$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b5bc4c-fd6e-378e-854b-ee3e6f160ab6.roa File: 16b5bc4c-fd6e-378e-854b-ee3e6f160ab6.roa (raw, json) Hash identifier: T1bGZ0plWamsd3CexOqz5lKg4E30KOUV3S23RIgzjEg= Subject key identifier: 2A:10:DF:F8:C0:11:0D:07:81:B3:D6:D9:67:91:54:E2:DC:FB:F4:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497AD9B69759A3F33662C1FB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b5bc4c-fd6e-378e-854b-ee3e6f160ab6.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 63949 IP address blocks: 139.144.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:b6:97:59:a3:f3:36:62:c1:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=baeefa73-a5d2-48f7-81fc-9cb0e1a2a8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:e5:c1:e7:91:9f:97:6d:ea:7d:dd:81:aa: 6a:2e:58:84:7d:ee:ff:da:a7:09:8c:7f:e6:15:a8: b6:7f:6e:1c:5b:4e:9b:96:68:16:cc:18:17:43:d2: d0:82:d3:7b:70:24:f9:5b:49:c5:b0:31:b8:a0:d6: 17:e5:90:d9:05:25:28:5d:e2:b8:52:b9:c4:a6:bd: 86:05:b6:b7:3f:36:bd:c4:74:ce:9a:b0:aa:58:8e: 6e:88:e6:3f:8e:62:2f:f5:ea:30:6e:50:3b:b7:ab: 0d:11:39:43:9c:29:2a:85:d9:3d:43:ff:5a:94:a9: 32:eb:e4:e1:c8:2a:f6:66:70:7e:51:bd:ec:5b:b6: 24:62:05:4c:af:c5:e5:c2:4a:df:37:ca:d4:2c:90: 4f:57:a8:a2:60:47:30:b1:85:d6:5f:7c:45:38:f2: f0:64:94:5d:10:e2:ae:2e:6d:99:5b:91:09:0d:c4: 99:07:06:6a:83:94:74:41:9d:7b:05:d8:3b:ad:a0: f4:75:31:94:85:28:d0:54:e9:6d:11:26:23:6e:73: 02:60:f6:25:97:e0:26:b4:99:ed:8a:26:2f:69:15: df:a4:14:14:29:b5:fa:43:2b:e2:09:b6:67:74:bd: 94:a7:d9:c2:2c:95:c2:7f:ff:d9:de:fb:80:15:08: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:10:DF:F8:C0:11:0D:07:81:B3:D6:D9:67:91:54:E2:DC:FB:F4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b5bc4c-fd6e-378e-854b-ee3e6f160ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:16:bd:b4:01:1a:66:79:a8:18:83:06:7d:5e:d5:41:64:f1: bc:f3:36:01:dc:f9:5a:40:52:cc:fb:4e:44:0d:ee:55:d3:50: 49:7d:75:ca:49:1b:34:2a:36:e5:a7:4f:1b:55:57:43:16:60: 60:b6:c0:c5:01:d6:81:49:8e:f9:b6:e1:3f:63:ee:0c:90:33: 6b:02:f9:c4:3b:2e:0a:5f:ab:03:5f:95:ca:36:b6:0c:37:60: 44:e1:c7:fa:f5:d7:ed:00:9c:3d:51:47:5f:c2:47:4c:23:f4: 4e:c2:10:d9:a9:3e:04:7f:dd:51:aa:75:8f:79:24:c6:63:f6: de:95:90:39:31:18:95:75:20:0b:d1:8e:ae:a0:92:da:08:8c: 42:54:6f:9e:49:09:2f:ad:23:de:4e:85:99:0e:1b:92:e4:3c: c5:23:5d:ff:0d:75:95:41:c6:e8:e7:68:2b:24:5d:dd:4f:c4: 27:c6:33:8f:48:d4:f6:26:65:57:da:4c:89:df:8b:da:f5:ee: f1:e2:94:14:df:7e:8f:bd:7d:db:24:b5:eb:ba:09:8c:79:02: 70:6f:da:9e:b5:cf:10:e5:0a:6d:09:db:9c:3d:e4:df:c0:3c: 28:9d:90:13:92:77:ec:fb:02:1d:23:9d:e4:ff:a1:f0:22:28: 0a:32:6b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62baXWaPzNmLB+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk YmFlZWZhNzMtYTVkMi00OGY3LTgxZmMtOWNiMGUxYTJhOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtzlweeRn5dt6n3dgapqLliEfe7/2qcJjH/m Fai2f24cW06blmgWzBgXQ9LQgtN7cCT5W0nFsDG4oNYX5ZDZBSUoXeK4UrnEpr2G Bba3Pza9xHTOmrCqWI5uiOY/jmIv9eowblA7t6sNETlDnCkqhdk9Q/9alKky6+Th yCr2ZnB+Ub3sW7YkYgVMr8XlwkrfN8rULJBPV6iiYEcwsYXWX3xFOPLwZJRdEOKu Lm2ZW5EJDcSZBwZqg5R0QZ17Bdg7raD0dTGUhSjQVOltESYjbnMCYPYll+AmtJnt iiYvaRXfpBQUKbX6QyviCbZndL2Up9nCLJXCf//Z3vuAFQjaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoQ3/jAEQ0HgbPW2WeRVOLc+/QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZiNWJjNGMtZmQ2ZS0z NzhlLTg1NGItZWUzZTZmMTYwYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi5CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsWvbQBGmZ5qBiDBn1e1UFk8bzzNgHc+VpAUsz7TkQN7lXTUEl9dcpJ GzQqNuWnTxtVV0MWYGC2wMUB1oFJjvm24T9j7gyQM2sC+cQ7LgpfqwNflco2tgw3 YEThx/r11+0AnD1RR1/CR0wj9E7CENmpPgR/3VGqdY95JMZj9t6VkDkxGJV1IAvR jq6gktoIjEJUb55JCS+tI95OhZkOG5LkPMUjXf8NdZVBxujnaCskXd1PxCfGM49I 1PYmZVfaTInfi9r17vHilBTffo+9fdskteu6CYx5AnBv2p61zxDlCm0J25w95N/A PCidkBOSd+z7Ah0jneT/ofAiKAoya4Q= -----END CERTIFICATE-----Generated at Mon May 5 01:22:29 2025 by rpki-client