$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa File: ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa (raw, json) Hash identifier: 2hZyMmtc2hZ7uTbqOEKRpLNo+Uz4RksYd9QOT0nO2Rc= Subject key identifier: D3:D1:3B:46:40:45:8E:DD:0F:6D:88:86:2F:D7:89:99:25:4A:7B:89 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD073BD082A1504CD6200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 139.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d0:73:bd:08:2a:15:04:cd:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=55819cf3-21ec-4745-a2d1-a234f8cf6806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:8f:91:31:49:72:f9:e8:c5:e8:ba:03:0b: d3:83:8c:a3:6f:01:73:ee:98:4e:62:26:c2:af:a0: a1:a1:47:5e:8e:19:2b:6f:d6:3c:51:af:83:df:c9: 0a:94:cc:6d:e3:6e:37:19:84:0a:f0:11:26:b5:a7: 53:7f:55:3a:78:56:6f:03:1e:30:05:18:3f:b4:1a: 8a:2e:e4:58:df:f8:69:9e:fd:94:55:74:2d:da:5e: 5b:e7:22:9b:f3:d1:b1:aa:0f:37:0c:b0:f2:e0:de: cf:78:cf:35:4c:16:c0:7a:2b:b9:d2:1d:1a:a4:9b: 25:a3:0e:96:0f:dc:97:dd:1c:2e:c1:95:34:a8:e1: 57:30:93:e4:f3:f0:6a:fe:6f:22:69:2d:71:33:b9: 49:e7:92:86:62:14:b9:67:f6:14:9c:79:c5:c6:52: 96:33:af:7a:ac:bc:de:03:82:a4:9f:47:14:8c:e3: 1b:c0:23:71:b8:95:62:61:a6:87:02:9a:85:d3:a7: 13:e5:31:e0:ad:3f:8b:ef:28:7f:95:48:20:a9:1a: 7a:c0:0a:f4:87:04:4f:c1:ab:1e:af:60:0c:7c:f0: c8:8b:a1:a7:3b:7e:20:1e:3a:1f:09:b3:7f:1e:a8: 62:14:7e:4e:93:e5:8e:11:67:f9:17:bf:ca:15:c7: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:3B:46:40:45:8E:DD:0F:6D:88:86:2F:D7:89:99:25:4A:7B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:02:2c:60:3f:3f:8f:48:4c:16:c4:86:44:c3:0b:f7:81:fd: 32:61:4c:98:ed:09:b7:76:a8:6f:a3:1c:a0:ae:51:04:17:dd: e4:42:ea:ec:39:d1:c5:2e:40:55:94:a6:25:2e:ee:2b:15:4a: af:cf:9d:f4:ec:fc:43:7d:29:29:cc:0e:bb:8e:30:d6:e0:a5: 74:fb:8a:ab:82:32:80:b2:d0:c2:c4:0e:15:fb:1a:9a:b4:68: f9:3e:46:0a:ad:bc:c2:f2:ee:56:39:12:59:44:f3:36:f5:8b: 30:49:c4:cb:1a:22:d4:f5:e1:87:24:6a:e4:47:63:64:85:e1: 59:9e:b3:0c:9f:34:cd:8a:cc:a9:3f:de:ef:dd:4c:68:06:b4: a4:f4:a7:cd:cf:bf:45:f6:55:be:2d:e2:53:b4:4e:67:22:fc: a8:2b:56:e1:e8:dd:6f:35:45:a4:30:35:3f:5e:21:66:81:f6: ff:c1:a4:68:6e:fe:2d:e7:c8:b4:29:29:85:c5:05:9e:b9:33: 31:39:cc:df:15:2d:5f:92:30:b1:10:63:fd:10:8c:a9:aa:02: 55:d7:7f:94:48:c0:93:fb:04:7b:f2:ae:74:91:4f:e6:92:e1: 05:12:21:ab:f0:f0:3f:4d:7e:e9:28:77:24:64:1a:ce:a4:8c: 01:5f:a0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9BzvQgqFQTNYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NTU4MTljZjMtMjFlYy00NzQ1LWEyZDEtYTIzNGY4Y2Y2ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWWPkTFJcvnoxei6AwvTg4yjbwFz7phOYibC r6ChoUdejhkrb9Y8Ua+D38kKlMxt4243GYQK8BEmtadTf1U6eFZvAx4wBRg/tBqK LuRY3/hpnv2UVXQt2l5b5yKb89Gxqg83DLDy4N7PeM81TBbAeiu50h0apJslow6W D9yX3RwuwZU0qOFXMJPk8/Bq/m8iaS1xM7lJ55KGYhS5Z/YUnHnFxlKWM696rLze A4Kkn0cUjOMbwCNxuJViYaaHApqF06cT5THgrT+L7yh/lUggqRp6wAr0hwRPwase r2AMfPDIi6GnO34gHjofCbN/HqhiFH5Ok+WOEWf5F7/KFcfqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPRO0ZARY7dD22Ihi/XiZklSnuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmExOTU5Y2EtYzU1Ni0z YTBjLTk0MWItMTNlOGI1ZjlhYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoCLGA/P49ITBbEhkTDC/eB/TJhTJjtCbd2qG+jHKCuUQQX3eRC6uw5 0cUuQFWUpiUu7isVSq/PnfTs/EN9KSnMDruOMNbgpXT7iquCMoCy0MLEDhX7Gpq0 aPk+RgqtvMLy7lY5EllE8zb1izBJxMsaItT14YckauRHY2SF4VmeswyfNM2KzKk/ 3u/dTGgGtKT0p83Pv0X2Vb4t4lO0Tmci/KgrVuHo3W81RaQwNT9eIWaB9v/BpGhu /i3nyLQpKYXFBZ65MzE5zN8VLV+SMLEQY/0QjKmqAlXXf5RIwJP7BHvyrnSRT+aS 4QUSIavw8D9NfukodyRkGs6kjAFfoFk= -----END CERTIFICATE-----Generated at Mon Apr 28 15:06:21 2025 by rpki-client