$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa File: a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json) Hash identifier: Ye8ol3bHWBeL3QQ4RGL4IErKfMTQbB7K+EQVjhda8QQ= Subject key identifier: 9A:24:09:7B:31:FB:C2:98:61:DE:C2:4D:85:9A:9D:C1:64:DB:E1:55 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858494E2EB36D4B389C5DFA2362A0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 30215 IP address blocks: 139.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b3:6d:4b:38:9c:5d:fa:23:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=9fcdaa4c-2938-4fe2-930c-1000fc4237c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:5f:b0:95:dc:40:22:bb:0a:03:3d:09:c0: 0a:14:62:84:d9:56:a5:0d:7b:ca:07:96:15:b0:1a: 0b:e0:e4:f1:4b:33:0c:3b:9c:8d:25:a6:00:c4:65: 11:05:b7:65:72:c6:26:17:5d:3b:8e:1b:7b:a5:1e: c9:32:4a:bc:68:78:f8:13:6a:5a:94:a8:03:3b:b1: ee:0e:65:ee:fb:34:05:3c:d1:ec:98:b9:e3:0f:ec: ad:fa:63:dd:c8:b4:d3:91:2f:11:95:dd:03:da:6f: 3e:ba:36:b9:62:f6:f0:4a:f5:84:7d:1b:01:6a:72: 6f:c7:18:89:a4:69:03:13:fe:79:23:c6:ac:82:28: 05:b1:69:67:86:f2:a8:81:c6:6b:6a:a2:be:b8:b2: 5f:eb:b7:81:22:41:2b:08:6e:c0:6c:48:5d:67:67: 6a:cf:d1:3f:8f:0d:2e:a4:e0:7c:76:60:ac:58:7b: 79:95:3d:48:4d:be:ba:0e:cd:74:67:61:f4:50:4f: d4:91:f9:dc:80:82:6d:48:9e:46:6e:d4:e2:49:c9: be:a2:79:19:81:fb:d4:30:33:15:3c:eb:9c:44:5d: 41:f0:c3:d0:0a:d7:27:70:18:a0:e3:8d:24:30:5e: 6f:f0:db:0e:43:8d:1f:90:da:f0:b0:29:f1:aa:c4: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:09:7B:31:FB:C2:98:61:DE:C2:4D:85:9A:9D:C1:64:DB:E1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ee:c4:e8:93:bb:87:99:6a:61:c1:c1:93:00:d5:42:be:4d: ed:ba:28:2f:6e:b3:ae:3e:8c:1d:7a:0a:3e:9e:f4:1e:c5:77: 0c:94:69:96:e3:a3:ee:34:5c:41:94:59:fd:4f:33:33:3f:a2: 50:db:de:8c:4a:3f:b5:0f:82:94:b0:2c:f9:60:5d:a1:92:09: 1b:4e:46:17:03:41:2d:55:0c:bd:b6:79:ea:0c:cc:9d:88:19: 37:de:d9:8d:b9:31:ca:b2:8a:77:04:d3:1b:41:55:49:5a:f4: 52:a8:df:f1:02:78:4b:ca:40:77:a4:d3:d3:fc:3e:e8:e2:e7: 45:20:79:2f:40:2e:42:8f:aa:84:31:26:e8:20:01:e5:1b:d2: 7c:d8:79:59:66:d1:76:90:da:a3:c7:4e:18:2c:61:01:f5:80: 7e:e2:9b:f4:58:d5:f8:fe:da:58:d1:24:57:15:25:e4:39:61: bb:4d:51:4e:7b:69:a5:5c:7c:50:f0:42:8f:f7:cc:62:92:81: fd:9c:6d:de:cd:fc:d1:23:9a:88:f5:90:28:37:22:9a:54:b0: 47:6d:4b:4a:e8:00:5e:ce:83:d3:c6:b9:38:d7:e0:57:34:38: 81:70:be:35:1d:31:bc:69:81:5e:3d:1e:09:75:36:6c:2d:ca: 0a:3c:e4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrNtSzicXfojYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OWZjZGFhNGMtMjkzOC00ZmUyLTkzMGMtMTAwMGZjNDIzN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNFfsJXcQCK7CgM9CcAKFGKE2ValDXvKB5YV sBoL4OTxSzMMO5yNJaYAxGURBbdlcsYmF107jht7pR7JMkq8aHj4E2palKgDO7Hu DmXu+zQFPNHsmLnjD+yt+mPdyLTTkS8Rld0D2m8+uja5YvbwSvWEfRsBanJvxxiJ pGkDE/55I8asgigFsWlnhvKogcZraqK+uLJf67eBIkErCG7AbEhdZ2dqz9E/jw0u pOB8dmCsWHt5lT1ITb66Ds10Z2H0UE/UkfncgIJtSJ5GbtTiScm+onkZgfvUMDMV POucRF1B8MPQCtcncBig440kMF5v8NsOQ40fkNrwsCnxqsQn9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJokCXsx+8KYYd7CTYWancFk2+FVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTM1OWQ5YWEtNTA4My0z MjVhLTg3ZTQtNmIyODVhODdlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3uxOiTu4eZamHBwZMA1UK+Te26KC9us64+jB16Cj6e9B7FdwyUaZbj o+40XEGUWf1PMzM/olDb3oxKP7UPgpSwLPlgXaGSCRtORhcDQS1VDL22eeoMzJ2I GTfe2Y25McqyincE0xtBVUla9FKo3/ECeEvKQHek09P8Puji50UgeS9ALkKPqoQx JuggAeUb0nzYeVlm0XaQ2qPHThgsYQH1gH7im/RY1fj+2ljRJFcVJeQ5YbtNUU57 aaVcfFDwQo/3zGKSgf2cbd7N/NEjmoj1kCg3IppUsEdtS0roAF7Og9PGuTjX4Fc0 OIFwvjUdMbxpgV49Hgl1Nmwtygo85Jw= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:36 2025 by rpki-client