$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa File: f3727dbf-6741-30ec-b903-76b94d09d5b9.roa (raw, json) Hash identifier: qDZKaRSa5BF7xWikmWp9h39/yRm2FyXoFNntlkfm3nQ= Subject key identifier: 8E:6F:81:68:4C:45:37:C3:75:F9:5B:50:7F:14:61:AB:0E:A5:7D:E8 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858494CC941E697BB0DF8C4860A40 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 53927 IP address blocks: 139.131.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:e6:97:bb:0d:f8:c4:86:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=ae396305-3ed8-4a9c-ac03-d1adaee37ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:89:36:32:86:1f:63:fa:2c:bf:82:a9:df: 55:48:4b:d4:dc:db:ba:92:78:29:bd:c8:28:ba:2f: 28:53:95:d9:35:e6:c7:b5:b2:91:0f:bd:a8:21:4f: 48:9b:6c:0b:be:48:31:d7:79:a2:10:e3:4b:f4:84: 88:c3:0b:cd:43:ac:44:84:53:7c:47:3b:e8:6b:80: ea:ba:a8:6c:03:fd:e5:b2:8f:e8:59:f8:d4:8a:5e: a5:4b:12:86:77:5e:c1:25:6f:a6:a6:da:c4:02:e1: 3b:bb:c5:1e:86:a6:a2:47:78:41:0d:9b:99:d0:08: 9d:8c:17:b5:19:e5:20:9e:2a:0d:a8:51:b8:97:78: 06:63:57:47:e0:88:16:8c:a0:db:25:f7:3f:ba:52: 44:58:c2:6c:77:69:ac:5a:cb:fd:6d:63:31:8f:a7: 38:9a:84:08:64:02:30:ba:06:e2:01:b9:42:b4:b0: 5e:eb:e2:7d:2b:fa:30:2e:60:a1:9a:2e:f8:3b:0e: 3f:9f:4d:5a:2b:f9:3c:7a:7a:f1:ed:65:96:5e:1a: 16:4f:ee:d9:1e:f7:81:84:8f:f0:d1:f8:2c:5d:15: 84:33:12:d7:bd:a7:c4:b2:39:59:a7:e1:58:a4:5e: ef:7e:38:18:42:eb:0c:f9:fc:29:83:dc:a6:c4:68: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:81:68:4C:45:37:C3:75:F9:5B:50:7F:14:61:AB:0E:A5:7D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f3727dbf-6741-30ec-b903-76b94d09d5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:30:75:5e:f4:7b:bd:83:c7:fe:ad:4d:8a:e4:57:ca:00: 71:56:ce:3e:44:fb:fe:a9:37:af:bd:20:73:b2:41:68:e7:3d: 0f:55:f7:aa:34:4a:a8:99:59:20:0f:66:ea:43:07:2f:78:21: ed:48:3d:ed:d6:5a:6c:75:19:bf:21:35:08:2c:1c:f9:fc:b4: d7:01:68:61:26:bc:b5:5c:4a:b7:41:d6:b4:36:9c:a7:03:d6: c5:19:55:3a:b7:c5:b5:6f:fa:ec:48:64:de:55:86:3d:93:4f: f9:13:75:c9:75:ba:cc:e8:c8:bb:a2:c5:2f:b1:b7:5d:80:fd: c3:14:82:d9:8e:92:2e:2c:63:62:15:97:5e:ff:40:9e:1b:d2: 75:82:3b:3f:dd:fd:5c:92:f1:3b:c8:9c:94:83:25:fc:ce:fa: 7e:14:42:5a:13:ee:ef:2d:6b:c3:b6:17:e7:ea:f3:5a:5e:e3: db:a5:c1:20:6a:90:07:b8:e2:ba:34:45:14:4b:cc:ae:3a:50: bc:21:76:12:01:7a:21:42:9d:f3:3a:84:a1:fc:a5:1d:ec:d2: f2:c7:f9:e1:2e:d9:bd:e1:90:e4:90:b2:fd:e9:61:7c:9f:77: 69:cd:10:ac:6f:4e:b3:13:12:ac:03:33:39:46:65:2e:15:e8: 77:11:d1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUHml7sN+MSGCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWUzOTYzMDUtM2VkOC00YTljLWFjMDMtZDFhZGFlZTM3ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg+JNjKGH2P6LL+Cqd9VSEvU3Nu6kngpvcgo ui8oU5XZNebHtbKRD72oIU9Im2wLvkgx13miEONL9ISIwwvNQ6xEhFN8Rzvoa4Dq uqhsA/3lso/oWfjUil6lSxKGd17BJW+mptrEAuE7u8UehqaiR3hBDZuZ0AidjBe1 GeUgnioNqFG4l3gGY1dH4IgWjKDbJfc/ulJEWMJsd2msWsv9bWMxj6c4moQIZAIw ugbiAblCtLBe6+J9K/owLmChmi74Ow4/n01aK/k8enrx7WWWXhoWT+7ZHveBhI/w 0fgsXRWEMxLXvafEsjlZp+FYpF7vfjgYQusM+fwpg9ymxGgvAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5vgWhMRTfDdflbUH8UYasOpX3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjM3MjdkYmYtNjc0MS0z MGVjLWI5MDMtNzZiOTRkMDlkNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ4MHVe9Hu9g8f+rU2K5FfKAHFWzj5E+/6pN6+9IHOyQWjnPQ9V96o0 SqiZWSAPZupDBy94Ie1IPe3WWmx1Gb8hNQgsHPn8tNcBaGEmvLVcSrdB1rQ2nKcD 1sUZVTq3xbVv+uxIZN5Vhj2TT/kTdcl1uszoyLuixS+xt12A/cMUgtmOki4sY2IV l17/QJ4b0nWCOz/d/VyS8TvInJSDJfzO+n4UQloT7u8ta8O2F+fq81pe49ulwSBq kAe44ro0RRRLzK46ULwhdhIBeiFCnfM6hKH8pR3s0vLH+eEu2b3hkOSQsv3pYXyf d2nNEKxvTrMTEqwDMzlGZS4V6HcR0Xk= -----END CERTIFICATE-----Generated at Sat Apr 12 00:48:46 2025 by rpki-client