:f3:f9:43:98:9a:b2:2f:21:90:54:75:81: c9:b1:93:bd:8b:3d:13:25:07:5d:8e:e3:37:b5:0d: 04:f8:5e:3d:22:df:1d:7c:42:65:ae:cf:f1:d8:52: 1d:eb:f6:80:e2:cd:00:80:50:3c:b5:f3:12:0b:04: 24:6e:82:90:0b:d3:fd:d3:d0:ac:5d:94:88:1c:66: a1:1c:81:6b:3e:56:46:1a:33:e8:66:b7:b9:ca:fc: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BA:53:03:62:67:C4:C1:CC:28:4B:0D:70:10:5C:AA:A1:73:EE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:71:01:5a:9d:65:8e:a2:00:70:3a:c1:23:63:0c:29:65:2f: 2d:31:ed:63:b1:b6:35:bd:14:ea:a0:59:a4:cb:b9:f8:a6:1a: 45:b0:cd:29:1f:be:c5:c6:79:f8:76:0a:b9:5f:75:c4:b1:e5: 69:04:9d:79:e6:58:8f:75:52:b1:f2:91:20:b4:6b:74:96:b3: 7b:1c:fd:0c:f6:e5:20:de:53:b7:cd:0e:8b:18:37:03:15:ac: 33:ab:20:25:23:27:78:3c:31:03:36:c3:db:8d:18:3f:8c:4b: e9:e0:65:7b:e4:fb:d1:70:bf:92:ee:b6:c4:41:fa:19:ce:0d: cc:1b:f4:98:ce:f9:35:44:f9:cb:41:a2:41:8e:a5:28:4f:9b: d2:25:5f:34:65:2b:1b:b4:6c:6f:70:0f:63:b3:63:8c:ef:2b: 14:8e:81:d1:26:bf:9c:93:31:dc:93:05:fa:44:59:6e:ea:5f: a1:c0:5f:27:c7:e0:e7:e2:e4:9b:a4:d2:f7:a3:5c:6f:da:32: b0:8a:45:e4:10:d5:f7:d0:c5:77:b1:7d:21:0d:26:9e:9a:29: db:b3:cf:71:05:9a:5c:0f:2f:15:09:bd:5a:36:bf:82:b8:45: a8:be:f6:d2:d2:f5:6b:be:e0:83:0f:88:cb:7c:8e:1e:8e:12: ca:82:03:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9oRCY6a8jON92gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk OWU2Y2I1ZTEtNDU3MS00ZjY4LWI2NzAtMWEwY2Q0ZjE2YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunt+QX9LbDq+xDRurEZf154dOIsXw4pnFP8p Ebf5l7m/94/JvfiUhpJn3/RagsIGwnQij4HOH7BvVLx2j4tILfraS1l0YWHRf7v+ bj6PRddzTrde7QjNlF6ClsUfVXWbb3L/cNxbKL/fivg0WSgT2UYX1CvROhDniUzc dSA3DzoCRmtr1EyYjqTm0hjAt3+TB0PaU3f1Dtgx0ZHm2PnYr0yw05xIKJvz+UOY mrIvIZBUdYHJsZO9iz0TJQddjuM3tQ0E+F49It8dfEJlrs/x2FId6/aA4s0AgFA8 tfMSCwQkboKQC9P909CsXZSIHGahHIFrPlZGGjPoZre5yvw+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF26UwNiZ8TBzChLDXAQXKqhc+6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5YzJjMTktZTg2MC0z Y2U5LTg0MzItZDRjZDNmOTg3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4MSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNxAVqdZY6iAHA6wSNjDCllLy0x7WOxtjW9FOqgWaTLufimGkWwzSkf vsXGefh2CrlfdcSx5WkEnXnmWI91UrHykSC0a3SWs3sc/Qz25SDeU7fNDosYNwMV rDOrICUjJ3g8MQM2w9uNGD+MS+ngZXvk+9Fwv5LutsRB+hnODcwb9JjO+TVE+ctB okGOpShPm9IlXzRlKxu0bG9wD2OzY4zvKxSOgdEmv5yTMdyTBfpEWW7qX6HAXyfH 4Ofi5Juk0vejXG/aMrCKReQQ1ffQxXexfSENJp6aKduzz3EFmlwPLxUJvVo2v4K4 Rai+9tLS9Wu+4IMPiMt8jh6OEsqCA9g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:19 2025 by rpki-client