$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa File: f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa (raw, json) Hash identifier: Iq/eNGSoSAkg9XE8KtkKZlaITHtEj2kfpgepzr6J2Ac= Subject key identifier: 52:D4:DF:E7:0B:49:4A:23:47:89:EA:3E:1C:AD:4D:90:68:5C:7F:F4 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858492CB20FDFE3BFDB76DC8D1C20 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 53297 IP address blocks: 139.131.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:0f:df:e3:bf:db:76:dc:8d:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=9fa0acb7-c3b0-4b59-a9b9-6a7298fbb725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:9d:d9:ce:68:cc:76:09:5e:98:df:43:17: 47:df:88:e6:ed:f1:c0:7f:c2:aa:04:09:3a:11:f2: 80:78:da:a6:ab:24:1a:0f:08:20:cf:1a:49:40:4a: b7:5e:98:51:a1:2b:99:34:d9:5e:c3:dd:67:aa:bc: 93:cc:5e:68:79:bf:0e:9e:f5:42:71:d7:65:df:85: bc:77:c2:29:b3:55:a1:22:17:0f:ee:07:93:0f:4d: 3c:a0:02:05:92:1d:93:5b:99:48:58:3d:de:b9:40: b9:60:f1:b8:8e:94:16:7e:b8:93:92:e1:9e:8d:9b: fc:c7:e2:08:ef:73:fa:35:e1:21:d8:b9:2d:57:b7: 1a:5f:4e:8b:69:80:81:9b:bb:6c:10:3e:97:26:81: b6:f0:2e:2f:5b:30:37:f6:93:a5:3e:92:99:f1:04: 1b:6f:8d:2e:97:96:e3:99:76:ef:25:8d:a6:5c:31: 9f:ec:09:04:64:c3:6e:9f:ed:36:7e:42:b6:9d:1b: e5:73:7e:e7:b4:af:a0:15:6e:ae:2d:57:bf:64:c3: f1:10:bb:2c:3d:85:2f:40:2d:10:8c:c8:6d:56:f9: d1:f7:ec:71:5f:9e:69:40:3e:62:c6:47:51:18:3b: 04:c2:71:17:b7:ca:f8:c7:1a:4b:e7:a6:c0:ee:9b: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D4:DF:E7:0B:49:4A:23:47:89:EA:3E:1C:AD:4D:90:68:5C:7F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f31e75c8-6ab0-3d3c-8f06-de10f59767b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a2:a7:3d:42:fa:8c:43:21:a8:2a:d4:76:5b:d8:09:6c:1e: c8:b4:40:de:5a:f9:a2:a4:fb:31:97:5e:d4:68:20:5a:d1:fb: b7:a5:4f:a9:ea:a4:af:47:45:99:37:e9:80:02:df:be:a2:f7: 2f:a2:d0:b2:f2:c7:81:b7:14:25:d0:2a:13:99:ef:12:c0:12: f2:1b:eb:57:1a:c5:b0:7a:9a:ac:a9:e2:e7:34:cc:d8:66:82: e3:78:16:a8:08:77:df:0d:82:87:9d:60:5c:11:2d:4a:b0:a0: c5:83:fa:5b:b6:d2:e4:69:4e:66:92:d1:99:b9:cb:45:21:50: 90:3a:55:76:8c:89:5e:16:2d:c1:5b:62:99:2b:e5:39:1e:f6: 29:9d:c3:36:86:a0:05:69:b9:78:ab:f9:7b:85:79:4b:c3:b4: d4:a1:55:8f:d6:3b:9c:1d:c1:d2:49:84:2f:89:0c:75:4d:84: 7a:bd:15:95:9c:aa:5c:df:f7:ea:dd:54:19:d2:df:82:29:13: 8e:6d:bc:2f:5e:65:2e:ef:ce:50:ef:54:fc:8c:1f:fc:d3:7f: aa:7e:9c:fe:09:4f:06:6f:de:9c:74:9b:fd:72:c7:ad:e0:d7: 28:1d:af:43:e3:76:dd:0f:28:c7:19:12:48:0a:23:12:88:90: 34:b6:fc:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssg/f47/bdtyNHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWZhMGFjYjctYzNiMC00YjU5LWE5YjktNmE3Mjk4ZmJiNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZid2c5ozHYJXpjfQxdH34jm7fHAf8KqBAk6 EfKAeNqmqyQaDwggzxpJQEq3XphRoSuZNNlew91nqryTzF5oeb8OnvVCcddl34W8 d8Ips1WhIhcP7geTD008oAIFkh2TW5lIWD3euUC5YPG4jpQWfriTkuGejZv8x+II 73P6NeEh2LktV7caX06LaYCBm7tsED6XJoG28C4vWzA39pOlPpKZ8QQbb40ul5bj mXbvJY2mXDGf7AkEZMNun+02fkK2nRvlc37ntK+gFW6uLVe/ZMPxELssPYUvQC0Q jMhtVvnR9+xxX55pQD5ixkdRGDsEwnEXt8r4xxpL56bA7psJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLU3+cLSUojR4nqPhytTZBoXH/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjMxZTc1YzgtNmFiMC0z ZDNjLThmMDYtZGUxMGY1OTc2N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi4PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaipz1C+oxDIagq1HZb2AlsHsi0QN5a+aKk+zGXXtRoIFrR+7elT6nq pK9HRZk36YAC376i9y+i0LLyx4G3FCXQKhOZ7xLAEvIb61caxbB6mqyp4uc0zNhm guN4FqgId98NgoedYFwRLUqwoMWD+lu20uRpTmaS0Zm5y0UhUJA6VXaMiV4WLcFb Ypkr5Tke9imdwzaGoAVpuXir+XuFeUvDtNShVY/WO5wdwdJJhC+JDHVNhHq9FZWc qlzf9+rdVBnS34IpE45tvC9eZS7vzlDvVPyMH/zTf6p+nP4JTwZv3px0m/1yx63g 1ygdr0Pjdt0PKMcZEkgKIxKIkDS2/MY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:56 2025 by rpki-client