$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa File: 3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa (raw, json) Hash identifier: BSJiZBEw9tbZbEc9ZDVFY051IdzHuC0yFxdXKNgFZN0= Subject key identifier: FE:15:65:1D:33:8C:29:C2:EE:82:3B:1E:AA:EF:0E:FB:27:16:49:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B67008CA9AC33486AF780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 139.144.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:67:00:8c:a9:ac:33:48:6a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f0f610be-51a3-4ca8-9ce6-e39a0fb9b97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:54:f6:3e:11:6d:74:6c:d7:f0:a1:e2:f0: 7c:5f:c6:ee:d4:6c:7a:02:ec:ae:d2:25:71:e7:c1: da:09:74:2e:af:4e:98:ae:8a:bc:6a:4c:f1:cf:f9: 4a:41:da:81:58:04:28:64:76:ff:ac:36:0b:30:c7: 26:48:20:07:33:c7:94:6e:66:98:18:f4:f3:b1:4f: da:f9:38:b9:85:7c:66:a8:29:c5:47:e3:c9:02:33: 1f:97:92:41:b3:81:22:a0:45:e2:93:aa:ee:0b:6e: df:2a:f7:a0:c2:06:f4:5d:d9:a3:5c:aa:51:ff:c1: 74:3b:7f:2e:3d:c8:c9:04:fe:8c:eb:79:03:66:9f: bf:0c:a2:6c:58:dc:f1:46:a3:bd:94:fd:3e:ea:6c: 42:0d:9c:47:5f:1e:ba:83:c4:e8:87:bb:12:6c:6c: 6d:b0:91:13:68:74:3f:bb:c3:58:b2:f2:2e:21:1c: 69:f0:d0:c9:fe:0b:e3:62:3e:18:22:e7:60:93:ce: 15:40:8e:2b:3b:5a:cb:56:7e:b8:50:96:73:cd:34: 49:62:40:da:17:0f:5a:69:37:d0:5c:d8:12:76:cd: fd:1d:39:07:2b:5f:a4:2f:8c:77:61:7a:03:0c:c3: df:55:ee:ed:c2:a5:01:3b:54:6e:1b:32:92:66:dd: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:15:65:1D:33:8C:29:C2:EE:82:3B:1E:AA:EF:0E:FB:27:16:49:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:57:a5:d8:43:ff:e4:a6:c1:67:d5:3b:c5:66:a0:09:03:f2: be:9c:49:64:f1:1d:ea:d8:42:2f:8f:3d:28:ac:77:52:be:c2: cc:15:c2:81:7f:f4:f9:78:93:aa:44:9a:44:86:c0:dc:b7:46: 4d:91:bd:ff:9b:98:05:00:18:55:d4:a4:5c:89:af:56:49:2c: 3b:2a:f5:75:b1:bb:2a:93:4c:f0:df:2d:0d:8b:86:c8:1c:7e: e5:ba:4b:64:84:d5:b4:fd:ce:8f:d2:21:10:ec:89:5b:92:20: 47:85:8a:1a:16:4e:0d:23:5f:9e:ce:f6:2a:ec:88:c8:25:cc: 3d:2e:35:58:dc:34:d9:33:df:51:5f:4b:aa:d1:0b:b5:b4:5a: cf:25:21:a2:0b:75:a8:f2:1e:bc:dd:4a:c7:d1:6c:81:e7:98: 94:4b:b2:96:45:b6:4f:6d:b9:db:59:d8:5f:7e:e0:c8:6c:d7: b1:32:37:b2:37:c3:31:e3:ad:52:32:35:7c:5b:5a:98:74:ac: 28:50:3a:34:dd:70:f8:49:65:a6:ca:97:07:a6:fb:ac:99:31: 27:cc:6f:67:84:4c:26:d8:06:ca:6c:12:cb:42:17:d5:69:1e: 76:78:08:53:81:5a:39:2b:b5:6f:5b:af:ce:75:42:dd:f4:17: 86:2f:60:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2cAjKmsM0hq94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjBmNjEwYmUtNTFhMy00Y2E4LTljZTYtZTM5YTBmYjliOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiStU9j4RbXRs1/Ch4vB8X8bu1Gx6Auyu0iVx 58HaCXQur06Yroq8akzxz/lKQdqBWAQoZHb/rDYLMMcmSCAHM8eUbmaYGPTzsU/a +Ti5hXxmqCnFR+PJAjMfl5JBs4EioEXik6ruC27fKvegwgb0XdmjXKpR/8F0O38u PcjJBP6M63kDZp+/DKJsWNzxRqO9lP0+6mxCDZxHXx66g8Toh7sSbGxtsJETaHQ/ u8NYsvIuIRxp8NDJ/gvjYj4YIudgk84VQI4rO1rLVn64UJZzzTRJYkDaFw9aaTfQ XNgSds39HTkHK1+kL4x3YXoDDMPfVe7twqUBO1RuGzKSZt201wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4VZR0zjCnC7oI7HqrvDvsnFknDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JjMTMzYjctMTU3Yy0z ZThjLThkMDEtYjU4YWJiM2M2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1XpdhD/+SmwWfVO8VmoAkD8r6cSWTxHerYQi+PPSisd1K+wswVwoF/ 9Pl4k6pEmkSGwNy3Rk2Rvf+bmAUAGFXUpFyJr1ZJLDsq9XWxuyqTTPDfLQ2Lhsgc fuW6S2SE1bT9zo/SIRDsiVuSIEeFihoWTg0jX57O9irsiMglzD0uNVjcNNkz31Ff S6rRC7W0Ws8lIaILdajyHrzdSsfRbIHnmJRLspZFtk9tudtZ2F9+4Mhs17EyN7I3 wzHjrVIyNXxbWph0rChQOjTdcPhJZabKlwem+6yZMSfMb2eETCbYBspsEstCF9Vp HnZ4CFOBWjkrtW9br851Qt30F4YvYAk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:54 2025 by rpki-client