$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e249697b-3123-3e4e-afdc-3d070bf3f6d4.roa File: e249697b-3123-3e4e-afdc-3d070bf3f6d4.roa (raw, json) Hash identifier: I1rOIq1pNb6ZNRc5Q13DACdaMmONxzreC5MFYH/xwT8= Subject key identifier: 1C:6A:2D:D5:C6:78:AA:AF:C5:29:BC:A4:66:89:E0:EB:23:F6:7C:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489BA0AF4454B8EB8E04868740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e249697b-3123-3e4e-afdc-3d070bf3f6d4.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 63949 IP address blocks: 139.144.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:af:44:54:b8:eb:8e:04:86:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=ae5f5c11-a973-42f6-8b6d-e58d320453bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:09:d4:df:bc:4d:f0:fe:14:47:eb:5e:3a: d0:03:54:93:54:18:8c:2b:c1:60:f5:be:2b:b2:f9: b2:bb:0c:7c:8e:d7:cf:02:81:07:3d:04:ee:a9:51: 69:aa:aa:a7:02:6d:2e:8e:57:96:c9:76:a5:40:9e: cd:f0:7f:6b:f5:35:22:f2:c5:d3:97:52:ef:70:be: cd:c2:c6:70:35:02:19:9c:09:58:74:2d:81:e8:12: 93:03:1a:dd:fd:3d:af:ea:d0:93:32:5d:b2:0d:fb: 38:9a:d5:44:f0:86:1c:66:57:fa:41:1c:f6:f2:ee: 9d:10:1f:0e:4f:c0:9c:f6:18:04:6c:88:a7:ea:dd: a8:9f:f6:77:cb:a9:55:42:1f:76:f6:15:54:7f:ea: c6:11:e7:25:e2:bb:52:03:76:78:b7:94:f7:06:46: 28:3d:63:28:8c:0e:cf:a6:fc:41:bf:78:71:ea:d9: 82:9c:ac:4c:40:fc:a8:34:ce:cd:75:ea:71:81:92: 60:68:1d:06:ed:61:cb:ac:64:0c:dd:2e:b5:69:01: dd:0d:0f:0c:25:03:00:eb:a4:91:75:cf:3c:91:63: b0:41:d0:91:db:80:ed:9e:04:93:c5:5e:ca:b8:c1: a0:31:b8:9a:ab:d7:9d:9a:5a:10:0a:ee:02:a9:dc: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:2D:D5:C6:78:AA:AF:C5:29:BC:A4:66:89:E0:EB:23:F6:7C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e249697b-3123-3e4e-afdc-3d070bf3f6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f1:e0:37:14:3f:10:5f:8c:a8:92:d9:f4:ca:2a:da:eb:e8: b5:64:33:53:ec:d1:72:8d:fd:13:12:0c:68:05:82:1f:78:89: e6:63:72:44:2a:3e:72:0c:ee:0c:3e:42:56:ed:32:d6:f6:95: 7c:a0:4b:b0:0a:06:b1:bb:29:63:f7:fa:ca:cb:b6:c6:25:f1: 23:da:8e:a0:e0:dd:e8:98:f7:41:84:61:61:2a:4d:9d:f3:e3: 0e:8e:b0:b4:b1:35:b3:f9:b4:74:12:24:8f:83:1a:1a:24:9c: 3e:c2:44:2d:61:df:58:a1:33:92:84:04:78:2e:46:69:24:27: 22:87:f0:4d:45:2b:3b:7c:7e:60:67:19:00:99:d1:cc:d0:4d: 68:6e:f0:ca:fd:29:03:73:1e:b6:73:64:03:5e:cb:db:d0:7a: d8:5d:a2:9d:fb:c8:6d:a9:bc:a0:95:c9:61:b0:a9:75:ab:11: 50:14:fa:cd:df:33:f2:91:18:e6:bf:a3:0f:ae:1f:7d:bb:11: 12:53:48:60:c1:d9:68:ae:47:11:57:e1:26:4d:e3:5e:ec:2d: 1c:fe:69:70:57:1b:49:47:0a:4b:65:e4:59:e9:1f:96:66:9b: cc:b0:20:9a:54:61:c7:b8:2e:14:07:58:bf:b1:96:13:cd:07: f3:e2:a4:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK9EVLjrjgSGh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk YWU1ZjVjMTEtYTk3My00MmY2LThiNmQtZTU4ZDMyMDQ1M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJcJ1N+8TfD+FEfrXjrQA1STVBiMK8Fg9b4r svmyuwx8jtfPAoEHPQTuqVFpqqqnAm0ujleWyXalQJ7N8H9r9TUi8sXTl1LvcL7N wsZwNQIZnAlYdC2B6BKTAxrd/T2v6tCTMl2yDfs4mtVE8IYcZlf6QRz28u6dEB8O T8Cc9hgEbIin6t2on/Z3y6lVQh929hVUf+rGEecl4rtSA3Z4t5T3BkYoPWMojA7P pvxBv3hx6tmCnKxMQPyoNM7NdepxgZJgaB0G7WHLrGQM3S61aQHdDQ8MJQMA66SR dc88kWOwQdCR24DtngSTxV7KuMGgMbiaq9edmloQCu4CqdyPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxqLdXGeKqvxSm8pGaJ4Osj9nx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI0OTY5N2ItMzEyMy0z ZTRlLWFmZGMtM2QwNzBiZjNmNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbx4DcUPxBfjKiS2fTKKtrr6LVkM1Ps0XKN/RMSDGgFgh94ieZjckQq PnIM7gw+QlbtMtb2lXygS7AKBrG7KWP3+srLtsYl8SPajqDg3eiY90GEYWEqTZ3z 4w6OsLSxNbP5tHQSJI+DGhoknD7CRC1h31ihM5KEBHguRmkkJyKH8E1FKzt8fmBn GQCZ0czQTWhu8Mr9KQNzHrZzZANey9vQethdop37yG2pvKCVyWGwqXWrEVAU+s3f M/KRGOa/ow+uH327ERJTSGDB2WiuRxFX4SZN417sLRz+aXBXG0lHCktl5FnpH5Zm m8ywIJpUYce4LhQHWL+xlhPNB/PipH4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:35 2025 by rpki-client