$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa File: 7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa (raw, json) Hash identifier: Ae70DCOWEN9bFgdNiXGXt7WSeDMS6EgHQ/AysOISUuo= Subject key identifier: 3F:4D:BF:08:06:18:6D:63:71:1A:87:BD:84:D3:69:FB:01:9F:BC:51 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD0A962D6DBFC35506800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 139.138.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d0:a9:62:d6:db:fc:35:50:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=42f96a08-9aec-4c65-92a3-1b4a07a305d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:85:3f:07:49:dc:2e:a3:83:f8:4f:0d:7e: d8:5a:cc:8f:1c:2e:1f:48:33:ac:eb:90:9f:7e:3d: 46:4c:dc:9f:d0:6d:5e:df:6c:c1:97:2c:65:9f:48: 6a:99:ee:20:2b:2f:37:32:94:60:40:2b:2d:c4:e2: f4:12:45:ac:06:2a:17:5d:ee:61:08:93:c7:d3:e7: 39:fb:5f:1b:d9:d2:13:ab:5d:e2:cb:00:42:3c:b4: d4:81:24:6a:8d:b0:86:8a:1a:c0:8a:f4:f1:3b:e2: f6:1a:74:03:a2:66:ad:31:0e:3d:d1:b5:0e:da:57: 40:8a:4b:14:9d:58:13:b6:99:1b:b5:0a:29:6a:ea: 9d:71:a5:b6:75:d8:03:9e:6f:9b:29:af:58:a2:83: 83:79:d8:c0:9e:99:61:cd:fd:ba:bc:e3:2a:5b:a0: e1:f4:4c:7d:c4:4f:0b:74:f9:40:0c:ae:f7:0d:fa: 97:ad:81:80:c3:e8:fc:2e:89:ad:ad:a0:54:28:57: 7d:68:f5:56:f2:5e:33:21:5b:f5:e0:22:49:04:58: c7:27:94:25:9f:a0:24:1b:9b:f2:3e:25:20:79:c1: 61:c1:33:74:b8:f7:9d:8d:94:cc:7e:2c:d7:6f:09: b3:ed:0e:13:c2:2e:40:c7:4b:5d:73:97:cb:1e:92: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:BF:08:06:18:6D:63:71:1A:87:BD:84:D3:69:FB:01:9F:BC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:60:75:5f:df:11:b7:a8:7a:fb:b6:ba:33:f6:9b:f7:76:4a: 1d:71:5f:a2:53:59:48:28:bd:8d:90:ef:04:fb:d9:12:45:b6: 71:18:5d:fc:42:bc:e9:28:df:f4:55:e8:59:40:56:08:00:fd: 1d:e7:52:c1:8d:35:13:93:61:16:8d:ac:4f:54:08:94:b4:39: 3b:62:c1:d1:d4:57:2f:34:b9:f3:54:98:78:82:d9:9e:87:92: d7:d2:93:13:c9:db:af:43:83:17:39:af:70:07:bf:62:06:32: 16:0e:ae:6c:7f:ca:d5:8b:e1:ef:4c:61:c5:dc:e7:c9:d9:76: f7:af:30:59:85:a5:8b:67:50:9f:68:43:cc:89:6c:af:38:52: 6c:57:d5:fc:7f:f5:57:9d:1a:b3:2d:7a:de:e6:1f:f1:50:d4: 93:73:d5:5a:cd:68:4e:cb:24:6e:f0:23:49:e3:70:31:ec:42: 11:cd:a7:4c:64:f9:2e:89:63:bd:8d:9e:bd:b9:8d:be:21:6c: 32:e8:fb:c1:6e:2e:f5:7f:fa:62:0e:98:35:f8:5b:0e:59:0a: 1a:52:41:ad:8b:f6:ac:b2:0f:80:ba:e8:92:d0:0a:f3:77:f6: 1b:48:f6:39:f2:7b:c1:9b:3f:8d:07:07:bb:a5:0c:00:44:0a: f1:e9:13:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9CpYtbb/DVQaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDJmOTZhMDgtOWFlYy00YzY1LTkyYTMtMWI0YTA3YTMwNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsviFPwdJ3C6jg/hPDX7YWsyPHC4fSDOs65Cf fj1GTNyf0G1e32zBlyxln0hqme4gKy83MpRgQCstxOL0EkWsBioXXe5hCJPH0+c5 +18b2dITq13iywBCPLTUgSRqjbCGihrAivTxO+L2GnQDomatMQ490bUO2ldAiksU nVgTtpkbtQopauqdcaW2ddgDnm+bKa9YooODedjAnplhzf26vOMqW6Dh9Ex9xE8L dPlADK73DfqXrYGAw+j8LomtraBUKFd9aPVW8l4zIVv14CJJBFjHJ5Qln6AkG5vy PiUgecFhwTN0uPedjZTMfizXbwmz7Q4Twi5Ax0tdc5fLHpIRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9NvwgGGG1jcRqHvYTTafsBn7xRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2I5YWRhZWMtZWI4NC0z YWI4LWIyNGEtNmYwMmY3MzMzNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdgdV/fEbeoevu2ujP2m/d2Sh1xX6JTWUgovY2Q7wT72RJFtnEYXfxC vOko3/RV6FlAVggA/R3nUsGNNROTYRaNrE9UCJS0OTtiwdHUVy80ufNUmHiC2Z6H ktfSkxPJ269Dgxc5r3AHv2IGMhYOrmx/ytWL4e9MYcXc58nZdvevMFmFpYtnUJ9o Q8yJbK84UmxX1fx/9VedGrMtet7mH/FQ1JNz1VrNaE7LJG7wI0njcDHsQhHNp0xk +S6JY72Nnr25jb4hbDLo+8FuLvV/+mIOmDX4Ww5ZChpSQa2L9qyyD4C66JLQCvN3 9htI9jnye8GbP40HB7ulDABECvHpE9g= -----END CERTIFICATE-----Generated at Fri Apr 11 21:39:01 2025 by rpki-client