$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa File: 6cf7fe11-676a-30a2-84a3-46c07752a767.roa (raw, json) Hash identifier: h89fSOTRl0EUg3XdS5gLRTG3mFGp/byGBZdniNZ/Ch0= Subject key identifier: A2:DA:50:4D:2B:30:27:28:5D:B6:87:67:0D:AF:77:EE:34:B0:01:92 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD05AC6980769031A9080 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 139.138.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d0:5a:c6:98:07:69:03:1a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d1a01f92-6b99-49c2-b9b8-10660902dbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:84:fb:9b:6f:a1:0b:10:28:d6:6e:33:b9: da:f4:84:81:30:64:23:ad:78:f8:e9:d5:eb:79:c9: 05:05:ff:29:bf:57:f7:f7:02:9f:48:c3:39:ae:49: 14:f5:f6:dd:bf:26:c8:b0:33:1f:50:d0:bc:37:1c: 57:8b:aa:4b:cf:52:f5:e1:87:a3:a2:df:bd:44:10: b8:29:e2:8a:7c:7d:01:05:4a:33:79:1c:50:53:f3: 36:06:0f:5c:50:ad:3a:53:1a:53:16:ad:ca:66:c3: 9f:8a:7c:4c:1f:56:83:19:f4:ff:39:1b:6a:e2:0c: 79:ec:cc:0e:4c:72:f4:fd:26:83:ae:4d:1b:56:8a: d9:ff:cf:9d:fc:e7:d4:12:5a:53:23:1d:25:8e:bc: 0b:b0:97:95:f3:86:42:c9:18:a9:b3:3f:98:a2:14: c7:68:b4:1f:ef:b9:24:c4:84:25:07:20:b4:1e:b8: 51:78:7e:59:f0:78:16:fd:4c:26:cf:96:56:15:18: 9f:30:f6:e3:bb:84:95:06:0f:93:2b:8f:fa:f5:77: 69:9c:6a:2f:d1:ef:f7:11:a7:83:ce:4c:a1:4b:36: 97:a0:2e:51:63:82:09:d3:8a:07:64:d4:cd:15:9b: 7f:7d:fd:fb:ef:7e:38:99:66:49:ab:0f:20:d5:62: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:50:4D:2B:30:27:28:5D:B6:87:67:0D:AF:77:EE:34:B0:01:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8b:3b:6c:fb:8b:f3:25:2c:55:4d:77:49:c4:61:bc:6e:3a: aa:b8:d4:4f:13:b4:12:34:97:80:ff:9e:7e:1b:bc:40:87:6f: bd:d0:18:69:fe:1e:32:15:f9:03:7c:d3:f9:f4:9b:4c:02:d8: 15:62:72:48:82:61:69:20:57:93:dd:9f:15:25:06:93:b5:56: 8c:94:6f:42:42:5c:98:e1:a1:6f:05:76:52:56:a8:a1:91:f8: 15:b7:db:3c:e4:47:f3:6c:b6:f2:ac:57:39:6c:e7:30:7a:3c: c2:19:8f:c2:41:a4:5a:8e:6e:03:24:14:60:b0:99:59:3b:05: ca:17:03:c4:88:2e:52:52:3f:39:39:44:61:74:d6:a7:57:2b: 33:da:f8:9a:7a:1b:eb:a8:58:91:1a:82:0e:5f:73:d2:bd:c5: c2:15:92:04:c4:e6:f6:6d:4d:b4:19:0f:ee:23:99:63:cc:22: e7:49:7e:16:c9:3f:76:84:76:15:25:79:e1:39:12:23:b4:4a: ef:0e:c8:35:fa:87:5b:1b:f0:2d:50:7c:b5:47:f9:10:f6:2d: 9a:c3:0a:1a:8f:3d:a6:bc:74:0b:d3:24:7b:37:d4:db:84:e9: 57:01:59:cc:57:7f:28:69:07:10:b1:68:ce:bb:8d:c4:13:6f: cd:43:f4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9BaxpgHaQMakIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDFhMDFmOTItNmI5OS00OWMyLWI5YjgtMTA2NjA5MDJkYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGaE+5tvoQsQKNZuM7na9ISBMGQjrXj46dXr eckFBf8pv1f39wKfSMM5rkkU9fbdvybIsDMfUNC8NxxXi6pLz1L14Yejot+9RBC4 KeKKfH0BBUozeRxQU/M2Bg9cUK06UxpTFq3KZsOfinxMH1aDGfT/ORtq4gx57MwO THL0/SaDrk0bVorZ/8+d/OfUElpTIx0ljrwLsJeV84ZCyRipsz+YohTHaLQf77kk xIQlByC0HrhReH5Z8HgW/Uwmz5ZWFRifMPbju4SVBg+TK4/69XdpnGov0e/3EaeD zkyhSzaXoC5RY4IJ04oHZNTNFZt/ff377344mWZJqw8g1WLGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLaUE0rMCcoXbaHZw2vd+40sAGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNmNmN2ZlMTEtNjc2YS0z MGEyLTg0YTMtNDZjMDc3NTJhNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByLO2z7i/MlLFVNd0nEYbxuOqq41E8TtBI0l4D/nn4bvECHb73QGGn+ HjIV+QN80/n0m0wC2BVickiCYWkgV5PdnxUlBpO1VoyUb0JCXJjhoW8FdlJWqKGR +BW32zzkR/NstvKsVzls5zB6PMIZj8JBpFqObgMkFGCwmVk7BcoXA8SILlJSPzk5 RGF01qdXKzPa+Jp6G+uoWJEagg5fc9K9xcIVkgTE5vZtTbQZD+4jmWPMIudJfhbJ P3aEdhUleeE5EiO0Su8OyDX6h1sb8C1QfLVH+RD2LZrDChqPPaa8dAvTJHs31NuE 6VcBWcxXfyhpBxCxaM67jcQTb81D9M8= -----END CERTIFICATE-----Generated at Tue May 6 13:06:54 2025 by rpki-client