$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa File: 3e87e11c-8c61-3665-888b-beee4180b6af.roa (raw, json) Hash identifier: krHi2XSCLutvgEWKyIlB04ZL97p7egYC45ufV/mKeuM= Subject key identifier: 6D:8E:35:A1:4D:4B:8B:6D:6D:06:35:26:32:38:6F:01:99:4B:20:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497DA46E4EA9B05C7830E5F040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 63949 IP address blocks: 139.144.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6e:4e:a9:b0:5c:78:30:e5:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=234e5572-e9c5-4d13-bdba-0a27bce95eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:ef:f8:36:81:9a:99:2e:ab:73:3a:40:f6: a4:71:5c:8f:f9:7e:3a:93:f3:3d:90:6a:a3:f4:5a: d6:82:f7:fd:31:eb:51:00:7d:26:3b:2d:c7:3c:82: 58:c3:b3:da:45:89:1d:8d:d9:58:42:ac:b5:dd:c0: c6:99:44:03:95:0c:f0:07:7a:fc:ce:8e:a4:67:80: ad:90:b1:b5:c2:0c:d5:89:4f:e8:00:42:68:d9:e6: 9a:39:b9:29:5f:ab:fe:e2:fc:bb:61:4a:d3:37:14: d0:d4:6e:af:8c:61:78:24:68:0e:fa:1f:d0:1f:71: 56:18:89:81:aa:2c:1a:1c:28:72:da:34:fd:89:44: 91:0d:6b:85:79:e5:37:06:34:de:8d:0f:88:13:c6: 39:eb:12:4e:1c:2c:8d:cb:d0:3c:7c:f1:05:3d:c9: a9:ae:97:98:97:d2:e1:28:4c:e3:16:2b:4a:e8:17: a8:9c:d2:76:74:20:f2:85:0f:7c:6c:b2:21:d1:d5: 57:05:74:ba:15:8b:55:89:b7:d8:d1:47:b1:4c:a0: 67:d5:02:2d:6b:37:9b:ff:5e:2a:da:f2:ed:61:a3: 56:94:64:f9:f1:b8:d3:5d:03:6f:52:c4:e5:a2:52: cc:12:7d:8b:e1:72:74:8c:81:5b:5d:42:05:bc:92: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8E:35:A1:4D:4B:8B:6D:6D:06:35:26:32:38:6F:01:99:4B:20:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a9:f4:15:55:81:01:94:a6:1d:3c:ca:f1:5d:01:53:97:de: 62:5c:ce:d7:35:d2:3e:5c:f7:3a:3f:71:69:87:f4:14:0f:3d: c8:f1:1e:17:95:4f:3b:a9:89:fa:ee:76:38:ff:9a:a2:41:fc: ba:89:47:d8:c7:ac:de:a3:1a:67:f9:a7:35:ca:16:39:1a:d8: 42:f9:4e:4d:15:4e:94:5d:3d:2f:85:54:13:cd:84:e3:8e:37: d6:37:3e:0f:d9:91:ee:d2:45:2e:80:ad:84:1b:be:11:65:5f: e2:34:1d:76:5f:4c:1c:5d:a4:b9:03:b9:b1:40:4e:af:38:1b: a1:da:05:60:1c:e2:7e:03:51:4a:6c:20:34:1f:6f:e5:b3:68: 6a:62:aa:d0:e1:d0:46:27:90:42:6b:42:06:60:d6:33:54:c1: 15:ad:df:48:18:49:ca:11:df:20:47:0a:28:10:bf:86:fc:78: 4f:e5:b7:06:42:e8:ee:51:22:9f:99:01:26:01:1d:73:ed:6d: a2:1c:fc:59:5d:d4:af:6c:43:05:b5:5c:2d:24:1b:70:f1:c0: 40:26:78:be:38:a2:2b:24:65:a0:9e:f5:12:01:4a:3a:b8:ba: 46:c1:04:7a:55:21:6d:5e:5c:a8:cc:39:e7:9b:e0:00:ed:93: 86:ed:4b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pG5OqbBceDDl8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjM0ZTU1NzItZTljNS00ZDEzLWJkYmEtMGEyN2JjZTk1ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPLv+DaBmpkuq3M6QPakcVyP+X46k/M9kGqj 9FrWgvf9MetRAH0mOy3HPIJYw7PaRYkdjdlYQqy13cDGmUQDlQzwB3r8zo6kZ4Ct kLG1wgzViU/oAEJo2eaaObkpX6v+4vy7YUrTNxTQ1G6vjGF4JGgO+h/QH3FWGImB qiwaHChy2jT9iUSRDWuFeeU3BjTejQ+IE8Y56xJOHCyNy9A8fPEFPcmprpeYl9Lh KEzjFitK6BeonNJ2dCDyhQ98bLIh0dVXBXS6FYtVibfY0UexTKBn1QItazeb/14q 2vLtYaNWlGT58bjTXQNvUsTlolLMEn2L4XJ0jIFbXUIFvJJ4aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2ONaFNS4ttbQY1JjI4bwGZSyAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U4N2UxMWMtOGM2MS0z NjY1LTg4OGItYmVlZTQxODBiNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWp9BVVgQGUph08yvFdAVOX3mJcztc10j5c9zo/cWmH9BQPPcjxHheV Tzupifrudjj/mqJB/LqJR9jHrN6jGmf5pzXKFjka2EL5Tk0VTpRdPS+FVBPNhOOO N9Y3Pg/Zke7SRS6ArYQbvhFlX+I0HXZfTBxdpLkDubFATq84G6HaBWAc4n4DUUps IDQfb+WzaGpiqtDh0EYnkEJrQgZg1jNUwRWt30gYScoR3yBHCigQv4b8eE/ltwZC 6O5RIp+ZASYBHXPtbaIc/Fld1K9sQwW1XC0kG3DxwEAmeL44oiskZaCe9RIBSjq4 ukbBBHpVIW1eXKjMOeeb4ADtk4btS9w= -----END CERTIFICATE-----Generated at Sun Apr 27 07:20:56 2025 by rpki-client