$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa File: e0379946-4a18-3a0c-a538-1fa6a4f52463.roa (raw, json) Hash identifier: O3qdhBkkixBhzQ15q1wfbGVUE+7q1Rd8X5B0rJlZa08= Subject key identifier: 39:70:C1:59:25:C3:DE:E6:34:0A:53:9D:88:60:C9:F6:21:E2:79:05 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EC0612C6BE2DA34494C640 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:06:12:c6:be:2d:a3:44:94:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=df8e722f-2b56-4bc1-b9c9-dee98550cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:28:49:17:e6:08:6e:65:da:b9:0b:90:71: bf:84:d7:d3:25:67:88:6d:1c:f4:e1:94:68:7d:11: 80:ec:6f:07:8c:9c:e2:ce:58:d6:95:45:68:a3:04: 46:df:08:2c:1d:92:b3:10:c8:b4:d0:4f:c8:d7:71: 6a:22:9d:cf:ee:a7:83:12:24:de:95:78:d0:60:d6: e9:9c:81:8e:66:f8:c5:c2:b8:96:7d:8e:e6:b9:b1: 05:86:8a:ba:8f:3e:98:c8:d3:f6:67:d6:33:aa:88: 7a:d4:0f:be:c1:22:e7:12:1f:81:b8:da:be:e1:1d: 21:f2:11:85:4c:c1:08:30:2b:e0:4a:aa:5f:25:08: 8b:24:f1:1d:00:32:9a:fd:0e:3e:87:ae:a4:cb:e4: f2:be:05:aa:2e:3a:64:e7:86:99:e1:1f:4b:13:8b: fe:d6:bc:3c:e9:ae:2b:7a:55:c7:50:71:09:55:f1: 7e:5d:a6:44:ac:c1:d9:4f:3c:0a:43:ab:0c:5e:db: e7:af:1a:eb:a0:f0:ed:77:05:2e:bd:fc:01:56:9a: 7e:da:8b:65:e9:25:11:93:10:93:43:4b:ca:2c:af: 4e:ea:a5:65:02:bb:95:d5:f4:4d:51:8f:51:23:93: 8a:42:c2:7f:da:7c:41:6b:28:a0:f4:dc:db:bc:0d: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:70:C1:59:25:C3:DE:E6:34:0A:53:9D:88:60:C9:F6:21:E2:79:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8a:d7:4d:07:f4:13:54:3b:89:7c:e5:6f:58:28:c4:1f:9a: 9e:0d:78:74:5f:e8:82:a3:3a:1f:a3:02:9f:f3:90:4e:25:02: 3d:2c:26:aa:c7:22:14:6e:fe:07:b6:e3:11:2a:59:da:e8:25: 23:15:42:b5:20:81:5a:58:2e:69:22:bd:ba:79:9f:5a:c2:d3: c9:f9:09:9a:5e:28:f0:d9:2f:b1:68:61:42:d7:7e:c0:e3:e1: c4:bf:d2:5d:59:b1:d5:50:f6:d9:af:c9:25:cf:42:0f:8e:74: 98:db:2e:da:10:c7:76:3a:fe:11:71:eb:4b:8b:60:0e:bc:75: 34:01:be:18:2e:97:be:0e:ac:a5:d7:be:ac:54:70:c3:2a:e3: 37:35:da:21:7a:59:c1:67:21:90:7e:0d:12:8f:a5:0f:60:5c: 6f:17:6b:69:a6:c9:2e:4b:20:8c:83:1a:49:2b:18:59:fb:75: 56:d4:12:68:39:d4:a5:2b:7e:51:29:ec:da:ad:af:89:e0:39: 11:aa:15:a1:9d:74:ff:af:9f:78:30:d3:af:f1:48:7a:a9:92: aa:6d:e1:04:e1:c4:25:d5:59:ba:6e:36:3e:78:eb:00:89:0d: f4:43:ad:14:a2:31:ea:6f:d9:fa:f5:8a:a3:b2:20:9f:e2:63: 12:03:cf:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AYSxr4to0SUxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZGY4ZTcyMmYtMmI1Ni00YmMxLWI5YzktZGVlOTg1NTBjYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+coSRfmCG5l2rkLkHG/hNfTJWeIbRz04ZRo fRGA7G8HjJzizljWlUVoowRG3wgsHZKzEMi00E/I13FqIp3P7qeDEiTelXjQYNbp nIGOZvjFwriWfY7mubEFhoq6jz6YyNP2Z9Yzqoh61A++wSLnEh+BuNq+4R0h8hGF TMEIMCvgSqpfJQiLJPEdADKa/Q4+h66ky+TyvgWqLjpk54aZ4R9LE4v+1rw86a4r elXHUHEJVfF+XaZErMHZTzwKQ6sMXtvnrxrroPDtdwUuvfwBVpp+2otl6SURkxCT Q0vKLK9O6qVlAruV1fRNUY9RI5OKQsJ/2nxBayig9NzbvA0jeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlwwVklw97mNApTnYhgyfYh4nkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZTAzNzk5NDYtNGExOC0z YTBjLWE1MzgtMWZhNmE0ZjUyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi4PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiK100H9BNUO4l85W9YKMQfmp4NeHRf6IKjOh+jAp/zkE4lAj0sJqrH IhRu/ge24xEqWdroJSMVQrUggVpYLmkivbp5n1rC08n5CZpeKPDZL7FoYULXfsDj 4cS/0l1ZsdVQ9tmvySXPQg+OdJjbLtoQx3Y6/hFx60uLYA68dTQBvhgul74OrKXX vqxUcMMq4zc12iF6WcFnIZB+DRKPpQ9gXG8Xa2mmyS5LIIyDGkkrGFn7dVbUEmg5 1KUrflEp7Nqtr4ngORGqFaGddP+vn3gw06/xSHqpkqpt4QThxCXVWbpuNj546wCJ DfRDrRSiMepv2fr1iqOyIJ/iYxIDz1g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:13 2025 by rpki-client