$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa File: b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa (raw, json) Hash identifier: vvv2M2g0HBpmcCFBo4FJguhEo2lkG6cA3qVhE5qZle0= Subject key identifier: FE:58:BE:48:3C:5A:AF:D0:E8:1F:8C:1B:97:29:AC:E3:09:E9:B4:D9 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858494CC941D8800216B7D1081700 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 53927 IP address blocks: 139.131.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:d8:80:02:16:b7:d1:08:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=aa9f0b34-4a66-4b19-9b92-044bbdfae6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:87:a6:2a:56:fb:2d:74:c5:13:81:22:16: fd:aa:31:81:ed:95:32:86:90:b2:fe:49:c0:4d:93: 15:54:73:d0:16:fc:8e:31:0c:ee:de:b7:5a:a8:55: 75:1c:ee:2a:fb:97:35:36:b3:e5:5a:11:cc:e7:f3: a4:9a:10:26:78:15:d5:79:2f:4c:cc:0d:2c:b6:df: c5:05:82:60:79:84:90:4f:b7:79:37:f3:61:40:a5: 0b:3a:25:86:8d:d3:bc:4d:d8:88:8f:f2:8e:84:dc: c6:62:c5:32:37:0f:5b:4f:9d:5f:7f:de:a9:ce:cb: 18:64:d6:53:db:ea:e8:3b:33:90:85:88:97:65:eb: 88:d3:2b:e6:86:64:b7:c9:05:60:54:cf:b5:5d:b0: 64:ce:2e:53:84:d3:ab:5f:65:b6:19:10:06:d6:ca: 68:6b:17:74:83:f7:eb:09:b4:ee:72:57:fc:1d:c6: 95:db:f9:22:8f:b0:e3:02:81:78:a2:e4:20:40:49: dd:2c:84:0c:94:9b:c4:85:d6:0d:4e:bf:5c:f3:89: b7:17:7c:1d:0a:40:97:c6:75:c2:38:62:c7:7a:31: 6d:69:90:1a:19:a9:4e:4b:a4:f2:62:b7:14:51:55: 14:e9:c9:e0:07:a0:6b:11:af:73:c4:a4:6c:f8:f8: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:58:BE:48:3C:5A:AF:D0:E8:1F:8C:1B:97:29:AC:E3:09:E9:B4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d0:ca:9d:fc:c5:b0:c8:9c:53:70:2d:ec:e1:13:10:05:d5: f0:6a:34:d5:4a:06:da:35:d6:e6:bf:50:b7:18:42:ce:42:7c: 05:4d:63:b2:6f:c9:d9:94:28:e8:82:20:88:8b:4d:1f:34:05: a2:c1:b3:c8:1b:65:44:3c:f6:1a:30:3f:9b:95:93:23:02:88: 63:95:43:e7:b8:64:ed:1c:56:91:f0:72:3c:d7:70:2a:e9:e9: 9a:82:c3:82:c6:91:22:5f:f6:d0:69:88:4d:86:c5:15:0d:c8: de:8a:9b:41:7b:48:4d:12:b7:e0:29:d6:10:a7:13:9e:bf:01: 1e:c2:af:63:e7:b6:3b:72:23:ed:82:58:e5:96:ec:be:1d:f3: f2:da:ea:f3:54:71:f9:63:57:4a:f1:16:ff:21:f0:10:71:5d: 93:dd:56:4e:2a:63:01:08:33:9a:cc:b6:49:ad:1e:2e:e2:de: 7f:13:ce:d2:b0:01:d1:f2:68:e2:d5:e6:ea:4a:05:fe:e1:84: 3a:a7:6c:80:ef:a3:92:66:9a:53:68:89:60:c7:2e:e6:b2:09: 26:1d:35:d1:77:d0:2c:14:b9:c7:2a:48:89:dd:d7:5d:98:a0: 33:09:85:f5:64:19:09:f5:3c:81:2e:ca:33:4b:5c:95:d9:d5: b9:d1:20:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUHYgAIWt9EIFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWE5ZjBiMzQtNGE2Ni00YjE5LTliOTItMDQ0YmJkZmFlNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxWHpipW+y10xROBIhb9qjGB7ZUyhpCy/knA TZMVVHPQFvyOMQzu3rdaqFV1HO4q+5c1NrPlWhHM5/OkmhAmeBXVeS9MzA0stt/F BYJgeYSQT7d5N/NhQKULOiWGjdO8TdiIj/KOhNzGYsUyNw9bT51ff96pzssYZNZT 2+roOzOQhYiXZeuI0yvmhmS3yQVgVM+1XbBkzi5ThNOrX2W2GRAG1spoaxd0g/fr CbTuclf8HcaV2/kij7DjAoF4ouQgQEndLIQMlJvEhdYNTr9c84m3F3wdCkCXxnXC OGLHejFtaZAaGalOS6TyYrcUUVUU6cngB6BrEa9zxKRs+PgoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Yvkg8Wq/Q6B+MG5cprOMJ6bTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYjdlYzFiZjUtZjc1Ni0z YzI3LWIyMTQtMzI5Y2I3YjU4YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzQyp38xbDInFNwLezhExAF1fBqNNVKBto11ua/ULcYQs5CfAVNY7Jv ydmUKOiCIIiLTR80BaLBs8gbZUQ89howP5uVkyMCiGOVQ+e4ZO0cVpHwcjzXcCrp 6ZqCw4LGkSJf9tBpiE2GxRUNyN6Km0F7SE0St+Ap1hCnE56/AR7Cr2PntjtyI+2C WOWW7L4d8/La6vNUcfljV0rxFv8h8BBxXZPdVk4qYwEIM5rMtkmtHi7i3n8TztKw AdHyaOLV5upKBf7hhDqnbIDvo5JmmlNoiWDHLuayCSYdNdF30CwUuccqSInd112Y oDMJhfVkGQn1PIEuyjNLXJXZ1bnRIPY= -----END CERTIFICATE-----Generated at Tue May 6 15:46:26 2025 by rpki-client