$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa File: 32a203ee-55ea-3425-bf43-24b1958aa53b.roa (raw, json) Hash identifier: IGSVQqYEVBOnESrXgn/nsdghJnFvmvJu2RePDuzWQPs= Subject key identifier: 50:E7:EB:0E:E3:07:46:2A:70:78:D6:41:60:61:C3:9D:07:0F:D8:31 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE9883AEEB19D41B583EA0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 139.138.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:98:83:ae:eb:19:d4:1b:58:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=904ac9af-af89-47be-b20e-33f815afb1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:66:09:2e:93:f3:5c:ff:25:90:8b:07:70: 6c:6e:87:a1:3b:43:5a:3b:b7:5c:d9:bb:c2:07:5d: b0:3b:94:9b:dc:b3:c4:ec:dc:31:24:63:15:a8:2a: 31:5f:f9:b8:dd:d1:8c:88:d4:f1:59:7d:44:42:85: b2:cd:94:24:e4:3b:b6:f1:b2:53:33:92:93:dc:17: 71:67:cc:3e:a4:39:41:3a:79:f1:2b:34:27:7f:4f: 69:73:18:14:13:f7:76:6d:a4:7e:42:f8:c5:4c:a3: ad:59:c5:30:36:37:2a:7c:37:42:7c:11:9f:f0:f2: ea:84:13:ae:47:7a:93:a8:ec:c7:21:b3:a2:d7:c9: 24:cb:9d:82:63:23:2c:41:f7:e9:73:a3:30:ed:e4: fc:83:1e:c5:04:9f:a2:85:dc:4b:1d:36:b3:d8:c2: bd:20:ae:70:6a:54:55:82:af:a4:73:2f:b9:eb:71: 97:53:35:2a:78:fa:ad:a8:5a:10:92:51:b2:e6:b4: 15:ab:2d:3d:a1:8a:a2:1e:51:ad:fc:0d:51:41:e7: 9a:51:99:b1:9d:5b:2c:fc:d8:f7:ea:57:5f:8c:2c: 8a:80:e2:6d:7a:73:c9:44:5a:ad:b9:b0:da:83:39: 07:d4:fa:93:7b:73:09:85:9f:71:05:38:0c:c2:d9: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E7:EB:0E:E3:07:46:2A:70:78:D6:41:60:61:C3:9D:07:0F:D8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6a:79:84:cf:f6:bd:c6:26:f4:0f:f6:58:b5:00:bc:6d:70: 25:10:68:8f:dc:fb:e5:6c:46:dd:0b:39:52:f1:dc:14:b6:de: fa:ef:5c:b0:75:da:24:43:51:38:57:2a:f6:35:a6:43:26:7f: ba:a8:12:71:ad:42:93:88:8b:92:aa:c5:9b:0d:bb:fa:90:ea: 22:7e:d5:6d:dc:96:f8:9a:18:67:44:02:3f:9a:48:98:f5:62: 66:3f:0e:28:c2:02:bc:82:89:af:10:40:9d:47:25:16:51:46: b8:65:d0:42:fe:ab:1f:4b:70:14:44:0e:fe:1d:ad:17:c6:76: 69:48:3e:54:fc:d7:1d:d8:7c:0c:b1:01:e8:17:e7:82:ce:54: b6:e1:f6:cf:dc:8a:85:6b:78:7f:51:12:7d:7c:5b:86:15:18: e4:b3:2f:f0:88:fc:23:65:37:92:ea:c5:4f:b3:43:4b:50:e5: d9:d8:ec:ad:93:d4:05:91:53:65:67:71:80:61:5c:b3:04:a5: b5:76:2f:1c:80:c8:5c:6b:13:18:b2:a3:4e:f9:f3:6b:2d:84: 24:b5:12:e8:7d:06:2d:e1:b5:80:fc:3a:be:b9:e1:3a:a9:5c: 44:38:ad:1e:02:31:e2:8a:65:ce:23:19:0a:98:29:3b:7c:56: d1:13:86:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpiDrusZ1BtYPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTA0YWM5YWYtYWY4OS00N2JlLWIyMGUtMzNmODE1YWZiMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMxmCS6T81z/JZCLB3BsboehO0NaO7dc2bvC B12wO5Sb3LPE7NwxJGMVqCoxX/m43dGMiNTxWX1EQoWyzZQk5Du28bJTM5KT3Bdx Z8w+pDlBOnnxKzQnf09pcxgUE/d2baR+QvjFTKOtWcUwNjcqfDdCfBGf8PLqhBOu R3qTqOzHIbOi18kky52CYyMsQffpc6Mw7eT8gx7FBJ+ihdxLHTaz2MK9IK5walRV gq+kcy+563GXUzUqePqtqFoQklGy5rQVqy09oYqiHlGt/A1RQeeaUZmxnVss/Nj3 6ldfjCyKgOJtenPJRFqtubDagzkH1PqTe3MJhZ9xBTgMwtnosQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDn6w7jB0YqcHjWQWBhw50HD9gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzJhMjAzZWUtNTVlYS0z NDI1LWJmNDMtMjRiMTk1OGFhNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhqeYTP9r3GJvQP9li1ALxtcCUQaI/c++VsRt0LOVLx3BS23vrvXLB1 2iRDUThXKvY1pkMmf7qoEnGtQpOIi5KqxZsNu/qQ6iJ+1W3clviaGGdEAj+aSJj1 YmY/DijCAryCia8QQJ1HJRZRRrhl0EL+qx9LcBREDv4drRfGdmlIPlT81x3YfAyx AegX54LOVLbh9s/cioVreH9REn18W4YVGOSzL/CI/CNlN5LqxU+zQ0tQ5dnY7K2T 1AWRU2VncYBhXLMEpbV2LxyAyFxrExiyo07582sthCS1Euh9Bi3htYD8Or654Tqp XEQ4rR4CMeKKZc4jGQqYKTt8VtEThjY= -----END CERTIFICATE-----Generated at Tue Apr 29 08:31:52 2025 by rpki-client