$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa File: d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa (raw, json) Hash identifier: Z/5vdo9Bd/I3fsNgSqcc/peKxt706IArD7ClPyYjg1s= Subject key identifier: 4F:E6:BD:5A:FA:35:14:7D:2E:E7:2A:CC:1D:A5:26:42:C1:C4:56:1C Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F432858480BDA666A3D715B9084FC4E00 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:66:6a:3d:71:5b:90:84:fc:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=ec13091e-337f-412d-a987-eb2c3b9f364b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:90:05:af:d7:ba:59:6c:8d:e9:ae:27:cd: f0:15:06:59:cd:21:de:20:af:c5:24:fb:08:0f:af: 12:fd:e0:f2:0c:89:aa:83:ed:ea:1e:b4:37:a6:53: 85:c5:f1:9f:cb:e8:35:47:0f:0f:42:86:6f:41:a5: 58:01:03:d6:ac:ba:50:3a:16:eb:47:63:fa:42:51: 2e:53:8e:b3:8f:a3:0e:21:ce:c4:c0:7a:a2:cb:6e: 73:b1:23:2b:b3:e9:78:9e:c6:70:2c:da:ee:04:1d: bd:23:eb:ca:d4:2c:29:1b:42:9d:1a:57:b8:d1:c4: ab:fe:59:90:42:98:c8:6a:5f:7b:17:bb:b3:72:ad: 58:cc:08:db:60:57:53:88:76:0b:ab:3e:30:57:8e: 54:27:2a:7f:f5:87:b5:b2:56:15:46:3a:bf:03:44: 3b:e0:9c:c7:30:d1:5b:a7:f4:92:aa:ab:a4:78:9b: 84:e1:c7:3a:bf:90:64:d6:b8:de:b9:8a:76:78:4a: 81:97:f4:f0:ca:62:94:0a:aa:e1:82:73:9a:93:d8: 12:65:be:34:c2:67:bd:27:f6:53:cb:7a:6c:29:4e: 0c:8c:0b:f3:f9:3e:30:27:22:e2:ce:c8:28:05:4a: 96:33:b7:ec:08:0f:7d:63:9b:f8:cc:05:a8:6b:d8: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E6:BD:5A:FA:35:14:7D:2E:E7:2A:CC:1D:A5:26:42:C1:C4:56:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:12:0c:25:09:de:68:ee:84:23:b1:88:f8:28:51:38:e5:dc: cd:a3:7e:48:05:a0:11:ee:4d:64:60:c2:b9:35:7e:88:8b:32: 81:0d:45:6c:5c:20:16:d0:8a:b8:51:99:1d:d3:52:3d:12:c6: 04:f0:9b:5c:af:fe:bd:90:02:71:e8:c5:b0:1a:d4:8b:ea:b1: e6:18:ef:c3:a9:30:bc:f1:44:15:f2:23:f8:99:83:15:dd:6f: 71:96:5a:24:e7:7d:bd:2d:d6:67:97:5c:46:2e:5f:fd:b9:89: a9:6e:91:eb:ff:25:c4:bc:55:23:04:a7:f7:d7:4a:f6:2f:c9: 3c:9d:ef:35:e3:14:50:39:33:e5:3b:d0:2d:c0:ea:f4:d7:5f: 3e:01:a7:87:50:50:de:55:a8:07:40:92:44:a1:d7:94:cd:a5: ac:a8:a8:64:69:83:e3:2c:38:ce:ec:76:28:b3:72:6d:8c:ec: 0c:a5:61:3e:de:64:e5:67:c1:ed:f3:08:6e:84:61:7f:d4:c4: f8:68:4a:c5:8e:48:3e:02:1a:e4:71:fd:0b:be:14:04:4d:2d: 4e:5d:1f:13:ad:b2:db:90:bc:13:a6:28:9b:2d:9b:dd:66:fa: f4:a6:cb:fc:9c:44:65:3f:ee:7f:b4:56:c7:9a:bd:13:83:fc: 9e:81:bf:32 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgL2mZqPXFbkIT8TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk ZWMxMzA5MWUtMzM3Zi00MTJkLWE5ODctZWIyYzNiOWYzNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshSQBa/XullsjemuJ83wFQZZzSHeIK/FJPsI D68S/eDyDImqg+3qHrQ3plOFxfGfy+g1Rw8PQoZvQaVYAQPWrLpQOhbrR2P6QlEu U46zj6MOIc7EwHqiy25zsSMrs+l4nsZwLNruBB29I+vK1CwpG0KdGle40cSr/lmQ QpjIal97F7uzcq1YzAjbYFdTiHYLqz4wV45UJyp/9Ye1slYVRjq/A0Q74JzHMNFb p/SSqqukeJuE4cc6v5Bk1rjeuYp2eEqBl/TwymKUCqrhgnOak9gSZb40wme9J/ZT y3psKU4MjAvz+T4wJyLizsgoBUqWM7fsCA99Y5v4zAWoa9jpjwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE/mvVr6NRR9LucqzB2lJkLBxFYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvZDA3YTlmMWQtY2YzMi0z MzY4LWI5MDYtZWYwMWM0MDBiNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKQSDCUJ3mjuhCOxiPgoUTjl3M2jfkgFoBHuTWRgwrk1foiL MoENRWxcIBbQirhRmR3TUj0SxgTwm1yv/r2QAnHoxbAa1IvqseYY78OpMLzxRBXy I/iZgxXdb3GWWiTnfb0t1meXXEYuX/25ialukev/JcS8VSMEp/fXSvYvyTyd7zXj FFA5M+U70C3A6vTXXz4Bp4dQUN5VqAdAkkSh15TNpayoqGRpg+MsOM7sdiizcm2M 7AylYT7eZOVnwe3zCG6EYX/UxPhoSsWOSD4CGuRx/Qu+FARNLU5dHxOtstuQvBOm KJstm91m+vSmy/ycRGU/7n+0VseavROD/J6BvzI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:14 2025 by rpki-client