$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa File: a3476e4c-4fec-3283-b242-377f154d7059.roa (raw, json) Hash identifier: FsvnJx0tn5Yevi5AfAPiOarhSsPl+WrxOfRj5DbNldM= Subject key identifier: 82:3F:D8:4E:AB:1D:55:50:AB:B5:39:5B:C5:74:5B:E5:FA:DE:D9:C3 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EBFC0BEC3514641E90EF00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fc:0b:ec:35:14:64:1e:90:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=e16b5868-0d68-4283-b1b4-50f6be18351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:ab:24:fd:de:b3:d9:ac:a2:f3:15:81:76: f1:af:f7:fc:ec:eb:f1:fb:19:ea:0f:4c:e9:61:a5: ee:85:07:7f:1e:52:4f:a8:2d:19:49:b3:48:52:99: 0e:77:68:19:ec:17:44:ba:f6:8a:16:75:da:ce:a2: e0:f9:f5:f9:a0:1d:56:c1:5f:e7:f2:fa:f8:78:47: 34:05:b8:f3:05:04:02:a5:95:dc:fd:ad:d3:7a:3e: 5f:b5:74:f3:2c:b2:34:2e:49:c7:66:79:ea:34:3a: b5:d9:47:eb:77:60:56:77:93:b8:fb:63:fb:16:68: 76:cc:cd:bc:53:a6:7f:2f:06:f9:db:db:ba:bf:1b: a3:5d:ce:19:9a:d6:fd:37:5c:a6:12:09:d8:13:6a: cd:af:96:0d:2f:e6:17:58:84:12:86:1d:cb:56:c6: 54:d5:f2:e1:bd:f1:5d:4f:ac:a2:e7:8a:92:38:f4: 68:3d:fa:02:8e:07:0d:c5:41:57:79:5c:aa:75:f3: 54:ef:eb:b8:76:02:8e:f6:6c:4a:92:1b:0d:c8:7e: 48:96:16:44:07:f0:bd:83:ed:50:53:95:58:5c:fa: ed:5c:4f:3c:7c:67:5a:2d:2a:36:a3:56:46:55:a3: 60:5d:f9:9e:66:86:85:b4:82:54:3f:0a:eb:77:f2: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3F:D8:4E:AB:1D:55:50:AB:B5:39:5B:C5:74:5B:E5:FA:DE:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3d:26:95:eb:52:52:43:51:30:a4:ca:22:18:69:0b:bf:27: de:8d:f9:17:df:f4:e5:3a:d1:f6:cf:26:d8:3e:39:25:6b:7e: c5:19:5c:51:2b:25:55:af:f0:24:5e:5d:4a:31:a0:3e:28:c1: f2:25:41:1c:71:b3:9f:d7:82:a3:d2:50:7c:b0:11:5a:ec:f5: 9e:09:a8:18:07:25:0f:31:3d:f0:f6:42:cc:87:7f:5c:78:db: 47:b0:0c:63:cc:a7:09:34:d4:13:9f:9a:6b:cf:d6:74:ff:33: 0f:6a:66:35:6d:6a:99:83:35:57:24:76:76:28:50:04:52:8b: 8e:5a:66:7a:81:79:cd:45:4f:d2:65:61:c9:58:af:f7:d0:b1: fb:fc:da:11:b8:ad:f3:cc:83:3e:95:d7:da:3f:06:6a:4c:ea: ca:56:6b:af:ac:4f:bd:24:27:b7:7b:00:f0:5a:a9:15:03:02: 2f:ba:ac:df:f0:2e:fe:64:82:9b:d6:48:a4:fb:3f:3e:81:1e: 92:0c:8a:29:09:21:80:86:2c:59:ff:43:a7:a9:03:67:c1:ca: d7:40:e7:59:1d:32:65:57:3d:21:9d:83:c2:68:42:1b:2a:29: 05:64:ec:f1:de:ca:9e:28:13:57:08:16:d1:dc:7f:1c:50:66: 50:63:b8:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/wL7DUUZB6Q7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZTE2YjU4NjgtMGQ2OC00MjgzLWIxYjQtNTBmNmJlMTgzNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPGrJP3es9msovMVgXbxr/f87Ovx+xnqD0zp YaXuhQd/HlJPqC0ZSbNIUpkOd2gZ7BdEuvaKFnXazqLg+fX5oB1WwV/n8vr4eEc0 BbjzBQQCpZXc/a3Tej5ftXTzLLI0LknHZnnqNDq12Ufrd2BWd5O4+2P7Fmh2zM28 U6Z/Lwb529u6vxujXc4Zmtb9N1ymEgnYE2rNr5YNL+YXWIQShh3LVsZU1fLhvfFd T6yi54qSOPRoPfoCjgcNxUFXeVyqdfNU7+u4dgKO9mxKkhsNyH5IlhZEB/C9g+1Q U5VYXPrtXE88fGdaLSo2o1ZGVaNgXfmeZoaFtIJUPwrrd/Jr2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII/2E6rHVVQq7U5W8V0W+X63tnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTM0NzZlNGMtNGZlYy0z MjgzLWIyNDItMzc3ZjE1NGQ3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD89JpXrUlJDUTCkyiIYaQu/J96N+Rff9OU60fbPJtg+OSVrfsUZXFEr JVWv8CReXUoxoD4owfIlQRxxs5/XgqPSUHywEVrs9Z4JqBgHJQ8xPfD2QsyHf1x4 20ewDGPMpwk01BOfmmvP1nT/Mw9qZjVtapmDNVckdnYoUARSi45aZnqBec1FT9Jl YclYr/fQsfv82hG4rfPMgz6V19o/BmpM6spWa6+sT70kJ7d7APBaqRUDAi+6rN/w Lv5kgpvWSKT7Pz6BHpIMiikJIYCGLFn/Q6epA2fBytdA51kdMmVXPSGdg8JoQhsq KQVk7PHeyp4oE1cIFtHcfxxQZlBjuFM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:28 2025 by rpki-client