$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa File: f3727dbf-6741-30ec-b903-76b94d09d5b9.roa (raw, json) Hash identifier: lnKFJqqMXuHEHfPZ/jAQXcSNnsgw4qfcLXgSLLR/8fM= Subject key identifier: DE:C7:26:1F:AB:18:37:71:60:66:2E:3C:69:5C:93:0E:78:C1:71:0A Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858486D904EF43545FB6652B4A680 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 53927 IP address blocks: 139.131.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4e:f4:35:45:fb:66:52:b4:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=e2282010-2e70-4611-8a0b-462b55861bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:f2:1b:f6:1f:48:7e:1f:17:f1:94:51:37: 09:d7:da:0e:52:9f:d8:58:4f:cc:8b:c1:4b:44:68: ec:ab:c0:2f:e6:92:d8:4f:bd:a2:84:4c:f9:0b:0e: ac:80:c8:69:0d:c5:41:ff:1d:1a:cc:14:10:ef:9d: 3e:c5:25:1c:d0:16:a5:93:15:9f:e5:21:55:66:15: 63:d1:a8:f1:40:9e:c9:07:d5:99:60:d7:2e:46:9e: 54:9c:d5:da:1b:3b:e6:9c:55:d8:8b:0c:1d:d3:76: 85:26:ef:6f:40:06:e4:f5:04:a1:3e:70:8e:2b:dc: 63:32:bf:3f:ec:04:f1:94:63:8a:88:a3:06:3b:32: c1:1a:32:d3:60:53:c0:de:5d:a6:e0:14:fe:f6:c9: a8:99:76:01:2c:5c:90:19:df:ea:e7:76:90:93:d8: a5:52:57:a0:37:ac:56:cd:77:67:dc:0f:56:a7:97: b7:db:56:7e:23:58:81:6a:6b:11:a4:18:50:c1:a7: c0:d4:8b:40:07:3e:86:2b:f4:9c:ce:9f:b9:2f:33: 83:3a:3e:1c:6c:b9:d7:11:4d:e8:b1:56:2d:85:e5: f2:39:73:ac:f3:59:5c:9b:35:6d:64:22:62:82:7a: 5a:0c:a9:db:f8:54:6b:00:5f:5b:bb:43:0b:8e:88: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C7:26:1F:AB:18:37:71:60:66:2E:3C:69:5C:93:0E:78:C1:71:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:19:84:9d:9b:ce:f9:56:8c:2e:96:84:a8:d2:1e:91:05:37: 6c:55:28:42:52:68:45:e4:68:b9:64:ae:96:18:5b:48:2a:b8: 38:2f:a0:a0:74:2a:0d:39:fd:64:49:54:49:88:47:03:6d:98: 89:e6:79:06:32:ac:46:b0:fc:fe:ac:71:16:2e:6b:6c:26:f9: 90:72:3a:86:6d:5a:0e:bd:d8:b3:2e:68:d3:f4:17:e4:07:35: 4b:8f:c3:63:31:bb:0c:d9:d6:56:a7:9a:19:c3:8a:83:81:40: a5:f6:06:bb:c0:98:1d:d2:68:f8:26:ba:6d:0b:a3:c5:b1:50: 53:ed:17:7c:3e:c3:eb:5d:23:a6:5a:47:e9:0a:8c:d8:37:75: 71:64:57:63:e7:93:aa:c6:61:a2:dd:cd:ed:b7:ab:3e:c2:06: 57:e4:a5:fe:2b:42:6d:f5:9b:e4:7c:20:12:44:1e:be:0a:fb: d2:81:00:e0:fa:2f:8c:e9:de:c5:83:bc:e5:6f:07:60:7a:ba: c8:13:6d:aa:59:f0:a5:48:8b:9b:1c:aa:a6:9e:f9:1e:96:0a: 11:22:d1:e4:87:92:1b:d1:b7:88:6b:b0:16:54:2f:a8:c0:0e: bb:d3:43:12:cb:9f:f9:84:22:21:56:a7:0c:b8:70:3a:06:33: 58:f1:b5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE70NUX7ZlK0poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTIyODIwMTAtMmU3MC00NjExLThhMGItNDYyYjU1ODYxYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwHyG/YfSH4fF/GUUTcJ19oOUp/YWE/Mi8FL RGjsq8Av5pLYT72ihEz5Cw6sgMhpDcVB/x0azBQQ750+xSUc0BalkxWf5SFVZhVj 0ajxQJ7JB9WZYNcuRp5UnNXaGzvmnFXYiwwd03aFJu9vQAbk9QShPnCOK9xjMr8/ 7ATxlGOKiKMGOzLBGjLTYFPA3l2m4BT+9smomXYBLFyQGd/q53aQk9ilUlegN6xW zXdn3A9Wp5e321Z+I1iBamsRpBhQwafA1ItABz6GK/Sczp+5LzODOj4cbLnXEU3o sVYtheXyOXOs81lcmzVtZCJignpaDKnb+FRrAF9bu0MLjoiMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7HJh+rGDdxYGYuPGlckw54wXEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjM3MjdkYmYtNjc0MS0z MGVjLWI5MDMtNzZiOTRkMDlkNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYZhJ2bzvlWjC6WhKjSHpEFN2xVKEJSaEXkaLlkrpYYW0gquDgvoKB0 Kg05/WRJVEmIRwNtmInmeQYyrEaw/P6scRYua2wm+ZByOoZtWg692LMuaNP0F+QH NUuPw2MxuwzZ1lanmhnDioOBQKX2BrvAmB3SaPgmum0Lo8WxUFPtF3w+w+tdI6Za R+kKjNg3dXFkV2Pnk6rGYaLdze23qz7CBlfkpf4rQm31m+R8IBJEHr4K+9KBAOD6 L4zp3sWDvOVvB2B6usgTbapZ8KVIi5scqqae+R6WChEi0eSHkhvRt4hrsBZUL6jA DrvTQxLLn/mEIiFWpwy4cDoGM1jxtRs= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:33 2025 by rpki-client