$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa File: b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa (raw, json) Hash identifier: KKpxqy3vJkzMpF4AaEOuPT6DWPiwL/6w5V7ADsIT4HY= Subject key identifier: DC:42:FB:72:6D:23:85:59:A2:F0:97:FD:AB:D7:00:B1:C7:87:81:56 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE8A941C6E3103F5EC1180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 139.138.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8a:94:1c:6e:31:03:f5:ec:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5659a90d-3d29-4a21-82f0-19ded8009449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:be:93:e0:67:c5:2a:86:ea:40:9f:c2:b6: af:f2:75:81:18:ee:c6:9d:d8:b8:0c:f3:6b:2f:8a: e8:32:fe:de:53:97:52:61:ec:2c:c1:d6:d8:58:67: 78:b7:72:d7:11:3a:4b:f9:98:87:5d:f1:df:08:8d: a4:eb:fd:e6:92:25:5e:17:2e:a3:26:d5:5c:2f:39: 83:63:25:99:08:05:d4:d2:e2:dd:5f:39:75:c3:5c: c9:a2:a4:25:f8:60:c3:dc:9a:c1:4c:89:9e:d1:3a: d1:94:00:3c:95:55:b1:fa:be:78:76:75:a6:48:64: 65:75:24:4d:0f:23:2c:e1:79:51:af:a4:11:9f:6e: ab:d1:3b:a8:e7:5d:d1:ee:fe:7e:98:26:3a:8e:7f: b9:59:dd:28:b3:c7:b2:a7:9a:c6:37:ef:3b:a5:d9: 23:6e:03:1b:46:62:a9:9e:e0:e5:f5:e7:00:3a:72: 58:a4:cc:f8:67:cd:7d:55:14:d7:46:7c:ab:f0:58: 20:c2:e3:05:6f:39:ba:b3:9f:d7:06:bb:59:0b:7f: 6c:84:99:f8:8d:d3:93:19:70:33:f1:bf:1f:2f:b1: 03:37:37:52:6d:db:d1:de:dc:6c:56:49:2c:f5:76: 93:bc:b6:cc:4a:8c:74:96:6d:a3:34:5b:00:7c:d5: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:42:FB:72:6D:23:85:59:A2:F0:97:FD:AB:D7:00:B1:C7:87:81:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:91:38:63:fe:dc:6c:08:8d:e7:6c:14:ff:5c:07:87:57:c0: 78:be:b3:a2:0f:80:31:73:54:f8:60:46:f2:2d:23:0a:0a:e1: e7:a7:a5:e6:15:5b:05:87:a3:6e:62:3e:76:7d:b8:51:16:5d: 48:02:d3:34:81:1b:be:3d:2d:12:c5:30:68:d5:18:af:cf:a9: b4:3f:31:d6:69:27:43:2a:57:0e:53:e0:6a:d5:ef:4b:61:c2: d5:e2:11:51:ce:1a:d3:8d:67:c1:98:c3:ae:5d:64:61:a3:4e: 9f:27:b9:4e:1d:c1:00:ef:ba:3f:92:1f:03:0b:a5:c6:e5:1e: 4b:fc:4f:50:51:a4:3a:82:7d:9f:bb:40:a9:97:e6:63:63:c1: c7:af:9a:16:0a:d5:9e:6b:62:30:bd:9f:07:f0:ac:40:65:a1: b4:8a:bb:5e:74:e6:1d:f0:4c:09:ba:a1:6b:67:b5:30:fa:70: dd:f2:7c:31:78:b5:f6:b6:8e:33:6f:43:71:8a:21:74:b9:bd: a4:cc:34:db:b1:b4:63:1d:1b:c9:3f:8c:94:fb:e6:ef:8e:79: 6a:e7:b7:4a:0d:32:fb:56:88:35:5b:bd:d7:53:5b:bc:61:e9: 30:53:be:cd:40:ec:d9:8f:16:7c:cf:02:99:20:bf:49:12:68: 8b:3d:a5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroqUHG4xA/XsEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTY1OWE5MGQtM2QyOS00YTIxLTgyZjAtMTlkZWQ4MDA5NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GS+k+BnxSqG6kCfwrav8nWBGO7Gndi4DPNr L4roMv7eU5dSYewswdbYWGd4t3LXETpL+ZiHXfHfCI2k6/3mkiVeFy6jJtVcLzmD YyWZCAXU0uLdXzl1w1zJoqQl+GDD3JrBTIme0TrRlAA8lVWx+r54dnWmSGRldSRN DyMs4XlRr6QRn26r0Tuo513R7v5+mCY6jn+5Wd0os8eyp5rGN+87pdkjbgMbRmKp nuDl9ecAOnJYpMz4Z819VRTXRnyr8FggwuMFbzm6s5/XBrtZC39shJn4jdOTGXAz 8b8fL7EDNzdSbdvR3txsVkks9XaTvLbMSox0lm2jNFsAfNUrFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxC+3JtI4VZovCX/avXALHHh4FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjQ5Y2Y3OWYtZmUwOC0z ZDc5LTljMDAtZDlkOTZmNGZkZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqROGP+3GwIjedsFP9cB4dXwHi+s6IPgDFzVPhgRvItIwoK4eenpeYV WwWHo25iPnZ9uFEWXUgC0zSBG749LRLFMGjVGK/PqbQ/MdZpJ0MqVw5T4GrV70th wtXiEVHOGtONZ8GYw65dZGGjTp8nuU4dwQDvuj+SHwMLpcblHkv8T1BRpDqCfZ+7 QKmX5mNjwcevmhYK1Z5rYjC9nwfwrEBlobSKu1505h3wTAm6oWtntTD6cN3yfDF4 tfa2jjNvQ3GKIXS5vaTMNNuxtGMdG8k/jJT75u+OeWrnt0oNMvtWiDVbvddTW7xh 6TBTvs1A7NmPFnzPApkgv0kSaIs9pdQ= -----END CERTIFICATE-----Generated at Sat Apr 12 01:36:34 2025 by rpki-client