$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa File: ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa (raw, json) Hash identifier: 9HXxjAFmsB0AfzcpPdQFhffdNFCuFlOAOKaXkR69s9k= Subject key identifier: EE:20:FD:81:39:13:76:E9:94:D6:58:8C:04:3E:38:D5:49:0D:A9:DB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD04CAAFCC518662C22B8 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 139.138.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d0:4c:aa:fc:c5:18:66:2c:22:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d3cebf00-ba05-43ea-9029-94d5295fa823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:f7:b8:e1:e0:71:c0:ad:08:b8:8d:95:33: 62:d2:7f:93:9b:bc:8b:d9:be:de:19:ba:0c:a4:42: b6:51:13:45:48:d1:b5:c4:12:0d:39:cd:05:6c:11: 91:1f:ca:60:f3:8c:9e:d1:db:87:f9:41:d0:2e:fe: a8:1d:88:e3:09:18:b7:47:81:c6:1c:21:a3:19:39: be:ef:26:73:8d:5d:16:4b:2d:8b:10:7c:87:11:e3: a3:a7:ad:45:8c:1f:34:23:ee:05:f2:5b:c3:75:9a: 84:bd:99:81:8a:2c:44:35:bb:3d:a4:82:c0:80:26: be:bd:2a:f7:90:a5:6a:ff:3c:41:af:16:d7:64:69: 6e:64:bd:2f:c5:2c:14:0f:4b:37:50:4f:9f:66:b7: b1:9f:6e:3e:49:3e:5b:7e:06:09:20:a2:30:68:76: 20:f9:3f:99:36:20:a6:a6:01:d7:9f:f3:b3:b8:fe: a4:b1:76:b6:55:c2:d4:e4:e4:0b:a2:9d:5e:da:d0: 72:8c:c4:c0:9f:64:17:ea:f2:a1:c3:12:c0:91:2c: 9a:d3:6c:bb:ec:99:93:54:8b:c4:97:9c:bd:da:ed: 5b:cc:de:63:ab:0c:86:4f:0f:9a:53:ac:f6:40:2c: 3b:3d:12:7e:44:6e:81:00:24:5f:cb:9f:93:67:bb: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:FD:81:39:13:76:E9:94:D6:58:8C:04:3E:38:D5:49:0D:A9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:cb:f6:f4:6c:ec:eb:a7:23:dd:37:1c:eb:05:29:62:05:fb: c6:43:ca:d7:62:81:70:95:93:1b:a3:9e:2e:1a:8d:5a:ad:1c: 4a:cb:f9:07:51:2d:1e:8d:18:87:2e:4e:1f:0c:93:d3:35:74: 05:e9:89:80:85:53:d5:39:08:5f:f9:e6:46:b2:c1:76:c3:b2: c8:04:f3:e9:a4:e8:5c:b0:5f:0d:61:38:13:99:8e:a3:91:7b: 79:0e:6b:8c:65:82:3b:6a:38:c0:ae:7d:1d:4b:7c:f6:63:65: 65:bd:98:92:81:46:fd:54:a1:a7:f4:2e:c4:c1:2c:9d:39:47: 1a:2b:d7:af:28:43:33:57:33:85:7d:20:c7:fb:5e:4e:d7:2c: 73:5a:31:79:dd:69:aa:a8:81:a4:b5:5f:3e:12:9a:61:87:de: 99:08:1c:26:32:93:53:e0:2c:2b:7c:dc:88:fd:91:aa:ab:64: 74:c8:5a:a7:e0:6d:c4:2f:86:50:84:65:af:93:89:5e:73:d7: 21:80:02:98:68:b0:d2:22:d6:1d:cf:71:37:d6:90:88:5b:4e: 79:8e:82:1e:1d:7a:e1:1e:fd:26:e7:11:e9:fd:61:7c:ed:3a: 41:b3:ec:72:ce:4b:ec:be:27:c7:67:f1:ae:71:bf:68:61:ab: 62:2b:7a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9BMqvzFGGYsIrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDNjZWJmMDAtYmEwNS00M2VhLTkwMjktOTRkNTI5NWZhODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGT3uOHgccCtCLiNlTNi0n+Tm7yL2b7eGboM pEK2URNFSNG1xBINOc0FbBGRH8pg84ye0duH+UHQLv6oHYjjCRi3R4HGHCGjGTm+ 7yZzjV0WSy2LEHyHEeOjp61FjB80I+4F8lvDdZqEvZmBiixENbs9pILAgCa+vSr3 kKVq/zxBrxbXZGluZL0vxSwUD0s3UE+fZrexn24+ST5bfgYJIKIwaHYg+T+ZNiCm pgHXn/OzuP6ksXa2VcLU5OQLop1e2tByjMTAn2QX6vKhwxLAkSya02y77JmTVIvE l5y92u1bzN5jqwyGTw+aU6z2QCw7PRJ+RG6BACRfy5+TZ7vKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4g/YE5E3bplNZYjAQ+ONVJDanbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYWI0M2NmMjAtYjBkYS0z OWI3LTkyYTktOWI1ODIxNjMzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjL9vRs7OunI903HOsFKWIF+8ZDytdigXCVkxujni4ajVqtHErL+QdR LR6NGIcuTh8Mk9M1dAXpiYCFU9U5CF/55kaywXbDssgE8+mk6FywXw1hOBOZjqOR e3kOa4xlgjtqOMCufR1LfPZjZWW9mJKBRv1Uoaf0LsTBLJ05Rxor168oQzNXM4V9 IMf7Xk7XLHNaMXndaaqogaS1Xz4SmmGH3pkIHCYyk1PgLCt83Ij9kaqrZHTIWqfg bcQvhlCEZa+TiV5z1yGAAphosNIi1h3PcTfWkIhbTnmOgh4deuEe/SbnEen9YXzt OkGz7HLOS+y+J8dn8a5xv2hhq2IrelE= -----END CERTIFICATE-----Generated at Mon Apr 28 10:22:05 2025 by rpki-client