$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa File: a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa (raw, json) Hash identifier: KKfh3XPckJObm9oL6hmj4fgA6a9reoxNZCwxdcJLqL4= Subject key identifier: 65:0B:03:6A:3A:3B:55:8B:E8:01:76:1E:0C:6F:4B:A0:E6:03:D9:24 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EC06239CFAF6E681900980 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:06:23:9c:fa:f6:e6:81:90:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=d57cb7ef-2add-47c9-a11c-b1653bbd30e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:55:d4:c4:f2:a5:0a:f4:f2:10:88:2d:c8: 59:38:ed:15:19:46:5b:f5:ea:e3:14:79:04:28:fc: e0:98:aa:fb:1a:fb:d4:39:8a:3f:2d:37:6c:17:34: 0e:29:d4:b7:40:68:b7:63:c9:93:1d:27:20:a2:7a: 39:f7:d6:be:b3:6c:da:48:c6:3d:20:28:ed:91:09: 58:1e:60:87:93:97:4f:c7:e1:d8:a1:a4:25:00:02: 03:33:7c:99:6d:60:20:f5:88:c1:dd:74:cc:2c:1d: 10:84:30:4b:fa:1c:ec:6c:df:57:aa:2a:de:bf:78: f5:8c:3a:27:ce:3a:5e:ec:ae:3b:4f:9d:f7:2d:6c: 6e:b6:b0:be:c1:68:0a:2f:1f:1b:12:84:fa:8a:0c: 37:8c:27:34:7a:e0:20:3c:14:ca:e0:26:5f:f3:41: 5b:08:06:b1:f7:4c:f5:c5:86:64:33:7c:dd:f7:ca: 5f:73:b2:03:3b:f1:23:9f:e6:44:22:e5:5f:0d:1a: f1:d2:80:4e:9c:bf:14:aa:1f:bb:6d:fa:ff:ce:d4: 01:0d:65:7d:82:b4:ca:35:90:bf:8f:5c:70:8e:7a: 77:89:74:10:7e:31:de:83:f9:5c:86:28:ad:e3:e9: ef:27:5d:fd:fa:cf:e2:38:77:ac:bd:e6:1b:52:26: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:03:6A:3A:3B:55:8B:E8:01:76:1E:0C:6F:4B:A0:E6:03:D9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0a:de:6e:b4:02:05:76:37:51:9e:f3:10:52:eb:e8:e2:45: 68:20:6f:41:b6:d9:d7:f7:51:61:ae:f7:67:60:03:a4:5c:2c: 9d:4f:08:f1:3b:c4:93:39:8a:1a:5d:7c:5f:d2:24:65:8a:34: ed:bb:cf:d8:98:e7:6a:57:e4:2f:46:e6:a9:5e:5b:2d:1c:65: 16:0c:b7:2b:f3:b5:3d:d1:05:8a:04:a3:a5:2d:1f:34:ab:45: 14:ca:7a:54:41:f2:60:a2:10:94:13:4b:d5:ae:a4:e9:d3:74: 15:be:63:77:ef:d0:02:1b:51:06:89:a0:9d:0f:95:da:4a:ca: 80:56:a7:64:10:37:5e:31:d2:d7:f9:19:08:01:62:f5:e7:1a: f1:58:b9:16:74:42:e9:f3:3d:bc:85:28:ab:f7:51:63:39:15: 0c:93:c7:a1:8a:39:47:2a:de:92:64:f9:25:cf:d8:40:47:6e: 2f:5d:05:5c:81:e4:ac:5e:d1:ee:7a:92:f0:f7:aa:f8:ab:44: 92:5e:c2:c1:2a:5b:1e:72:6b:01:99:f7:34:06:69:76:13:84: 3d:6b:56:dd:45:80:9d:74:eb:40:ac:b4:10:f0:7c:e9:65:50: a5:12:18:e0:ef:d1:5d:0c:c0:9d:a0:43:53:41:29:85:d7:ca: 42:3f:6a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AYjnPr25oGQCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZDU3Y2I3ZWYtMmFkZC00N2M5LWExMWMtYjE2NTNiYmQzMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnopV1MTypQr08hCILchZOO0VGUZb9erjFHkE KPzgmKr7GvvUOYo/LTdsFzQOKdS3QGi3Y8mTHScgono599a+s2zaSMY9ICjtkQlY HmCHk5dPx+HYoaQlAAIDM3yZbWAg9YjB3XTMLB0QhDBL+hzsbN9Xqirev3j1jDon zjpe7K47T533LWxutrC+wWgKLx8bEoT6igw3jCc0euAgPBTK4CZf80FbCAax90z1 xYZkM3zd98pfc7IDO/Ejn+ZEIuVfDRrx0oBOnL8Uqh+7bfr/ztQBDWV9grTKNZC/ j1xwjnp3iXQQfjHeg/lchiit4+nvJ139+s/iOHesveYbUiYHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGULA2o6O1WL6AF2HgxvS6DmA9kkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTk2NGVmMGItZjFhYS0z NjA3LWFkYTktYzhlMGMwYzk2NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8K3m60AgV2N1Ge8xBS6+jiRWggb0G22df3UWGu92dgA6RcLJ1PCPE7 xJM5ihpdfF/SJGWKNO27z9iY52pX5C9G5qleWy0cZRYMtyvztT3RBYoEo6UtHzSr RRTKelRB8mCiEJQTS9WupOnTdBW+Y3fv0AIbUQaJoJ0PldpKyoBWp2QQN14x0tf5 GQgBYvXnGvFYuRZ0QunzPbyFKKv3UWM5FQyTx6GKOUcq3pJk+SXP2EBHbi9dBVyB 5Kxe0e56kvD3qvirRJJewsEqWx5yawGZ9zQGaXYThD1rVt1FgJ1060CstBDwfOll UKUSGODv0V0MwJ2gQ1NBKYXXykI/ai8= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:56 2025 by rpki-client