$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa File: 34356c57-8521-34f3-a43c-872918075c40.roa (raw, json) Hash identifier: MH8P2zbu96s+yfApKuuVVGGd58Fxd94HMK8xOUgALTE= Subject key identifier: 92:8C:27:52:02:DE:D1:71:B9:B2:7F:EA:AF:9D:05:C9:57:C6:45:02 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F432858497279AB6B1A0D2F8F42149C00 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 8075 IP address blocks: 138.128.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ab:6b:1a:0d:2f:8f:42:14:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=c58c9df7-cd8e-4645-b51c-35ade1b58e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:09:d0:c2:03:44:9c:7a:7a:b1:c4:1e:8b: 1a:eb:02:f3:f1:a6:93:e8:8c:b8:01:15:3d:51:8a: fc:99:45:e4:dc:3e:c9:c5:57:6f:16:ed:55:b3:a1: 4a:09:1e:2a:94:9c:94:e3:7c:bf:06:93:95:e5:a6: 34:1a:4f:39:1d:b1:58:9e:8e:65:0f:83:f1:ef:7d: 40:c8:fd:5d:11:24:e3:bb:d2:d4:e5:6f:d1:c7:f2: fa:0c:21:2e:86:b0:bf:1a:01:98:53:1e:f3:30:f8: de:e9:82:29:b2:34:64:56:4b:44:65:99:aa:1d:16: ce:40:18:1b:c4:7a:7e:e2:a1:f9:19:c4:75:6e:8a: a4:a5:30:17:e6:e8:9c:23:09:b2:d3:24:d6:bf:91: 31:30:01:b7:f1:cf:70:25:00:f7:ff:ba:e4:04:f3: 42:74:6c:31:62:b3:87:20:75:b9:5a:c3:87:2b:33: 61:44:5b:48:80:70:54:62:8e:6f:ab:3f:98:40:eb: 6a:5b:ca:da:7a:83:20:da:82:06:7e:e9:aa:f7:0c: 01:02:d5:29:be:95:71:d5:6a:1a:48:1c:ec:b3:7f: 1b:22:ad:96:cd:ff:c6:d5:4f:17:6d:6d:fa:58:6f: de:1c:fb:ad:fa:76:b2:e4:11:67:a7:ab:10:9d:97: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8C:27:52:02:DE:D1:71:B9:B2:7F:EA:AF:9D:05:C9:57:C6:45:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:54:85:eb:a9:f0:38:33:a2:51:6f:76:24:97:28:3d:ff:d1: 22:b8:c4:9c:a7:a1:2a:2c:26:b9:c6:8d:54:90:26:73:41:f8: 1a:c7:d4:17:04:da:2e:fb:1b:c2:6f:ba:70:15:5b:c5:27:ac: 46:e4:42:11:d1:49:63:53:a1:00:f8:8f:69:57:d9:14:18:33: 27:7a:79:36:24:3b:7e:e3:b7:32:b8:5c:5c:fb:20:93:82:15: c1:31:b6:4f:74:61:aa:5f:c2:36:20:6a:36:f8:bf:d2:bb:15: 5f:ee:d0:03:18:f2:8f:76:1f:87:d8:39:be:c7:66:09:6d:c2: ad:9d:b0:ef:d0:a2:76:26:99:7c:eb:55:37:05:e8:af:df:81: 80:78:43:a7:f9:b9:06:43:56:1e:02:44:c2:d1:e7:28:7f:5b: 28:4e:76:4f:75:5f:b0:45:a8:9b:2c:2c:31:4f:52:51:69:8a: 3e:b4:20:77:2a:a7:64:e1:ae:c2:26:42:00:af:a9:1a:11:89: 7b:1f:a5:66:f6:48:49:18:84:73:bf:e3:3f:30:fa:b0:f4:18: a6:92:5b:54:b9:00:a7:d2:64:0e:ce:62:c2:72:b7:72:55:4f: 46:45:a0:37:94:fd:90:e2:bf:16:33:18:67:dc:3a:ae:42:f4: 9f:06:7a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeatrGg0vj0IUnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk YzU4YzlkZjctY2Q4ZS00NjQ1LWI1MWMtMzVhZGUxYjU4ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9UJ0MIDRJx6erHEHosa6wLz8aaT6Iy4ARU9 UYr8mUXk3D7JxVdvFu1Vs6FKCR4qlJyU43y/BpOV5aY0Gk85HbFYno5lD4Px731A yP1dESTju9LU5W/Rx/L6DCEuhrC/GgGYUx7zMPje6YIpsjRkVktEZZmqHRbOQBgb xHp+4qH5GcR1boqkpTAX5uicIwmy0yTWv5ExMAG38c9wJQD3/7rkBPNCdGwxYrOH IHW5WsOHKzNhRFtIgHBUYo5vqz+YQOtqW8raeoMg2oIGfumq9wwBAtUpvpVx1Woa SBzss38bIq2Wzf/G1U8XbW36WG/eHPut+nay5BFnp6sQnZe+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKMJ1IC3tFxubJ/6q+dBclXxkUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMzQzNTZjNTctODUyMS0z NGYzLWE0M2MtODcyOTE4MDc1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNUheup8DgzolFvdiSXKD3/0SK4xJynoSosJrnGjVSQJnNB+BrH1BcE 2i77G8JvunAVW8UnrEbkQhHRSWNToQD4j2lX2RQYMyd6eTYkO37jtzK4XFz7IJOC FcExtk90YapfwjYgajb4v9K7FV/u0AMY8o92H4fYOb7HZgltwq2dsO/QonYmmXzr VTcF6K/fgYB4Q6f5uQZDVh4CRMLR5yh/WyhOdk91X7BFqJssLDFPUlFpij60IHcq p2ThrsImQgCvqRoRiXsfpWb2SEkYhHO/4z8w+rD0GKaSW1S5AKfSZA7OYsJyt3JV T0ZFoDeU/ZDivxYzGGfcOq5C9J8GeiM= -----END CERTIFICATE-----Generated at Thu Apr 10 01:55:56 2025 by rpki-client