$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa File: 6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa (raw, json) Hash identifier: HX8SdhMFO4e5Pb6WSvjUj2btSHrEVbZrqwy8vKm7vz4= Subject key identifier: EA:66:F7:08:68:EC:F8:C9:82:29:27:67:F6:72:AF:03:1D:FC:1C:F7 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F432858489770872ED5CEE6A3DB238F80 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:87:2e:d5:ce:e6:a3:db:23:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=e245c8c5-579d-44db-ac71-aaa0fdbe8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:11:53:12:82:9d:4b:45:2e:3e:64:6e:86: 18:f5:f9:dc:12:b7:2f:c6:39:da:56:9a:98:93:b0: c8:69:35:17:3c:5d:24:4f:19:80:7d:9d:0a:75:eb: ee:15:6f:7a:60:b6:df:82:5c:80:1d:10:cf:36:5f: bb:56:3e:9d:7f:9c:90:67:fc:14:32:4d:f7:59:f9: 5c:3e:82:10:72:a5:5f:cc:c7:85:eb:36:b4:bf:ec: 73:c4:71:22:15:44:97:fc:ca:13:7c:19:69:8a:27: 40:15:6e:79:fd:2e:63:ea:7c:ea:38:ea:57:ef:85: dd:78:0b:96:6a:ff:e2:c6:56:e4:aa:94:55:fa:b8: 08:e7:44:ae:c1:f7:c9:90:18:25:ff:d8:2c:76:a6: 90:4d:d2:a1:fe:ee:b1:96:fa:99:18:e0:2b:17:67: c9:73:c0:e9:b4:8b:84:9c:92:f5:1b:fa:a1:26:59: 77:21:bf:95:be:47:e9:07:bd:8a:ce:20:9f:f9:a2: 54:a5:07:80:ba:ce:02:dd:6d:c4:08:d2:7f:66:76: 62:50:ca:e8:c4:ac:91:ac:74:04:09:11:df:c1:73: c4:58:5e:dd:7c:5d:2b:02:5c:1e:0a:ee:dd:97:08: 75:f3:1c:b6:89:ca:22:0c:6f:23:08:f1:c7:a4:68: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:66:F7:08:68:EC:F8:C9:82:29:27:67:F6:72:AF:03:1D:FC:1C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:52:c3:1e:a1:f3:ae:0f:e3:81:e1:bf:f8:c6:e4:b2:90:27: 1f:1d:b8:0e:ac:51:de:6a:fa:f7:73:96:a0:4a:1f:74:7a:aa: bb:88:35:52:4a:90:40:d5:2b:54:04:c9:5d:99:05:fb:b2:9f: 1a:3c:f6:c7:05:9b:1a:43:69:6e:0f:e3:52:88:20:1e:e8:aa: 8f:ed:5e:c3:56:c1:29:e5:9d:54:95:2a:ea:c7:ae:70:7b:f0: ae:5c:d5:1c:ef:73:8b:a4:08:7f:66:32:24:15:6e:fa:21:9d: 09:38:de:74:f4:53:3e:3c:d0:65:0f:3e:19:9f:3d:61:a0:f9: 34:89:cf:8c:9b:ff:d1:ca:23:c5:b5:12:83:64:50:a3:25:04: f3:e6:e9:28:f8:1b:d4:96:6b:b4:9c:a9:77:a0:e0:86:88:56: 5d:c3:7f:df:4e:05:70:86:fa:c9:62:82:c3:02:71:bf:38:e6: 54:63:6a:7a:a8:35:e2:59:53:56:dc:4e:15:58:1c:30:9c:84: 28:7f:47:48:64:2a:a7:e4:ed:08:a7:9e:ca:7c:b8:46:31:8c: 75:b6:2d:14:fd:07:b6:8b:64:98:10:c3:4f:04:ff:71:9c:f1: 4a:06:89:36:b8:f8:de:1c:3a:e2:72:5e:42:86:e2:6c:2c:01: 6d:67:4f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcIcu1c7mo9sjj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTI0NWM4YzUtNTc5ZC00NGRiLWFjNzEtYWFhMGZkYmU4ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtIRUxKCnUtFLj5kboYY9fncErcvxjnaVpqY k7DIaTUXPF0kTxmAfZ0KdevuFW96YLbfglyAHRDPNl+7Vj6df5yQZ/wUMk33Wflc PoIQcqVfzMeF6za0v+xzxHEiFUSX/MoTfBlpiidAFW55/S5j6nzqOOpX74XdeAuW av/ixlbkqpRV+rgI50SuwffJkBgl/9gsdqaQTdKh/u6xlvqZGOArF2fJc8DptIuE nJL1G/qhJll3Ib+VvkfpB72KziCf+aJUpQeAus4C3W3ECNJ/ZnZiUMroxKyRrHQE CRHfwXPEWF7dfF0rAlweCu7dlwh18xy2icoiDG8jCPHHpGgIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpm9who7PjJgiknZ/ZyrwMd/Bz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvNmE5ZmYyMDQtYjMxZC0z N2Y1LWIyN2UtZDZhYzIwMTBmZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFSwx6h864P44Hhv/jG5LKQJx8duA6sUd5q+vdzlqBKH3R6qruINVJK kEDVK1QEyV2ZBfuynxo89scFmxpDaW4P41KIIB7oqo/tXsNWwSnlnVSVKurHrnB7 8K5c1Rzvc4ukCH9mMiQVbvohnQk43nT0Uz480GUPPhmfPWGg+TSJz4yb/9HKI8W1 EoNkUKMlBPPm6Sj4G9SWa7ScqXeg4IaIVl3Df99OBXCG+sligsMCcb845lRjanqo NeJZU1bcThVYHDCchCh/R0hkKqfk7Qinnsp8uEYxjHW2LRT9B7aLZJgQw08E/3Gc 8UoGiTa4+N4cOuJyXkKG4mwsAW1nT0c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:28 2025 by rpki-client