$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa File: aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa (raw, json) Hash identifier: 4Llbt0hL9Z2N6ODuVidPwnHtHPrhAx8i4s1iOQd0Sxc= Subject key identifier: BE:4D:E4:A2:E5:94:5E:9E:0E:AB:EC:B1:F9:48:E5:5F:EA:A3:F5:62 Certificate issuer: /CN=2805bc8b-434a-454a-85db-2fe9075e8548 Certificate serial: 010D0C9F43285849C4D4BD8BBDD0AA869A4EBF80 Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 139.60.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bd:8b:bd:d0:aa:86:9a:4e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d66bb4b7-4ddc-4d91-b821-da789866e717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:13:7f:bb:4c:47:9e:3e:46:ae:5e:67:48: 5d:35:0e:31:bb:f2:df:1c:ee:71:d4:06:73:da:ea: 78:14:f3:e0:10:ec:29:2f:19:5b:30:14:80:92:db: 6a:3c:23:2e:00:f2:63:df:2c:d7:2d:64:5e:1f:89: 72:d2:39:86:5a:ce:35:3a:b3:8b:7c:eb:72:b2:2d: 3d:ad:44:ae:dd:b0:2a:8d:13:90:c0:54:45:aa:a0: 37:2f:b3:af:7a:c8:fc:1f:18:97:f3:a1:c4:dc:47: ed:7a:37:90:6e:4a:1b:d9:16:f1:0d:f1:ea:88:52: 02:f1:49:92:94:c2:72:cb:31:03:67:89:95:00:28: 2f:9b:c1:ea:a4:ae:11:04:ee:98:80:0a:51:cc:17: d7:d5:62:b4:4f:a7:2d:e3:fe:32:54:ea:2d:da:26: fa:a0:33:04:e2:35:9d:27:42:66:33:8f:c3:53:27: a7:b2:a2:99:1d:89:2f:79:75:67:cf:d7:d9:f0:8f: 7d:b8:fd:08:0e:9b:b2:f2:42:4d:b3:85:01:18:53: b7:3d:95:d2:b2:bf:0d:0a:b3:87:a7:6f:73:08:2e: b7:88:03:42:e7:0a:a1:e2:d7:7b:99:86:47:63:75: 7b:5f:99:79:73:1b:e1:c5:c4:5d:04:d5:c3:c0:d4: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4D:E4:A2:E5:94:5E:9E:0E:AB:EC:B1:F9:48:E5:5F:EA:A3:F5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/aee20d71-0e7d-3df5-a1aa-897f5fcdfe60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl X509v3 Authority Key Identifier: keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer sbgp-ipAddrBlock: critical IPv4: 139.60.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:74:03:64:7a:a7:52:b4:e6:a1:00:f4:f2:84:aa:ab:ec:b2: 6f:8f:a1:e9:f6:69:48:20:3c:ea:8f:23:df:45:23:a9:14:dd: 33:5d:f6:4f:f7:6e:a9:5a:4f:e8:69:10:16:fa:af:b2:73:ee: 56:4c:2c:22:4a:9b:74:85:d9:ee:91:05:77:ae:7d:ff:01:24: 6a:07:ca:3d:35:4a:5e:a5:10:28:4f:6d:2c:3a:62:93:b7:16: 15:fd:de:11:e1:66:00:6c:83:08:91:1d:b6:7f:9a:c6:07:31: 8d:a7:bf:94:8c:58:19:c5:38:7a:5d:b7:d0:5b:58:2b:8c:61: 0b:55:0a:11:ee:fb:44:6d:6f:db:fc:cd:02:4a:71:14:83:fa: 3b:9e:f8:20:97:d3:5f:29:54:8d:95:c8:97:f2:9e:4c:57:d1: c0:62:cf:9a:e4:27:0a:f8:51:13:ff:48:67:99:7d:38:02:c1: 34:e5:0a:5a:21:04:48:50:59:f6:52:5e:90:c7:c0:56:91:07: 25:8d:f1:b5:0f:c9:4e:a4:e6:11:d3:49:aa:a5:7f:aa:2f:43: a8:a6:8c:07:88:2e:9b:78:fb:b9:0d:77:35:75:98:fd:d5:79: c5:01:87:51:67:35:83:23:7b:42:0d:53:df:66:24:80:1a:36: 9d:63:a5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1L2LvdCqhppOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwNWJjOGItNDM0YS00NTRhLTg1ZGItMmZlOTA3NWU4 NTQ4MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDY2YmI0YjctNGRkYy00ZDkxLWI4MjEtZGE3ODk4NjZlNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEoTf7tMR54+Rq5eZ0hdNQ4xu/LfHO5x1AZz 2up4FPPgEOwpLxlbMBSAkttqPCMuAPJj3yzXLWReH4ly0jmGWs41OrOLfOtysi09 rUSu3bAqjROQwFRFqqA3L7Ovesj8HxiX86HE3EftejeQbkob2RbxDfHqiFIC8UmS lMJyyzEDZ4mVACgvm8HqpK4RBO6YgApRzBfX1WK0T6ct4/4yVOot2ib6oDME4jWd J0JmM4/DUyensqKZHYkveXVnz9fZ8I99uP0IDpuy8kJNs4UBGFO3PZXSsr8NCrOH p29zCC63iANC5wqh4td7mYZHY3V7X5l5cxvhxcRdBNXDwNQBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5N5KLllF6eDqvssflI5V/qo/ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1 YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5MDc1ZTg1NDgvYWVlMjBkNzEtMGU3ZC0z ZGY1LWExYWEtODk3ZjVmY2RmZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjgwNWJjOGItNDM0YS00NTRhLTg1 ZGItMmZlOTA3NWU4NTQ4LzI4MDViYzhiLTQzNGEtNDU0YS04NWRiLTJmZTkwNzVl ODU0OC5jcmwwHwYDVR0jBBgwFoAUqb0VXP54V+vKV3bJUl/3V7wi31QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5 MDc1ZTg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ10A2R6p1K05qEA9PKEqqvssm+Poen2aUggPOqPI99FI6kU3TNd9k/3 bqlaT+hpEBb6r7Jz7lZMLCJKm3SF2e6RBXeuff8BJGoHyj01Sl6lEChPbSw6YpO3 FhX93hHhZgBsgwiRHbZ/msYHMY2nv5SMWBnFOHpdt9BbWCuMYQtVChHu+0Rtb9v8 zQJKcRSD+jue+CCX018pVI2VyJfynkxX0cBiz5rkJwr4URP/SGeZfTgCwTTlCloh BEhQWfZSXpDHwFaRByWN8bUPyU6k5hHTSaqlf6ovQ6imjAeILpt4+7kNdzV1mP3V ecUBh1FnNYMje0INU99mJIAaNp1jpdc= -----END CERTIFICATE-----Generated at Sun Jun 15 00:07:23 2025 by rpki-client