$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa File: 709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa (raw, json) Hash identifier: 38v2uTNPc11C0x1l+aWsaPPBvki8JM9eoKs9OsUNhPs= Subject key identifier: 46:E1:33:CF:DD:36:D0:FB:37:72:5C:3F:B3:B1:A3:20:88:77:76:8E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD09078EE627358B80E80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 139.138.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d0:90:78:ee:62:73:58:b8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=4985f167-8624-485a-a8c8-b64fc58e95b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4f:44:b2:8a:29:77:c2:14:ea:a2:a7:ba:58: 7b:1d:8e:52:c0:b8:b8:d8:c0:ab:1c:37:fa:77:7b: 70:a2:2e:eb:9a:56:0d:79:29:5e:07:34:9b:4d:26: d1:7b:83:10:4a:70:e1:b9:93:b7:51:55:f7:87:5e: 46:9c:92:b6:12:52:f1:53:83:53:a4:1f:66:a4:30: e2:23:5e:ab:a0:ec:d7:df:90:e7:f1:9c:1a:4e:77: 9f:da:61:18:e8:7d:aa:d1:ed:3f:b7:43:33:de:aa: ba:b2:30:81:be:84:e0:24:da:5a:b4:20:59:ea:79: 5f:66:ae:4e:71:13:86:10:96:3f:69:79:30:ea:2e: e8:b8:b7:3d:ed:87:85:ff:ea:83:e6:2d:ac:b1:1b: a4:47:d0:5c:f6:3e:0a:33:fb:a2:4f:7f:c6:de:c1: e9:c3:14:52:67:fe:c8:55:51:b5:c5:2d:91:d8:e9: ec:a8:e1:05:c2:9b:3b:a7:81:c8:28:d1:33:da:54: 2b:ae:46:05:27:58:f9:75:dc:3c:5a:22:b4:7f:e0: 8d:e7:bc:48:a0:0a:9c:7a:41:cc:6e:5b:74:1e:de: 18:70:b1:c0:85:e9:2c:e7:49:b3:c4:99:0f:8b:d0: 87:e6:f7:52:a6:22:87:d7:eb:f1:b5:24:ed:2c:9e: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:33:CF:DD:36:D0:FB:37:72:5C:3F:B3:B1:A3:20:88:77:76:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:17:6f:89:3f:11:d3:72:b2:6d:9e:f5:29:bd:74:8a:5e:78: f6:e4:23:e7:af:e9:11:a0:8d:24:b3:2c:b9:27:32:b4:c7:75: e5:5b:5f:5b:c1:cc:c8:92:b4:e6:20:71:01:80:56:9a:a5:a9: b3:9c:15:2f:1f:dc:8b:26:81:ff:e2:9b:aa:b4:b0:36:7e:f3: f8:0d:a6:82:4e:c3:d6:af:94:f5:7a:9a:55:62:c3:6f:87:da: 9f:b2:57:00:a4:c0:e4:0e:af:23:10:ca:a4:e0:05:d9:4d:7a: f2:54:14:99:de:08:0f:76:35:6e:14:dd:92:c2:31:1c:f6:66: 23:9c:b7:2d:55:51:d6:6f:7d:1e:cc:1c:89:bc:eb:9a:8e:e1: 66:5e:8f:6e:85:5c:34:0d:58:f2:b3:35:03:08:48:0c:26:28: f4:dc:c9:7e:70:2f:c4:3e:2f:be:5f:d4:ef:0a:ad:11:ab:b7: b9:3a:6d:e1:c9:5b:bc:9b:06:a3:3e:0b:7f:45:64:03:79:fc: 4e:14:99:03:a4:c3:2d:37:41:97:8a:2e:6e:5e:a0:ec:df:49: 82:0b:d6:74:97:d0:3a:f0:b4:33:81:d1:e1:e9:5c:07:43:31: 37:e9:35:98:a4:0e:ff:b9:13:8e:fb:16:40:87:fa:ac:c5:91: 09:6a:0e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9CQeO5ic1i4DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDk4NWYxNjctODYyNC00ODVhLWE4YzgtYjY0ZmM1OGU5NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA609Esoopd8IU6qKnulh7HY5SwLi42MCrHDf6 d3twoi7rmlYNeSleBzSbTSbRe4MQSnDhuZO3UVX3h15GnJK2ElLxU4NTpB9mpDDi I16roOzX35Dn8ZwaTnef2mEY6H2q0e0/t0Mz3qq6sjCBvoTgJNpatCBZ6nlfZq5O cROGEJY/aXkw6i7ouLc97YeF/+qD5i2ssRukR9Bc9j4KM/uiT3/G3sHpwxRSZ/7I VVG1xS2R2OnsqOEFwps7p4HIKNEz2lQrrkYFJ1j5ddw8WiK0f+CN57xIoAqcekHM blt0Ht4YcLHAheks50mzxJkPi9CH5vdSpiKH1+vxtSTtLJ4RrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbhM8/dNtD7N3JcP7OxoyCId3aOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzA5YzY4MjEtNWI1Yi0z OTJjLWEzZDAtMjNhM2E0OGM1YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4omMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsXb4k/EdNysm2e9Sm9dIpeePbkI+ev6RGgjSSzLLknMrTHdeVbX1vB zMiStOYgcQGAVpqlqbOcFS8f3Ismgf/im6q0sDZ+8/gNpoJOw9avlPV6mlViw2+H 2p+yVwCkwOQOryMQyqTgBdlNevJUFJneCA92NW4U3ZLCMRz2ZiOcty1VUdZvfR7M HIm865qO4WZej26FXDQNWPKzNQMISAwmKPTcyX5wL8Q+L75f1O8KrRGrt7k6beHJ W7ybBqM+C39FZAN5/E4UmQOkwy03QZeKLm5eoOzfSYIL1nSX0DrwtDOB0eHpXAdD MTfpNZikDv+5E477FkCH+qzFkQlqDp0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:11 2025 by rpki-client