$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/b99947be-7e5a-35fa-9bd3-c515c73e9b0c.roa File: b99947be-7e5a-35fa-9bd3-c515c73e9b0c.roa (raw, json) Hash identifier: KVYGxHxgfqvfFugHT3SrIsmdzk7h7gKpTzsuavlTPZo= Subject key identifier: 3B:AC:51:41:D8:29:61:EE:3C:4C:18:06:48:48:A1:1D:27:73:D4:B7 Certificate issuer: /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17 Certificate serial: 010D0C9F43285848DEF4FEF112A695554B58A380 Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/b99947be-7e5a-35fa-9bd3-c515c73e9b0c.roa Signing time: Thu 13 Feb 2025 16:49:59 +0000 ROA not before: Thu 13 Feb 2025 16:49:59 +0000 ROA not after: Wed 14 May 2025 15:49:59 +0000 asID: 33561 IP address blocks: 139.60.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:f4:fe:f1:12:a6:95:55:4b:58:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17 Validity Not Before: Feb 13 16:49:59 2025 GMT Not After : May 14 15:49:59 2025 GMT Subject: CN=5725e2c7-ac89-4614-9749-7f8124fb505b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:13:9c:90:66:95:5a:a4:d5:2b:31:ae:9e: 0e:c4:cd:a8:e4:e4:2e:35:9e:9c:20:71:65:16:96: 67:68:b9:ab:4c:6b:4d:66:e4:b6:fb:80:97:3a:58: b7:d3:71:cf:37:72:32:7b:2e:25:75:b8:64:7c:1d: 53:fb:6b:4d:3a:cd:e7:aa:d5:60:d5:03:fa:04:3e: e7:ea:6d:a2:1d:0b:b1:c8:32:98:0b:b5:c0:77:80: f0:ab:5d:5f:1c:ba:3d:e3:b4:68:06:01:64:4c:c1: e5:a1:44:ab:7f:33:ea:d0:01:43:56:f2:b5:ce:cc: 89:1a:eb:93:ae:dd:c7:78:dc:d6:e6:1e:bd:7a:ab: 0e:f4:b6:03:7f:ee:5e:81:e3:dd:73:a0:3f:f2:00: 1d:be:d2:4d:74:7b:b2:0a:bc:b7:2e:72:98:55:e0: 58:26:ca:4c:5b:3d:b0:24:36:94:be:de:9f:24:19: 45:58:73:6d:f5:70:ca:f2:95:c4:2d:22:70:0c:f9: f2:7b:45:e3:3f:21:9a:1c:28:86:52:00:94:0c:98: 71:27:0e:b2:8b:6d:98:66:f7:73:1b:4d:43:4b:d1: be:1a:a6:47:79:29:e8:7a:21:1a:da:14:e0:2b:4d: 93:d0:2f:25:30:92:3b:c1:33:71:28:66:88:b5:4e: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:51:41:D8:29:61:EE:3C:4C:18:06:48:48:A1:1D:27:73:D4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/b99947be-7e5a-35fa-9bd3-c515c73e9b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl X509v3 Authority Key Identifier: keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer sbgp-ipAddrBlock: critical IPv4: 139.60.