$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa File: 59d1f242-72ef-3a31-a323-8f22641c6746.roa (raw, json) Hash identifier: JyP7TJHhnzxOR6LeONrvHQTL8NrCPgZ/QGSQkBfuaAc= Subject key identifier: AB:30:DE:E0:AB:F8:8E:F8:B1:EB:46:59:C4:2B:72:BF:ED:B4:A8:A7 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EBFBA57FC8AE1A92A6C280 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fb:a5:7f:c8:ae:1a:92:a6:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=6f2ccfe2-0f6d-472a-bc73-e22c533f1353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:4f:d7:2a:4b:73:9c:13:96:df:fa:4b:0e: a2:ff:f2:9c:5d:d0:ba:09:74:db:7a:31:48:28:87: 2a:ed:8d:28:04:d4:15:23:e7:06:ce:2d:b1:8c:23: 54:14:37:db:69:93:37:67:bd:28:b7:81:ce:68:06: a4:1b:33:4f:11:3a:4d:0c:f5:6d:e9:5e:ae:4b:0c: a6:91:14:de:78:43:94:81:e2:fc:27:11:16:ad:3b: fb:d1:8d:8e:18:bc:92:ab:ec:bd:25:30:a5:be:df: cf:15:82:c2:76:6e:aa:8b:1c:5e:0b:d7:92:62:2e: 73:85:2d:ef:3f:07:3e:db:4e:23:b6:20:4a:cc:38: 43:34:d7:40:42:92:3b:4a:7b:fc:9c:71:53:e3:34: d6:1c:7d:19:d5:d6:fe:53:7f:87:7a:05:98:fb:db: 3f:c6:62:28:96:56:20:2c:43:72:33:10:5e:2c:e5: 87:5b:33:9c:b3:4a:ea:0d:5f:db:ae:37:ba:6b:ad: 52:19:f9:2a:7a:17:53:c4:45:82:d5:71:42:cf:2a: 49:b7:d8:0a:8c:64:6d:1b:41:8d:a7:ce:65:e7:5e: cc:eb:83:f5:7c:ab:7e:27:ef:66:f4:b7:9f:8d:cd: cc:33:52:76:63:81:e0:04:c5:2a:30:79:44:70:46: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:DE:E0:AB:F8:8E:F8:B1:EB:46:59:C4:2B:72:BF:ED:B4:A8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:59:e8:2f:31:b1:9d:91:4d:37:6a:40:6e:ed:6d:e6:53:8d: 94:31:d4:de:50:cb:50:b4:7f:e6:82:ac:43:dc:d2:54:42:db: 20:e7:80:d3:90:66:29:30:80:ab:84:3d:d6:38:91:52:cf:13: 56:57:8c:6a:a3:d2:1f:19:0e:3d:19:cb:56:af:af:bb:da:b0: 78:f5:0b:26:44:8a:ca:50:b2:9f:87:67:5c:c3:68:4e:2f:1d: 47:26:85:dd:20:ba:c4:bc:fa:92:bf:a8:97:2d:bd:83:72:cb: 22:c6:4b:4a:1a:23:ec:82:27:57:a1:20:c8:5e:42:d2:0c:cb: 6f:70:65:b3:96:e6:f2:a9:23:22:2d:a8:46:cc:f4:70:66:bc: b4:d9:3f:f2:ae:52:3c:27:32:46:80:41:09:37:af:86:89:6a: 1c:94:a4:84:25:03:dd:0a:06:cc:f1:0e:29:aa:44:de:df:dc: f8:6d:8f:ad:3d:3b:2f:4c:af:d5:3e:69:3f:f6:08:e4:3e:97: ff:23:d9:32:8d:c6:c2:21:10:50:58:bd:c6:55:32:9c:2b:49: cf:eb:6b:aa:c3:f9:12:c4:b6:f6:55:ab:d5:c3:1f:de:4e:79: b8:0a:83:b5:91:34:a9:47:39:f9:71:fc:5d:5b:c2:fe:42:8c: 91:1e:26:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/ulf8iuGpKmwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NmYyY2NmZTItMGY2ZC00NzJhLWJjNzMtZTIyYzUzM2YxMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaFP1ypLc5wTlt/6Sw6i//KcXdC6CXTbejFI KIcq7Y0oBNQVI+cGzi2xjCNUFDfbaZM3Z70ot4HOaAakGzNPETpNDPVt6V6uSwym kRTeeEOUgeL8JxEWrTv70Y2OGLySq+y9JTClvt/PFYLCdm6qixxeC9eSYi5zhS3v Pwc+204jtiBKzDhDNNdAQpI7Snv8nHFT4zTWHH0Z1db+U3+HegWY+9s/xmIollYg LENyMxBeLOWHWzOcs0rqDV/brje6a61SGfkqehdTxEWC1XFCzypJt9gKjGRtG0GN p85l517M64P1fKt+J+9m9Lefjc3MM1J2Y4HgBMUqMHlEcEbqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsw3uCr+I74setGWcQrcr/ttKinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNTlkMWYyNDItNzJlZi0z YTMxLWEzMjMtOGYyMjY0MWM2NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4PCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARZ6C8xsZ2RTTdqQG7tbeZTjZQx1N5Qy1C0f+aCrEPc0lRC2yDngNOQ ZikwgKuEPdY4kVLPE1ZXjGqj0h8ZDj0Zy1avr7vasHj1CyZEispQsp+HZ1zDaE4v HUcmhd0gusS8+pK/qJctvYNyyyLGS0oaI+yCJ1ehIMheQtIMy29wZbOW5vKpIyIt qEbM9HBmvLTZP/KuUjwnMkaAQQk3r4aJahyUpIQlA90KBszxDimqRN7f3Phtj609 Oy9Mr9U+aT/2COQ+l/8j2TKNxsIhEFBYvcZVMpwrSc/ra6rD+RLEtvZVq9XDH95O ebgKg7WRNKlHOflx/F1bwv5CjJEeJqA= -----END CERTIFICATE-----Generated at Sat Apr 12 00:42:08 2025 by rpki-client