$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa File: f01ab467-e827-376a-850d-acf1578e53c2.roa (raw, json) Hash identifier: kK4JVQ97i6dAM5NXRQ404V2YHNuyj4nsxWhGCjWbPBs= Subject key identifier: 3B:88:D3:06:F2:C9:FB:58:56:4F:1C:80:6C:1D:6F:F5:9D:55:6A:31 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285849E22523ADD37BA37184B04C00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 14297 IP address blocks: 139.131.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:23:ad:d3:7b:a3:71:84:b0:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=1c466a1e-7779-45be-9341-a9236adf7e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:c0:79:ea:9b:6a:48:e3:16:17:b9:e1:83: 78:76:a3:f0:58:71:ec:20:7a:a4:ea:69:21:1b:cc: 4b:ea:8b:83:96:08:73:c2:62:a1:f0:4e:a2:99:16: 1d:02:d7:06:ae:15:3f:91:fe:53:43:ef:13:5c:fc: ff:f0:95:aa:f4:72:91:73:20:97:af:87:7a:d8:df: 73:e0:01:a7:6f:23:af:4f:b6:c6:01:da:e0:86:c6: cf:d6:1d:9c:44:0b:45:6d:97:50:43:0d:ce:aa:44: 3a:ed:46:95:62:7a:60:a1:a6:03:ec:95:32:4a:1e: 53:d7:42:f7:b1:50:3d:81:f4:3c:af:04:72:58:57: 52:ba:40:3d:55:2c:8c:a5:9d:bd:49:e1:b0:69:f9: 1c:4b:7b:d7:23:ba:b6:22:06:1e:ed:43:b7:2e:df: 08:01:fd:9d:80:53:5c:62:e3:02:e6:e3:ba:20:81: b6:76:90:45:b6:21:e5:6b:52:14:ea:d5:0f:2f:34: 23:7e:d5:26:64:48:18:b9:d3:04:e8:d7:5e:19:7c: 61:6c:36:92:a0:70:26:b8:ff:58:3f:e2:bf:df:11: 83:a3:c5:41:b2:95:b3:f1:32:a8:72:5e:6b:5f:89: 54:81:e2:9a:a5:f1:67:48:b1:6b:bd:ed:41:37:c6: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:88:D3:06:F2:C9:FB:58:56:4F:1C:80:6C:1D:6F:F5:9D:55:6A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:af:39:32:15:69:19:5f:3f:66:59:9f:54:83:2e:96:29:98: 6b:f0:b7:92:d4:24:69:13:a1:c6:9d:00:6b:0b:94:4c:57:23: 3f:a0:2c:26:7e:80:5f:9a:92:0b:83:2d:ca:b2:18:bb:1d:7c: 9f:e8:6b:83:35:4d:8b:47:e0:6c:04:bf:2f:25:f0:fa:1b:c6: ac:b6:8d:3a:5a:aa:fb:8e:7c:0d:7c:57:56:be:78:ea:09:25: c9:2b:61:9b:6f:44:01:a6:a8:78:56:b6:75:46:a6:a4:00:21: 3a:a5:00:fd:67:eb:3f:ba:28:3c:ae:eb:9c:9e:57:e5:d5:0a: 3c:71:cc:47:1c:9b:71:92:e1:51:ff:be:c1:e1:20:6a:0e:1d: 8b:47:de:97:39:ae:56:02:b4:69:30:da:f6:d9:3e:e5:24:05: 9d:32:ca:54:f0:f0:04:9d:05:52:db:d2:1a:f1:7a:ae:39:49: 69:94:c2:70:cb:31:1b:67:19:16:4d:28:e6:a1:8a:8d:8f:da: 1a:a0:56:f7:8a:f1:9b:20:13:e4:20:2a:21:19:55:f2:e9:79: 56:c6:38:60:e9:b7:e0:fe:b8:85:9b:41:ef:3f:cd:1a:f3:5e: 78:af:e3:64:ae:51:da:ff:4e:95:74:be:21:7b:14:50:cf:47: bb:53:d2:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSOt03ujcYSwTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MWM0NjZhMWUtNzc3OS00NWJlLTkzNDEtYTkyMzZhZGY3ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp/AeeqbakjjFhe54YN4dqPwWHHsIHqk6mkh G8xL6ouDlghzwmKh8E6imRYdAtcGrhU/kf5TQ+8TXPz/8JWq9HKRcyCXr4d62N9z 4AGnbyOvT7bGAdrghsbP1h2cRAtFbZdQQw3OqkQ67UaVYnpgoaYD7JUySh5T10L3 sVA9gfQ8rwRyWFdSukA9VSyMpZ29SeGwafkcS3vXI7q2IgYe7UO3Lt8IAf2dgFNc YuMC5uO6IIG2dpBFtiHla1IU6tUPLzQjftUmZEgYudME6NdeGXxhbDaSoHAmuP9Y P+K/3xGDo8VBspWz8TKocl5rX4lUgeKapfFnSLFrve1BN8bngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuI0wbyyftYVk8cgGwdb/WdVWoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjAxYWI0NjctZTgyNy0z NzZhLTg1MGQtYWNmMTU3OGU1M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEevOTIVaRlfP2ZZn1SDLpYpmGvwt5LUJGkTocadAGsLlExXIz+gLCZ+ gF+akguDLcqyGLsdfJ/oa4M1TYtH4GwEvy8l8Pobxqy2jTpaqvuOfA18V1a+eOoJ JckrYZtvRAGmqHhWtnVGpqQAITqlAP1n6z+6KDyu65yeV+XVCjxxzEccm3GS4VH/ vsHhIGoOHYtH3pc5rlYCtGkw2vbZPuUkBZ0yylTw8ASdBVLb0hrxeq45SWmUwnDL MRtnGRZNKOahio2P2hqgVveK8ZsgE+QgKiEZVfLpeVbGOGDpt+D+uIWbQe8/zRrz Xniv42SuUdr/TpV0viF7FFDPR7tT0gQ= -----END CERTIFICATE-----Generated at Tue Jun 10 05:05:13 2025 by rpki-client