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d9:72:29:c4:08:db:40:32:aa:65:e7:7c:8b:e0:db:ce:84: 3b:04:bc:47:4f:b9:49:e5:5d:01:1d:32:5b:4b:bf:cc:b8:19: e8:fc:17:89:6e:10:f9:49:c0:cd:92:77:71:59:fa:ae:a9:d8: a9:b4:d2:d1:82:48:cf:25:83:4a:14:4c:52:f6:75:7c:25:6d: 51:11:63:b7:a5:db:60:20:82:49:d2:9d:5c:96:8c:d4:b7:30: a9:e0:ae:1a:4c:38:c3:1f:5a:f3:d8:e0:cf:49:d1:08:bd:85: c8:b3:0a:b3:a5:16:69:11:a3:1e:ae:86:b2:43:1b:ea:f5:61: 6b:a7:8a:52:2d:33:cd:3b:59:cb:44:61:a3:06:f2:e8:77:c5: f6:d7:b1:55:55:24:c8:ff:1c:61:88:20:b1:a0:10:bd:cd:b6: 3b:63:be:a7:e7:bc:bf:fa:e5:94:18:b0:a5:3c:b3:44:a9:b2: ea:b5:7c:11:63:13:49:8d:72:a6:6b:bf:af:29:6c:51:68:5d: 88:03:e1:8e:ca:55:be:4b:79:a9:d1:bb:3b:22:37:f4:dd:6d: d3:9f:b0:75:6c:52:60:e5:c0:43:78:51:7a:6f:fc:e2:d4:08: e1:21:42:c6:c8:3d:07:d6:9c:3e:31:0d:2d:ed:70:35:a5:cc: 45:a8:e6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEje9P7xEqaVVUtYo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFlZjRiMzgtYjVkYy00YjM3LTkwYjUtZWI5ZTI2MmJm YTE3MB4XDTI1MDIxMzE2NDk1OVoXDTI1MDUxNDE1NDk1OVowLzEtMCsGA1UEAxMk NTcyNWUyYzctYWM4OS00NjE0LTk3NDktN2Y4MTI0ZmI1MDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wTnJBmlVqk1Ssxrp4OxM2o5OQuNZ6cIHFl FpZnaLmrTGtNZuS2+4CXOli303HPN3Iyey4ldbhkfB1T+2tNOs3nqtVg1QP6BD7n 6m2iHQuxyDKYC7XAd4Dwq11fHLo947RoBgFkTMHloUSrfzPq0AFDVvK1zsyJGuuT rt3HeNzW5h69eqsO9LYDf+5egePdc6A/8gAdvtJNdHuyCry3LnKYVeBYJspMWz2w JDaUvt6fJBlFWHNt9XDK8pXELSJwDPnye0XjPyGaHCiGUgCUDJhxJw6yi22YZvdz G01DS9G+GqZHeSnoeiEa2hTgK02T0C8lMJI7wTNxKGaItU4l8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDusUUHYKWHuPEwYBkhIoR0nc9S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMWVm NGIzOC1iNWRjLTRiMzctOTBiNS1lYjllMjYyYmZhMTcvYjk5OTQ3YmUtN2U1YS0z NWZhLTliZDMtYzUxNWM3M2U5YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDFlZjRiMzgtYjVkYy00YjM3LTkw YjUtZWI5ZTI2MmJmYTE3L2QxZWY0YjM4LWI1ZGMtNGIzNy05MGI1LWViOWUyNjJi ZmExNy5jcmwwHwYDVR0jBBgwFoAU0Y4/hEmYgtckosg/JONjCxYxYpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMWVmNGIzOC1iNWRjLTRiMzctOTBiNS1lYjll MjYyYmZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHZcinECNtAMqpl53yL4NvOhDsEvEdPuUnlXQEdMltLv8y4Gej8F4lu EPlJwM2Sd3FZ+q6p2Km00tGCSM8lg0oUTFL2dXwlbVERY7el22AggknSnVyWjNS3 MKngrhpMOMMfWvPY4M9J0Qi9hcizCrOlFmkRox6uhrJDG+r1YWunilItM807WctE YaMG8uh3xfbXsVVVJMj/HGGIILGgEL3NtjtjvqfnvL/65ZQYsKU8s0Spsuq1fBFj E0mNcqZrv68pbFFoXYgD4Y7KVb5LeanRuzsiN/TdbdOfsHVsUmDlwEN4UXpv/OLU COEhQsbIPQfWnD4xDS3tcDWlzEWo5l8= -----END CERTIFICATE-----Generated at Sat Apr 12 11:20:10 2025 by rpki-client