$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa File: 6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa (raw, json) Hash identifier: J56PV6M8UoTedpYHpoZVR3t9F+pssACvn+sg7t26eRE= Subject key identifier: 38:B8:80:2A:F1:84:FA:99:98:97:03:74:15:5B:60:B0:9C:AC:E0:CD Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584976A98FFBB16526511F24ADC0 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:fb:b1:65:26:51:1f:24:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=a0c64a43-a740-4960-a51f-b0825b6e92b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:81:bc:f7:07:75:8b:4e:e9:50:01:f3:33: 25:a3:0e:a8:2d:ba:c9:4f:c3:6e:7b:90:b2:25:59: 79:dc:0d:50:13:51:ba:a5:ac:32:0b:0f:81:40:e9: 6a:27:69:31:74:40:8c:d9:a9:29:44:ed:31:e5:82: b5:bd:3a:05:11:81:48:ea:5e:c9:6c:45:04:0e:4c: c8:68:d8:86:09:c3:08:9a:e8:bd:c2:02:3b:99:71: bc:25:fc:ea:8a:33:ab:b4:f4:c0:d1:6a:29:2d:e9: 3e:a0:6d:67:1c:cf:8e:13:eb:ba:99:d6:5e:09:ea: 52:62:34:45:be:0a:e3:c3:d0:5a:61:b4:03:ca:88: 36:49:f3:f6:3e:c0:47:ad:fe:4a:aa:76:1a:61:4d: c5:cc:85:d9:c1:bb:10:9d:6d:10:c9:88:58:5d:9a: 7b:30:a4:ce:45:06:f3:f9:bb:9f:92:66:02:59:e4: 7e:a2:b3:98:27:96:23:60:76:37:4f:45:8c:cb:97: bb:83:f5:b7:9b:34:48:1b:61:63:b6:e0:9e:0c:22: ad:ad:5b:72:e2:cd:80:94:3d:9b:c6:ce:0b:26:12: 21:db:9b:1d:ef:a3:24:1f:e1:66:59:c5:7e:20:46: cc:b8:ad:b7:f7:03:19:1f:03:a0:73:58:42:9a:8d: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B8:80:2A:F1:84:FA:99:98:97:03:74:15:5B:60:B0:9C:AC:E0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:08:38:41:b8:e6:0b:b8:02:c2:20:13:65:97:b0:0c:1d:2d: bf:05:5a:ad:86:65:33:b7:88:6f:4a:49:3b:19:f8:b3:49:f9: 9d:9d:5c:f5:8d:cb:be:42:f5:1e:02:0a:fb:b0:33:7d:fd:ea: 3b:8d:f4:52:9f:e3:8e:59:25:20:d5:aa:f8:d6:7d:19:b1:a0: ac:81:16:6b:63:87:21:d8:ba:31:c0:84:2d:37:29:bd:f9:99: f8:29:00:f7:0a:45:51:32:41:b1:b0:40:c6:4a:b8:d2:aa:e2: 13:ec:52:53:50:d5:46:3e:c7:9e:ca:cd:ab:38:ae:79:a2:9a: f0:3b:db:22:8c:3e:d7:64:83:62:b1:b1:ca:97:86:96:11:0b: b2:59:e3:00:0e:34:9a:bf:78:8e:ea:61:64:e4:89:1f:61:1b: e2:dc:e8:b8:99:c7:f3:2e:ef:a1:04:d9:a9:86:64:a6:2a:16: f0:ae:c7:77:42:47:76:02:8d:6f:da:dd:5f:41:ef:44:2f:ce: ff:da:c6:94:a4:49:9e:25:42:21:26:f1:5f:81:ad:d2:66:be: e0:02:7d:ab:73:74:cb:df:2e:7e:ff:74:15:0a:1c:9f:0c:34: 77:bf:f9:04:69:34:43:d1:4c:10:41:7a:d6:fa:b3:4b:fd:2f: 93:4f:a3:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY/7sWUmUR8krcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk YTBjNjRhNDMtYTc0MC00OTYwLWE1MWYtYjA4MjViNmU5MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqBvPcHdYtO6VAB8zMlow6oLbrJT8Nue5Cy JVl53A1QE1G6pawyCw+BQOlqJ2kxdECM2akpRO0x5YK1vToFEYFI6l7JbEUEDkzI aNiGCcMImui9wgI7mXG8JfzqijOrtPTA0WopLek+oG1nHM+OE+u6mdZeCepSYjRF vgrjw9BaYbQDyog2SfP2PsBHrf5KqnYaYU3FzIXZwbsQnW0QyYhYXZp7MKTORQbz +bufkmYCWeR+orOYJ5YjYHY3T0WMy5e7g/W3mzRIG2FjtuCeDCKtrVty4s2AlD2b xs4LJhIh25sd76MkH+FmWcV+IEbMuK239wMZHwOgc1hCmo1kQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi4gCrxhPqZmJcDdBVbYLCcrODNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvNmE5ZmYyMDQtYjMxZC0z N2Y1LWIyN2UtZDZhYzIwMTBmZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsIOEG45gu4AsIgE2WXsAwdLb8FWq2GZTO3iG9KSTsZ+LNJ+Z2dXPWN y75C9R4CCvuwM3396juN9FKf445ZJSDVqvjWfRmxoKyBFmtjhyHYujHAhC03Kb35 mfgpAPcKRVEyQbGwQMZKuNKq4hPsUlNQ1UY+x57Kzas4rnmimvA72yKMPtdkg2Kx scqXhpYRC7JZ4wAONJq/eI7qYWTkiR9hG+Lc6LiZx/Mu76EE2amGZKYqFvCux3dC R3YCjW/a3V9B70Qvzv/axpSkSZ4lQiEm8V+BrdJmvuACfatzdMvfLn7/dBUKHJ8M NHe/+QRpNEPRTBBBetb6s0v9L5NPo+0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:26 2025 by rpki-client