$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa File: 0a788a24-b681-3c92-b517-2e067d686116.roa (raw, json) Hash identifier: tZbkMF3jgg+1j/5RaHUF+FkhZBajOJjHCSc5AocPJLk= Subject key identifier: 3E:82:25:F6:43:C6:47:D7:3E:51:5A:A1:5E:06:11:60:C3:F9:79:66 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858494CC941F4AD3A19E00F568100 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 53927 IP address blocks: 139.131.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:f4:ad:3a:19:e0:0f:56:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=d0054faa-edb5-4fdd-903e-9920cb75abd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:64:d3:5a:0b:9a:ac:7f:41:77:41:95:4f: 17:9d:7b:05:3f:39:1e:4e:04:7a:4a:e9:17:96:65: e4:c8:f2:82:64:f6:cb:8c:de:a7:52:b0:42:ba:33: 60:27:6a:bc:82:d0:31:b5:95:77:98:fe:1c:7e:f7: 30:13:9b:4e:8e:ce:f2:fe:1c:f1:60:f3:f4:78:c1: 6a:a6:b4:ca:16:b6:bb:ab:fd:d4:35:d6:11:aa:4f: f6:22:a6:ce:cc:df:13:f0:86:42:2a:71:1f:da:db: 7b:b4:09:c1:85:17:4f:28:17:a4:f9:84:06:05:09: e4:53:bb:b3:c2:79:6c:34:a3:db:08:6b:ee:a5:5c: 84:2d:a3:50:e3:db:a5:e8:ed:5a:21:26:be:c9:11: 56:27:1f:11:5c:b2:29:6b:62:7a:3f:0e:ae:64:9b: 23:9e:30:ce:a4:6b:1c:d4:c0:50:42:67:eb:13:61: 68:f4:e4:cb:e7:c9:46:af:83:d1:41:e5:8a:0b:f2: 40:8d:f1:99:b0:40:16:2e:0b:6e:93:76:38:9d:61: e4:9f:79:50:a2:8f:29:1d:47:3a:c9:34:6c:30:ff: 10:68:7f:f4:37:fe:56:70:cf:8b:18:ed:14:f8:88: 9c:a8:50:2c:c3:32:60:84:83:69:27:54:8d:c7:be: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:82:25:F6:43:C6:47:D7:3E:51:5A:A1:5E:06:11:60:C3:F9:79:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d1:84:f0:31:2e:5f:18:74:3a:5e:ae:d6:bc:00:b6:31:50: a1:51:d8:b8:a9:8e:02:0c:01:ff:7a:ff:cd:2f:b5:b8:b4:d0: a2:f4:03:e0:91:42:70:77:c8:40:16:90:30:6a:d4:67:c5:1d: 3f:fc:37:a1:0a:8c:8d:42:11:0a:4c:fc:ee:f1:37:f6:af:b5: fe:f1:66:22:89:f2:de:fd:08:58:21:4d:e5:ef:bf:43:c0:8b: 5a:ff:e7:fd:fa:90:ad:8a:dc:e5:6b:81:d6:ae:4c:3f:d6:d4: 94:a7:98:e9:08:3a:47:cd:7b:37:c6:a6:13:4b:95:c5:50:18: 9e:d0:b6:91:42:7f:58:5f:9c:b4:cc:bf:e5:cf:f2:6a:9b:a0: 79:aa:b8:61:71:e5:3f:07:15:5e:c3:a7:b5:2f:d6:b0:15:8d: 7d:fc:47:00:14:91:39:d7:3d:85:7b:ab:d0:ac:5c:7d:9a:ba: 0a:94:6f:f9:b9:08:72:18:2a:5b:cd:57:86:5e:3e:5a:8d:25: 3a:f6:b0:25:95:a6:dd:99:ba:00:c5:a7:e5:ae:cc:b8:95:94: fe:4e:c8:c0:92:22:48:02:1b:b8:26:2d:32:af:14:49:82:d3: 97:64:ac:0e:63:5d:0e:5b:c1:e7:7c:eb:1e:41:80:ed:7c:a1: 2d:f8:e0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUH0rToZ4A9WgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDAwNTRmYWEtZWRiNS00ZmRkLTkwM2UtOTkyMGNiNzVhYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2hk01oLmqx/QXdBlU8XnXsFPzkeTgR6SukX lmXkyPKCZPbLjN6nUrBCujNgJ2q8gtAxtZV3mP4cfvcwE5tOjs7y/hzxYPP0eMFq prTKFra7q/3UNdYRqk/2IqbOzN8T8IZCKnEf2tt7tAnBhRdPKBek+YQGBQnkU7uz wnlsNKPbCGvupVyELaNQ49ul6O1aISa+yRFWJx8RXLIpa2J6Pw6uZJsjnjDOpGsc 1MBQQmfrE2Fo9OTL58lGr4PRQeWKC/JAjfGZsEAWLgtuk3Y4nWHkn3lQoo8pHUc6 yTRsMP8QaH/0N/5WcM+LGO0U+IicqFAswzJghINpJ1SNx75l5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6CJfZDxkfXPlFaoV4GEWDD+XlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMGE3ODhhMjQtYjY4MS0z YzkyLWI1MTctMmUwNjdkNjg2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfRhPAxLl8YdDperta8ALYxUKFR2LipjgIMAf96/80vtbi00KL0A+CR QnB3yEAWkDBq1GfFHT/8N6EKjI1CEQpM/O7xN/avtf7xZiKJ8t79CFghTeXvv0PA i1r/5/36kK2K3OVrgdauTD/W1JSnmOkIOkfNezfGphNLlcVQGJ7QtpFCf1hfnLTM v+XP8mqboHmquGFx5T8HFV7Dp7Uv1rAVjX38RwAUkTnXPYV7q9CsXH2augqUb/m5 CHIYKlvNV4ZePlqNJTr2sCWVpt2ZugDFp+WuzLiVlP5OyMCSIkgCG7gmLTKvFEmC 05dkrA5jXQ5bwed86x5BgO18oS344F0= -----END CERTIFICATE-----Generated at Tue Apr 29 09:30:59 2025 by rpki-client