$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: ItXh8dOgARNV+7G1+8xX2Al9Xvw5fuv3v5QmjMF9shU= Subject key identifier: A0:8F:A4:0F:F5:78:CB:1B:5E:C9:11:94:3D:24:B5:76:E1:42:30:1F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849754459D00E170A74705E7D30 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:59:d0:0e:17:0a:74:70:5e:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=c4f9eeea-52b3-4673-8506-aa8fdc6c425a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:ac:84:a9:82:5f:76:f3:4e:dd:5f:1d:51: 9b:b6:bf:55:06:a1:5e:be:2b:06:4b:df:ea:5c:ed: ce:a6:03:85:b6:e5:d5:9b:46:f8:95:c1:66:47:ac: 68:39:cf:8b:3e:52:1e:d1:d2:fa:6c:9d:83:81:5f: 7b:ae:0b:25:5e:c5:27:9e:6e:5d:b7:f6:e1:a8:4d: d3:c5:09:2e:e7:7f:45:b9:d1:22:d5:29:91:d5:c0: a0:0f:ff:22:72:6f:3e:5a:85:18:8d:4f:c4:6d:88: fc:dd:c4:0b:87:cc:13:d4:4b:77:be:ac:a1:76:c6: 27:ec:0d:e2:d0:07:6e:12:a2:89:52:13:f6:98:7c: 1a:d6:ff:73:17:f5:65:81:2d:8c:6c:d8:cd:66:7d: bb:fa:3b:92:96:91:c0:0a:eb:cd:13:10:df:2c:bd: 86:68:74:36:f2:89:1d:27:74:dc:14:b7:c4:14:5b: a1:62:db:20:1a:2a:94:8b:cd:80:04:f3:e1:19:e6: 22:80:08:08:58:a8:5f:6c:e9:38:13:0d:78:17:ed: fc:e8:c9:6e:be:51:ee:d2:2c:f6:00:d2:6b:f1:fc: ca:d0:33:76:fc:11:ea:aa:ac:36:4c:bd:d9:a9:81: 45:fc:6a:6c:57:ff:7f:0c:60:f0:b8:16:d3:12:24: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:A4:0F:F5:78:CB:1B:5E:C9:11:94:3D:24:B5:76:E1:42:30:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:44:a2:0b:eb:17:bc:7e:7b:6e:48:e9:7c:af:b1:89:cc:bb: ee:cf:09:d2:eb:53:3b:4a:7b:a8:28:58:9b:ab:ed:96:fd:da: eb:f6:c2:ab:6a:e4:5e:ef:1b:89:0f:5b:1b:c2:11:18:b1:ef: bf:74:03:68:0d:ea:f5:24:ce:65:a7:b8:a8:f7:71:41:9c:c2: 6e:15:22:85:c2:b6:61:61:d2:4c:4e:79:30:fc:e9:06:3a:56: 47:55:b4:00:29:79:ab:1b:e5:5e:21:e8:24:00:1e:5d:ce:a0: e2:39:a8:de:b5:73:40:36:ce:bb:f2:1d:53:bc:13:fa:57:dc: 4f:e4:f5:d7:12:da:55:52:0f:75:f2:d7:f1:2f:cc:fc:e1:97: a4:6c:68:02:2b:6f:c1:5e:bb:f5:40:96:de:92:ee:28:c0:5a: 71:cd:7e:4b:28:e8:59:59:c3:a3:ec:98:e1:ac:8c:8a:47:74: 2c:99:d2:31:36:26:f2:a7:74:5f:c9:d8:cd:d6:09:09:9e:05: c5:94:ab:36:63:4a:7e:51:af:53:34:1b:8f:6f:2f:70:46:21: 9b:cb:46:a8:5a:61:f2:39:9b:17:02:81:7b:2f:c5:b0:d7:21: 49:40:a1:ad:ca:78:19:76:89:e8:d4:65:11:fd:02:72:0c:72: 98:87:e6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFnQDhcKdHBefTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YzRmOWVlZWEtNTJiMy00NjczLTg1MDYtYWE4ZmRjNmM0MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5OshKmCX3bzTt1fHVGbtr9VBqFevisGS9/q XO3OpgOFtuXVm0b4lcFmR6xoOc+LPlIe0dL6bJ2DgV97rgslXsUnnm5dt/bhqE3T xQku539FudEi1SmR1cCgD/8icm8+WoUYjU/EbYj83cQLh8wT1Et3vqyhdsYn7A3i 0AduEqKJUhP2mHwa1v9zF/VlgS2MbNjNZn27+juSlpHACuvNExDfLL2GaHQ28okd J3TcFLfEFFuhYtsgGiqUi82ABPPhGeYigAgIWKhfbOk4Ew14F+386MluvlHu0iz2 ANJr8fzK0DN2/BHqqqw2TL3ZqYFF/GpsV/9/DGDwuBbTEiSsDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCPpA/1eMsbXskRlD0ktXbhQjAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5EogvrF7x+e25I6XyvsYnMu+7PCdLrUztKe6goWJur7Zb92uv2wqtq 5F7vG4kPWxvCERix7790A2gN6vUkzmWnuKj3cUGcwm4VIoXCtmFh0kxOeTD86QY6 VkdVtAApeasb5V4h6CQAHl3OoOI5qN61c0A2zrvyHVO8E/pX3E/k9dcS2lVSD3Xy 1/EvzPzhl6RsaAIrb8Feu/VAlt6S7ijAWnHNfkso6FlZw6PsmOGsjIpHdCyZ0jE2 JvKndF/J2M3WCQmeBcWUqzZjSn5Rr1M0G49vL3BGIZvLRqhaYfI5mxcCgXsvxbDX IUlAoa3KeBl2iejUZRH9AnIMcpiH5kk= -----END CERTIFICATE-----Generated at Sat Apr 12 00:32:02 2025 by rpki-client