$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa File: 61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa (raw, json) Hash identifier: SDA5Nd8b1K17E018fKgGHH5fHjFSKeBMVRK9r+nXbkI= Subject key identifier: 2D:B1:63:BC:95:5F:26:E2:1A:AB:3E:93:4D:D4:2D:8A:97:18:56:D9 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EBFBBE6EB0AC48EB9C4B00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fb:be:6e:b0:ac:48:eb:9c:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bf068cca-4a75-46ac-8879-e6d11d505164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:e0:bf:bb:36:fd:1d:06:8c:48:65:6c:f5: 94:ac:60:e6:19:f3:91:ab:ad:7a:22:76:42:73:84: 30:00:00:62:d0:83:79:4c:b7:81:00:18:1b:be:ed: a6:c0:07:85:ac:4e:b9:4b:7e:39:08:bc:51:18:8b: 97:93:7d:31:ae:0d:dc:d7:18:23:42:74:44:0b:bb: 99:c5:fe:50:1f:2e:92:34:68:29:03:64:c8:cd:0f: fe:96:f9:b2:ed:87:31:38:42:16:5b:43:55:e1:27: d5:8e:70:87:09:3d:e9:aa:b5:cf:6b:62:a8:a3:93: 3e:f7:38:a3:db:96:f8:fb:6e:13:a4:15:24:53:0a: ae:4f:54:3c:d9:d0:6f:83:25:77:95:6c:58:47:dc: 24:ee:a2:70:bc:de:df:27:07:37:15:47:50:0b:b6: 42:be:af:e6:82:52:9e:35:ea:80:2f:6e:21:f7:6f: 85:50:7c:18:63:8f:38:be:37:f3:82:a5:2f:b8:b3: 37:0d:85:6c:29:b3:f1:01:b3:bf:5a:32:7a:50:53: 72:77:38:67:7d:3f:f2:6d:28:7e:a0:81:e2:67:f2: 93:af:50:17:6a:b7:fc:2f:9c:0a:30:e9:8b:73:9d: 6f:4e:28:b7:ca:24:c8:a1:d0:93:44:e0:7b:97:ca: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B1:63:BC:95:5F:26:E2:1A:AB:3E:93:4D:D4:2D:8A:97:18:56:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:93:cb:f1:68:da:ea:08:7e:69:4d:6c:ac:1c:ec:d2:9c:6b: 20:3b:29:4d:e6:1f:28:32:c7:2d:c7:b9:dd:06:b7:e7:f8:0a: b3:19:45:cc:ba:5f:6a:4b:29:83:02:ca:4a:5e:71:29:b9:de: 77:d7:e5:4b:49:6b:bd:44:b6:6f:bc:e9:05:cf:b7:4c:75:26: f1:48:1b:67:31:5e:86:9d:d1:6b:64:01:78:f2:df:dd:80:7a: ce:6c:4d:79:c4:0d:25:e8:3f:0b:c0:b5:8e:b6:84:22:04:d3: 04:c3:f2:5b:8f:0b:fd:d0:9d:90:1d:59:7f:eb:91:84:74:f3: e5:be:37:b9:cf:93:01:54:04:a6:ca:62:16:46:b0:8f:73:e6: a3:7c:87:95:f9:52:e7:60:a4:37:29:3e:fd:5c:aa:cb:a9:38: 34:dd:5b:fa:f9:56:b6:cf:41:2d:8c:dc:95:a5:af:b4:02:1c: c7:60:7a:91:c7:a0:7c:b8:be:f3:b4:fd:d8:b1:ef:37:dd:aa: 22:96:9c:5c:a4:93:13:b7:01:72:55:2e:7c:a2:d7:06:37:87: d2:29:fb:78:99:e9:63:3b:50:b1:60:ec:12:8d:d5:6d:8a:03: 22:62:7e:2c:86:74:03:a4:b4:d1:8b:92:16:ce:4d:c9:42:9d: 54:cf:c5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/u+brCsSOucSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmYwNjhjY2EtNGE3NS00NmFjLTg4NzktZTZkMTFkNTA1MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOXgv7s2/R0GjEhlbPWUrGDmGfORq616InZC c4QwAABi0IN5TLeBABgbvu2mwAeFrE65S345CLxRGIuXk30xrg3c1xgjQnREC7uZ xf5QHy6SNGgpA2TIzQ/+lvmy7YcxOEIWW0NV4SfVjnCHCT3pqrXPa2Koo5M+9zij 25b4+24TpBUkUwquT1Q82dBvgyV3lWxYR9wk7qJwvN7fJwc3FUdQC7ZCvq/mglKe NeqAL24h92+FUHwYY484vjfzgqUvuLM3DYVsKbPxAbO/WjJ6UFNydzhnfT/ybSh+ oIHiZ/KTr1AXarf8L5wKMOmLc51vTii3yiTIodCTROB7l8pXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2xY7yVXybiGqs+k03ULYqXGFbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNjFiYmE2YTItODBlMi0z ZmZkLTlhNjUtMWQ3MzExNTkzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyTy/Fo2uoIfmlNbKwc7NKcayA7KU3mHygyxy3Hud0Gt+f4CrMZRcy6 X2pLKYMCykpecSm53nfX5UtJa71Etm+86QXPt0x1JvFIG2cxXoad0WtkAXjy392A es5sTXnEDSXoPwvAtY62hCIE0wTD8luPC/3QnZAdWX/rkYR08+W+N7nPkwFUBKbK YhZGsI9z5qN8h5X5UudgpDcpPv1cqsupODTdW/r5VrbPQS2M3JWlr7QCHMdgepHH oHy4vvO0/dix7zfdqiKWnFykkxO3AXJVLnyi1wY3h9Ip+3iZ6WM7ULFg7BKN1W2K AyJifiyGdAOktNGLkhbOTclCnVTPxTY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:53 2025 by rpki-client