$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa File: 4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json) Hash identifier: 9avDq94tIspM1AOCi0zQ8kvVvNP0JIcrp/HrG9A1g54= Subject key identifier: 98:0A:35:71:A8:41:D6:BA:ED:4B:C0:38:3E:7C:3D:C0:EC:AA:14:31 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584902EBFA625F74F00B17902120 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14297 IP address blocks: 139.131.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fa:62:5f:74:f0:0b:17:90:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=c8673207-7518-4363-8c64-3e7bbbd98fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:f0:3b:f9:98:95:7c:f6:0f:f4:3f:71:fe: bb:95:35:ce:5e:89:13:5d:36:06:28:49:16:f5:f9: b0:b2:ea:ff:c0:d0:28:2c:6a:5c:f7:24:b6:1a:a2: 56:76:1c:11:13:29:cd:bc:ae:72:81:bd:e4:f6:80: 61:42:f4:66:10:5f:f9:00:d9:86:ad:1c:f0:92:05: 87:23:13:f2:23:51:38:ad:3a:87:30:0c:d2:9d:7e: 06:11:28:f2:1d:ee:89:93:aa:18:4e:9a:74:fe:91: dd:c1:f3:72:f5:2a:55:c6:3a:41:42:1e:40:3d:9e: bc:e7:b3:ab:55:54:e5:55:09:19:6d:18:67:f6:6e: 52:93:ad:fd:40:00:88:9a:be:ae:d7:23:b9:de:60: 8f:7c:74:b4:f5:ae:9c:92:90:28:6c:7e:28:f8:23: 8a:60:fd:f5:79:54:6a:bb:66:1b:0b:e8:08:70:6d: fc:a7:c3:95:c9:4a:ef:f5:47:5c:b3:67:fd:18:ce: 85:2f:db:bc:72:8e:9e:96:d3:87:d1:b0:02:54:a1: 71:31:ca:70:e0:4d:d1:60:78:d8:73:05:c0:1f:2d: a9:08:fd:ca:ab:15:71:13:56:9a:28:49:0e:71:57: cc:92:00:b0:a3:9f:6e:2b:68:ef:a6:73:42:48:35: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:35:71:A8:41:D6:BA:ED:4B:C0:38:3E:7C:3D:C0:EC:AA:14:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:11:98:a6:77:9b:7a:6d:5b:b0:2e:d4:2e:5d:97:94:05:c9: 69:4d:52:d7:64:7a:75:5c:57:e7:d5:ca:79:c9:2b:7a:81:41: 81:56:e4:02:ea:27:3b:18:67:31:f0:04:dd:e4:de:d5:30:3d: 34:12:e0:10:e8:e4:81:3b:87:d1:28:b7:d7:f5:94:ef:f3:22: d3:39:d5:0f:f3:5e:46:14:ee:91:84:96:64:ec:60:e5:66:31: 1a:05:ee:e7:b1:bc:0a:71:be:d6:58:70:64:81:6f:19:88:e9: 32:cd:62:6e:90:15:52:d2:d0:71:28:35:bb:fc:15:fc:c5:47: fe:58:87:68:cb:5a:92:b3:03:ff:c9:e3:e1:51:9e:bd:00:9a: 30:7d:f6:72:ec:bb:87:bb:4a:4e:06:5e:7d:fe:73:e8:6f:09: 6e:91:3d:21:fd:e9:b3:dc:7c:74:52:f2:33:4b:ef:69:21:6b: 6c:66:2d:a1:8e:9d:aa:c9:82:7e:58:9d:61:0f:27:3c:bf:58: 5b:5d:82:e3:e7:08:84:0f:55:30:b9:5d:0e:36:f5:71:6e:72: d4:dc:9a:cd:27:bd:50:54:e6:37:de:82:a0:40:47:87:f3:e2: 3e:11:d7:1b:94:c3:86:6c:52:56:08:65:86:b9:85:07:f4:0d: 4f:f7:07:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/piX3TwCxeQISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Yzg2NzMyMDctNzUxOC00MzYzLThjNjQtM2U3YmJiZDk4ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXwO/mYlXz2D/Q/cf67lTXOXokTXTYGKEkW 9fmwsur/wNAoLGpc9yS2GqJWdhwREynNvK5ygb3k9oBhQvRmEF/5ANmGrRzwkgWH IxPyI1E4rTqHMAzSnX4GESjyHe6Jk6oYTpp0/pHdwfNy9SpVxjpBQh5APZ6857Or VVTlVQkZbRhn9m5Sk639QACImr6u1yO53mCPfHS09a6ckpAobH4o+COKYP31eVRq u2YbC+gIcG38p8OVyUrv9Udcs2f9GM6FL9u8co6eltOH0bACVKFxMcpw4E3RYHjY cwXAHy2pCP3KqxVxE1aaKEkOcVfMkgCwo59uK2jvpnNCSDUybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgKNXGoQda67UvAOD58PcDsqhQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGQyZTExNTMtMzNmOS0z ZDcwLWEyZDEtZGM5NTQ1MzIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4RmKZ3m3ptW7Au1C5dl5QFyWlNUtdkenVcV+fVynnJK3qBQYFW5ALq JzsYZzHwBN3k3tUwPTQS4BDo5IE7h9Eot9f1lO/zItM51Q/zXkYU7pGElmTsYOVm MRoF7uexvApxvtZYcGSBbxmI6TLNYm6QFVLS0HEoNbv8FfzFR/5Yh2jLWpKzA//J 4+FRnr0AmjB99nLsu4e7Sk4GXn3+c+hvCW6RPSH96bPcfHRS8jNL72kha2xmLaGO narJgn5YnWEPJzy/WFtdguPnCIQPVTC5XQ429XFuctTcms0nvVBU5jfegqBAR4fz 4j4R1xuUw4ZsUlYIZYa5hQf0DU/3B8w= -----END CERTIFICATE-----Generated at Mon Apr 28 10:35:56 2025 by rpki-client