$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa File: 0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa (raw, json) Hash identifier: 0zf3zC+aTDW1fHNaWNzA4RwwK0Zc7wPiYvaR/CclxcY= Subject key identifier: F9:ED:52:52:90:E9:7C:48:E8:F9:63:00:90:65:E7:45:72:7B:A1:A7 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848B8F0CA582BC7C15550533280 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 396253 IP address blocks: 138.43.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:ca:58:2b:c7:c1:55:50:53:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=4b2e0250-84ac-4639-8f94-7809b4fa0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:fe:db:ce:91:78:29:4c:d8:1f:a4:4a:84: 07:fe:6b:9d:a3:66:a9:84:f8:50:24:db:1d:ec:85: 45:77:66:67:78:a3:f8:05:31:79:07:80:09:c8:ae: 2b:a7:ea:77:e8:9d:58:ca:06:e8:d9:29:20:aa:e4: 63:fc:6b:56:14:65:b5:d3:02:89:3a:79:36:2c:fa: 5f:74:08:02:7c:fd:95:b5:d6:30:9a:f5:bb:b1:11: 81:76:ad:86:28:e3:14:78:a0:6f:cf:82:16:fe:51: 96:c8:7a:35:e8:5d:42:13:ef:ab:49:0b:cd:85:fe: 8f:6f:30:36:a2:78:43:ce:49:33:f5:dd:61:93:d0: 1b:40:a5:35:6f:33:bf:86:0b:96:8a:64:6e:09:78: 1c:bf:95:17:cf:d6:de:c2:53:fb:84:2f:02:1d:2c: 27:94:e1:7a:e8:da:cb:8c:77:18:e8:65:ab:1d:dc: 55:f6:d3:34:91:7c:cb:03:db:7a:64:14:b3:b0:b2: 22:78:0f:73:91:a9:7b:50:ce:0c:30:76:10:2e:b4: 37:f0:6e:5a:10:b8:fd:fc:e6:c3:e5:f0:48:57:4e: b3:53:d3:40:be:6a:96:da:20:03:8d:56:16:34:b4: 93:51:57:5b:0b:75:d8:86:c9:c6:d2:f9:1d:2e:cd: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:ED:52:52:90:E9:7C:48:E8:F9:63:00:90:65:E7:45:72:7B:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fc:1b:75:fd:b1:75:ac:54:e3:c7:64:42:78:76:6e:7b:5a: 68:b6:cf:98:11:65:7c:43:37:03:40:fb:95:1b:79:63:a0:29: b3:bf:f4:3a:4f:f3:a3:f4:42:55:12:80:f1:a9:ab:dc:65:ab: 0e:76:36:09:6a:33:a8:99:6f:8a:0a:fe:8f:34:6d:05:7e:17: 7a:76:69:b0:64:4a:3c:a6:21:84:7c:c1:7e:0d:66:54:ed:55: c5:a7:b2:80:92:2b:21:82:68:db:bf:9d:03:f6:62:35:02:fc: 19:3d:ab:09:13:fa:a2:51:c8:a4:5d:76:c8:80:a1:79:a8:4b: 0e:d7:06:2c:ab:f6:61:7f:a8:0c:39:ae:09:cd:90:b6:7d:ab: 82:27:84:d2:1a:78:83:6f:1b:06:9f:e4:bf:7e:4f:3a:b4:18: 93:eb:59:30:2f:cd:7a:1e:76:d8:11:e4:6c:79:c8:99:f4:d3: 55:96:e7:07:6a:1c:ef:10:01:7a:bc:df:27:91:40:d2:e9:82: de:9f:27:01:ae:c9:d5:19:dd:53:a0:29:ea:11:00:55:a1:3d: 44:6e:e4:2b:02:02:1e:84:10:6d:89:26:96:59:c1:14:38:76: 1f:71:42:1d:8f:26:8e:da:34:0f:33:89:5b:1a:0b:87:cf:80: 09:a0:b7:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MpYK8fBVVBTMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NGIyZTAyNTAtODRhYy00NjM5LThmOTQtNzgwOWI0ZmEwMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1n+286ReClM2B+kSoQH/mudo2aphPhQJNsd 7IVFd2ZneKP4BTF5B4AJyK4rp+p36J1Yygbo2SkgquRj/GtWFGW10wKJOnk2LPpf dAgCfP2VtdYwmvW7sRGBdq2GKOMUeKBvz4IW/lGWyHo16F1CE++rSQvNhf6PbzA2 onhDzkkz9d1hk9AbQKU1bzO/hguWimRuCXgcv5UXz9bewlP7hC8CHSwnlOF66NrL jHcY6GWrHdxV9tM0kXzLA9t6ZBSzsLIieA9zkal7UM4MMHYQLrQ38G5aELj9/ObD 5fBIV06zU9NAvmqW2iADjVYWNLSTUVdbC3XYhsnG0vkdLs0g/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPntUlKQ6XxI6PljAJBl50Vye6GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGMxYmU5NGMtZGM0OS0z YzkxLWJmNWMtZGRjM2Y5MGMyMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb8G3X9sXWsVOPHZEJ4dm57Wmi2z5gRZXxDNwNA+5UbeWOgKbO/9DpP 86P0QlUSgPGpq9xlqw52NglqM6iZb4oK/o80bQV+F3p2abBkSjymIYR8wX4NZlTt VcWnsoCSKyGCaNu/nQP2YjUC/Bk9qwkT+qJRyKRddsiAoXmoSw7XBiyr9mF/qAw5 rgnNkLZ9q4InhNIaeINvGwaf5L9+Tzq0GJPrWTAvzXoedtgR5Gx5yJn001WW5wdq HO8QAXq83yeRQNLpgt6fJwGuydUZ3VOgKeoRAFWhPURu5CsCAh6EEG2JJpZZwRQ4 dh9xQh2PJo7aNA8ziVsaC4fPgAmgtxU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:30 2025 by rpki-client