$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa File: 1a850553-c1f9-3561-bb79-65835fe4fee4.roa (raw, json) Hash identifier: WLqazEn1EVb8Bzy8NdvWsGjOjPYG/+e3iY2IcrPcmqQ= Subject key identifier: 34:D6:35:93:48:44:4D:7B:E0:E8:DB:28:7F:27:2D:94:51:5F:52:2C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858494E2EB34B2F2F303240C22880 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 30215 IP address blocks: 139.138.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b3:4b:2f:2f:30:32:40:c2:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=5d8fb94f-a3ef-45e8-b3cc-c999b8ca9c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:39:63:30:24:07:51:02:77:d8:fe:0d:2d: 94:9c:88:f2:86:7d:14:59:be:19:35:1c:4a:ec:18: 00:9a:b3:69:a8:70:95:9d:ee:5b:11:69:b2:bf:e8: f9:db:6e:28:d8:0d:13:5a:c5:a3:8f:70:fc:7a:32: b7:26:77:46:d2:9b:e0:9b:62:9b:59:d9:b9:8d:41: 9c:b7:72:92:fc:31:c9:a6:5d:fe:86:17:f8:d6:48: 84:e1:72:77:e7:41:22:61:a6:2a:73:38:1f:8d:d2: a1:cf:ff:3d:cb:a3:4b:35:c8:2d:5b:cd:96:4a:61: 4c:66:57:93:72:07:e9:90:42:f4:e0:c3:8a:02:7c: 57:d4:4a:79:7a:20:9e:ba:33:db:22:dd:a0:78:58: 3f:5f:0e:48:50:d8:fc:a9:8b:0a:22:0a:7d:fd:90: 58:b8:90:20:fa:c9:90:b2:22:a4:af:dd:b5:a5:b8: ac:2e:ce:ea:20:a1:8f:de:a6:37:c7:1d:09:f0:83: 72:52:1b:cf:64:9b:d3:9e:90:90:54:2d:ad:51:f9: d2:0f:af:44:26:95:e5:08:d5:19:53:1f:d2:70:ac: 09:10:5d:e5:72:5d:68:fd:55:f5:79:16:ab:b9:e5: 0e:3a:c4:18:57:ff:47:53:64:c4:a2:5b:87:e5:cb: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D6:35:93:48:44:4D:7B:E0:E8:DB:28:7F:27:2D:94:51:5F:52:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d2:45:1f:07:3b:67:9c:e1:25:a2:db:e7:77:99:7e:c6:56: 16:1e:5d:e1:8d:53:e0:55:59:0b:e6:8c:3b:c3:70:f9:4f:08: 70:44:96:f8:55:75:8a:37:1f:f9:fa:f8:66:42:dc:95:70:ff: 59:46:a3:f1:34:1e:2e:22:cf:8d:a2:67:5a:8a:e5:cb:f9:c5: 87:e5:de:1f:04:3c:77:fc:9a:88:48:04:be:e1:40:7a:d9:75: c4:7f:f8:be:2e:88:dd:c3:a1:33:91:7b:84:fe:68:a0:96:0a: c1:58:7d:08:3d:82:87:2e:cd:08:5b:a9:28:03:fb:03:52:84: 3c:d4:67:e6:7c:e1:36:88:c4:73:62:17:af:1f:96:54:94:0a: c1:54:c0:7d:1f:85:6c:d3:94:d2:bd:ac:7d:e5:15:b7:50:1f: 84:77:19:10:de:f4:07:c5:f9:5f:f4:a5:67:71:ea:7b:32:23: 48:29:5d:82:fe:6d:e1:7b:74:3d:55:4e:96:d7:86:32:e0:f3: 5a:96:b1:c9:38:8a:ae:b7:74:10:62:42:89:df:f9:56:c5:fe: 69:32:26:41:31:4d:0e:04:62:53:ad:ef:b1:91:94:0a:80:c7: 76:0b:1a:d3:4f:3e:10:0b:9e:65:9d:91:8a:36:40:b9:d4:8f: 37:bd:b0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrNLLy8wMkDCKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NWQ4ZmI5NGYtYTNlZi00NWU4LWIzY2MtYzk5OWI4Y2E5YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntw5YzAkB1ECd9j+DS2UnIjyhn0UWb4ZNRxK 7BgAmrNpqHCVne5bEWmyv+j5224o2A0TWsWjj3D8ejK3JndG0pvgm2KbWdm5jUGc t3KS/DHJpl3+hhf41kiE4XJ350EiYaYqczgfjdKhz/89y6NLNcgtW82WSmFMZleT cgfpkEL04MOKAnxX1Ep5eiCeujPbIt2geFg/Xw5IUNj8qYsKIgp9/ZBYuJAg+smQ siKkr921pbisLs7qIKGP3qY3xx0J8INyUhvPZJvTnpCQVC2tUfnSD69EJpXlCNUZ Ux/ScKwJEF3lcl1o/VX1eRarueUOOsQYV/9HU2TEoluH5ctTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTWNZNIRE174OjbKH8nLZRRX1IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWE4NTA1NTMtYzFmOS0z NTYxLWJiNzktNjU4MzVmZTRmZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvSRR8HO2ec4SWi2+d3mX7GVhYeXeGNU+BVWQvmjDvDcPlPCHBElvhV dYo3H/n6+GZC3JVw/1lGo/E0Hi4iz42iZ1qK5cv5xYfl3h8EPHf8mohIBL7hQHrZ dcR/+L4uiN3DoTORe4T+aKCWCsFYfQg9gocuzQhbqSgD+wNShDzUZ+Z84TaIxHNi F68fllSUCsFUwH0fhWzTlNK9rH3lFbdQH4R3GRDe9AfF+V/0pWdx6nsyI0gpXYL+ beF7dD1VTpbXhjLg81qWsck4iq63dBBiQonf+VbF/mkyJkExTQ4EYlOt77GRlAqA x3YLGtNPPhALnmWdkYo2QLnUjze9sPA= -----END CERTIFICATE-----Generated at Mon May 5 02:57:35 2025 by rpki-client