$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa File: f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa (raw, json) Hash identifier: 2BNc6IlmiAqAV0fAJr+RQcHf+/y7nU/9WNezP1NGE0A= Subject key identifier: 69:42:75:2B:82:50:5B:A7:6C:81:32:BC:C4:41:A4:A4:B5:3A:5C:AD Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858484D758C2817FCEB6753946380 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 53297 IP address blocks: 139.131.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:8c:28:17:fc:eb:67:53:94:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=e98e62ab-86d4-4743-aab4-5a7e37ada23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:20:e4:7b:06:34:2e:3b:0d:2f:2b:e3:57: 89:96:95:a4:3e:ae:3b:85:8e:60:87:17:63:1a:95: 06:03:e4:4d:f6:9e:1a:9a:5a:1d:ab:53:be:f6:d3: 11:2a:3c:db:07:98:e8:e3:20:d9:ef:73:bf:77:9f: bb:66:a2:5f:0c:6f:7f:84:13:93:8b:37:83:2b:58: 1d:ac:3c:27:28:cd:45:81:49:9b:2b:f4:00:1d:4d: 38:e7:40:1d:5a:78:ae:21:b0:6d:fa:2c:16:9f:14: 27:cb:eb:be:7c:7d:02:8c:ee:62:4d:6e:d2:0d:c8: 68:51:23:83:3c:4f:e5:1d:af:bc:4e:de:82:1b:a4: 21:10:f8:90:19:99:3a:50:10:34:e6:56:42:94:c6: 00:f4:35:1c:58:d2:d2:3f:cf:19:4e:76:ed:fb:e4: c2:86:ad:0d:86:2a:ab:07:a3:3c:b1:09:3e:40:57: e9:68:29:96:8c:ac:1d:8d:1a:8e:55:60:af:ab:65: 3f:3a:a7:3c:e4:b8:72:3a:54:4b:75:f0:0f:a9:b8: ff:5c:ae:d7:00:88:2d:6a:96:19:d7:2a:82:e6:0a: a9:5f:1d:0b:c1:5f:a8:2c:c0:ff:af:ab:ce:ac:6f: f0:ae:01:91:59:c5:50:53:79:76:98:a2:f1:92:9e: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:75:2B:82:50:5B:A7:6C:81:32:BC:C4:41:A4:A4:B5:3A:5C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ca:99:07:30:7b:65:30:d7:18:b6:d7:a4:04:bc:c7:59:12: 60:32:a0:52:b3:7c:26:10:2c:df:24:69:13:1f:87:9d:c7:27: eb:11:45:e7:4d:78:7d:f9:59:33:f7:5a:0a:06:32:4b:f5:8c: fe:13:1d:fc:a6:a8:29:6f:c8:ba:98:a4:b1:6a:3d:8b:45:3e: 18:ce:d7:54:fe:43:d9:ce:46:ca:5d:f0:20:0e:f3:fa:fe:5b: 06:a8:e7:67:b1:67:f0:85:cb:5d:81:91:75:96:9f:d1:69:63: 9d:e6:5c:25:ea:21:a2:59:b4:bc:61:c0:23:4c:2c:16:9f:a6: ef:31:12:d6:4b:ba:c8:65:ee:fb:bf:41:c4:d6:6f:8b:a6:09: 41:01:b0:f9:d5:56:2d:bc:66:c9:65:22:8a:2d:bc:73:27:85: 83:05:46:61:ff:d7:6d:24:9e:6c:23:0e:1e:18:5b:49:f5:9f: 43:f1:0d:4a:e5:9a:24:b4:af:26:db:d0:4a:35:23:fe:72:37: ca:05:7b:6c:0d:cc:c6:24:d1:37:b7:41:87:78:60:08:d7:61: 45:96:9e:65:fc:f2:c2:ba:da:44:33:ce:c3:77:48:60:8b:be: a1:b2:d7:98:15:31:b3:7b:ed:e7:c7:81:02:e0:8a:3d:cd:f5: 49:72:8d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdYwoF/zrZ1OUY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTk4ZTYyYWItODZkNC00NzQzLWFhYjQtNWE3ZTM3YWRhMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuMg5HsGNC47DS8r41eJlpWkPq47hY5ghxdj GpUGA+RN9p4amlodq1O+9tMRKjzbB5jo4yDZ73O/d5+7ZqJfDG9/hBOTizeDK1gd rDwnKM1FgUmbK/QAHU0450AdWniuIbBt+iwWnxQny+u+fH0CjO5iTW7SDchoUSOD PE/lHa+8Tt6CG6QhEPiQGZk6UBA05lZClMYA9DUcWNLSP88ZTnbt++TChq0Nhiqr B6M8sQk+QFfpaCmWjKwdjRqOVWCvq2U/Oqc85LhyOlRLdfAPqbj/XK7XAIgtapYZ 1yqC5gqpXx0LwV+oLMD/r6vOrG/wrgGRWcVQU3l2mKLxkp6kRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlCdSuCUFunbIEyvMRBpKS1OlytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjMxZTc1YzgtNmFiMC0z ZDNjLThmMDYtZGUxMGY1OTc2N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi4PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/KmQcwe2Uw1xi216QEvMdZEmAyoFKzfCYQLN8kaRMfh53HJ+sRRedN eH35WTP3WgoGMkv1jP4THfymqClvyLqYpLFqPYtFPhjO11T+Q9nORspd8CAO8/r+ Wwao52exZ/CFy12BkXWWn9FpY53mXCXqIaJZtLxhwCNMLBafpu8xEtZLushl7vu/ QcTWb4umCUEBsPnVVi28ZsllIootvHMnhYMFRmH/120knmwjDh4YW0n1n0PxDUrl miS0rybb0Eo1I/5yN8oFe2wNzMYk0Te3QYd4YAjXYUWWnmX88sK62kQzzsN3SGCL vqGy15gVMbN77efHgQLgij3N9UlyjVc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:21 2025 by rpki-client