$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa File: 517c1ed1-2fb3-3723-ad55-68791be7cf98.roa (raw, json) Hash identifier: uepS/fpnB2VAOrNCxzzzla4UlJYyxLvGy5aMr9BT58M= Subject key identifier: 21:5C:BA:AB:D5:56:FD:42:92:FF:60:0B:B1:0B:10:7F:E9:0D:B3:45 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848A830AE85BC13E6C2B79C5800 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 137922 IP address blocks: 138.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ae:85:bc:13:e6:c2:b7:9c:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=bd55c60d-af58-44fe-9962-cdf7d5145e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:dd:7e:d7:47:32:a5:ea:15:8b:61:f9:18: e4:91:e8:71:d6:c5:87:42:2b:c9:00:1c:b8:0e:94: df:53:bf:53:6d:f6:8c:e9:18:42:8d:f6:39:24:11: 9d:a7:4a:86:8e:58:3a:7b:3a:56:40:0e:3a:f9:ac: 51:e4:27:1f:96:eb:da:2a:df:f3:dd:27:60:97:a2: a3:bc:e3:12:fe:2c:f8:58:d3:08:fc:5d:e3:df:12: 5c:2e:b2:87:bf:8a:a8:f9:92:f1:a0:b6:f0:e7:44: d5:fa:2c:56:ea:89:68:3e:bf:ca:4d:50:91:ff:ff: 1e:40:fe:2c:58:1b:79:61:28:e9:9a:2e:8d:df:e7: c7:39:af:23:ec:87:d2:7f:a4:5f:59:36:0f:e7:23: 3f:67:f1:15:ad:79:04:0f:04:7a:0b:13:d7:5e:58: 17:20:52:85:52:c1:fd:01:47:b7:a5:36:c0:5d:29: 26:c8:f1:31:2a:6e:b1:82:e5:8e:93:07:6f:45:f6: 9a:76:a8:e1:f4:3e:51:43:e3:72:c8:9b:08:89:32: 77:77:81:23:ee:38:f8:c5:e1:c6:27:e6:9b:8c:2f: 7e:41:42:0d:01:e0:57:c1:06:3a:6c:1d:93:74:b0: e6:17:b0:d3:81:4e:87:f7:14:96:b3:e5:c2:f3:db: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:BA:AB:D5:56:FD:42:92:FF:60:0B:B1:0B:10:7F:E9:0D:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6c:1b:99:03:00:3a:eb:de:bf:f5:90:93:38:42:0d:e3:6b: 14:7f:6e:5d:c4:9e:b9:9a:38:49:1b:9d:1f:09:9f:5d:6a:0d: dc:30:df:dc:c7:6b:74:5c:9b:cd:98:c5:e4:77:7c:80:f6:9a: 12:03:cb:d7:37:27:7c:71:c6:25:d0:58:7d:eb:8c:73:f2:3e: 2d:a5:5d:05:2b:73:ee:78:56:bf:5e:7c:39:2e:f3:a3:71:50: 30:f5:76:76:51:57:d2:41:c2:11:58:6d:c7:70:91:3a:b7:02: b5:ff:d5:5a:fb:5e:54:53:36:7f:73:fe:93:f9:e9:8d:44:82: 78:32:2c:93:90:61:ab:38:e8:94:a9:a4:ca:54:9b:8a:c2:51: cf:3b:8b:a6:c5:6a:33:46:51:7d:e5:3d:a3:13:7b:56:b6:ec: b3:e8:0f:90:08:be:01:c6:23:84:ae:3b:47:02:82:b7:2f:90: 50:14:d7:84:e3:d6:a7:da:b1:f2:de:73:cc:f1:be:32:04:14: b9:8c:30:4f:b7:e8:34:d2:d6:d8:f3:5d:97:66:7f:4c:c3:50: 3b:95:7e:04:94:34:97:42:66:51:1d:eb:26:5e:f2:72:e7:20: 52:03:5d:29:cb:ab:54:1b:4f:d8:0b:07:e3:c8:da:d5:de:99: 8d:a6:81:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMK6FvBPmwrecWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YmQ1NWM2MGQtYWY1OC00NGZlLTk5NjItY2RmN2Q1MTQ1ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5jdftdHMqXqFYth+Rjkkehx1sWHQivJABy4 DpTfU79TbfaM6RhCjfY5JBGdp0qGjlg6ezpWQA46+axR5CcfluvaKt/z3Sdgl6Kj vOMS/iz4WNMI/F3j3xJcLrKHv4qo+ZLxoLbw50TV+ixW6oloPr/KTVCR//8eQP4s WBt5YSjpmi6N3+fHOa8j7IfSf6RfWTYP5yM/Z/EVrXkEDwR6CxPXXlgXIFKFUsH9 AUe3pTbAXSkmyPExKm6xguWOkwdvRfaadqjh9D5RQ+NyyJsIiTJ3d4Ej7jj4xeHG J+abjC9+QUINAeBXwQY6bB2TdLDmF7DTgU6H9xSWs+XC89vRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFcuqvVVv1Ckv9gC7ELEH/pDbNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTE3YzFlZDEtMmZiMy0z NzIzLWFkNTUtNjg3OTFiZTdjZjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiithMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFsG5kDADrr3r/1kJM4Qg3jaxR/bl3EnrmaOEkbnR8Jn11qDdww39zH a3Rcm82YxeR3fID2mhIDy9c3J3xxxiXQWH3rjHPyPi2lXQUrc+54Vr9efDku86Nx UDD1dnZRV9JBwhFYbcdwkTq3ArX/1Vr7XlRTNn9z/pP56Y1EgngyLJOQYas46JSp pMpUm4rCUc87i6bFajNGUX3lPaMTe1a27LPoD5AIvgHGI4SuO0cCgrcvkFAU14Tj 1qfasfLec8zxvjIEFLmMME+36DTS1tjzXZdmf0zDUDuVfgSUNJdCZlEd6yZe8nLn IFIDXSnLq1QbT9gLB+PI2tXemY2mga8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:18:39 2025 by rpki-client