$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa File: 872408eb-35fc-31a6-b8b6-b17659a01317.roa (raw, json) Hash identifier: PCkCIpCInZ9JJIT25iaaB3S3ZrnQxfp7Y7c+v+2+8C0= Subject key identifier: 2E:8D:E8:79:47:F1:91:2D:B7:46:2C:85:1D:04:A3:BA:14:6A:6C:66 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848CC7B90AD55907E4CDB6290AC Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 396253 IP address blocks: 138.43.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:90:ad:55:90:7e:4c:db:62:90:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=058b00de-240c-4626-930d-43c7521c61b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:5d:38:5b:e6:0c:8d:9d:75:67:ba:b5:45: 9d:ef:4a:3d:30:75:45:42:60:6d:46:de:a0:a1:94: 56:d9:6b:15:21:cf:0d:05:67:8a:1a:bd:c1:7c:72: 83:20:49:db:94:23:61:94:97:48:a4:5e:89:64:48: a1:c4:7e:d5:ce:63:a1:e9:06:11:0d:c4:61:81:fc: 6d:1c:b1:a4:fe:dd:74:34:fc:b0:c2:4c:93:82:d7: ef:1c:e4:f0:98:9b:bd:80:ee:82:e8:52:c4:f3:df: 85:4f:53:ff:87:ca:68:08:4d:1e:b9:2a:20:37:03: 9b:78:36:09:f6:e9:24:1a:86:d0:31:2e:a2:7b:b5: 7b:8d:44:6d:76:11:7c:a8:03:3b:78:83:0b:d0:28: 4f:6f:f3:57:c7:9f:65:d9:0f:a7:45:4f:7d:33:51: 82:45:e8:10:7e:ca:19:6d:42:f0:0b:6f:b0:cd:e2: c6:ed:1f:ce:61:94:d5:3e:f5:d4:68:72:40:7a:db: e9:b8:11:b6:1b:45:b7:d9:30:2a:e0:80:c5:f8:08: 23:03:d7:df:c0:d3:e6:82:c2:81:dc:3f:9a:4f:aa: 76:3a:b8:35:fe:7a:4a:37:c4:1f:dd:23:d9:2e:50: ff:2c:e8:65:d9:87:30:25:66:a7:08:94:a0:a0:e7: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:E8:79:47:F1:91:2D:B7:46:2C:85:1D:04:A3:BA:14:6A:6C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:09:3f:b4:1b:ff:94:bc:7c:06:e1:7b:5a:24:11:d1:9d:0d: 90:f3:d8:97:e4:e2:76:b0:ba:ac:c9:10:62:e0:a6:c7:f8:f1: a4:e5:3a:b3:4f:7c:57:cc:02:3a:9c:ce:76:8e:6a:a4:c6:86: 41:c1:89:b0:6a:5a:12:db:18:7e:dd:d3:56:9a:de:45:5e:96: e9:ca:61:63:2d:47:91:cc:77:59:e0:17:53:29:f1:e6:38:bd: ed:b2:f3:42:e8:03:bb:c9:e1:67:12:fd:ad:01:40:cb:d8:1a: 22:89:36:f7:69:85:5b:be:27:17:31:3b:6c:5b:b6:de:ac:36: 5f:8d:c8:71:36:b9:e8:10:d7:43:65:7b:4f:bc:9a:70:23:4b: 6a:e3:7a:69:78:37:e6:6f:05:0c:18:e8:ac:ab:81:cd:fd:28: 22:8f:a4:c9:25:3a:90:f4:3e:bd:d1:f2:79:54:6c:f8:ac:31: 01:da:61:bb:bb:89:be:f2:1f:b4:04:27:c7:8b:87:28:61:69: d8:06:eb:f7:1e:d8:54:54:a0:89:20:55:43:ea:5b:ed:5f:4f: 70:51:bb:bd:6d:b4:0f:2e:5d:20:64:30:5d:d5:e3:92:0d:08: d8:14:5c:34:4b:9c:bd:0a:59:31:4f:4a:11:f2:87:e5:1e:7d: 35:cc:6f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5CtVZB+TNtikKwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MDU4YjAwZGUtMjQwYy00NjI2LTkzMGQtNDNjNzUyMWM2MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/FdOFvmDI2ddWe6tUWd70o9MHVFQmBtRt6g oZRW2WsVIc8NBWeKGr3BfHKDIEnblCNhlJdIpF6JZEihxH7VzmOh6QYRDcRhgfxt HLGk/t10NPywwkyTgtfvHOTwmJu9gO6C6FLE89+FT1P/h8poCE0euSogNwObeDYJ 9ukkGobQMS6ie7V7jURtdhF8qAM7eIML0ChPb/NXx59l2Q+nRU99M1GCRegQfsoZ bULwC2+wzeLG7R/OYZTVPvXUaHJAetvpuBG2G0W32TAq4IDF+AgjA9ffwNPmgsKB 3D+aT6p2Org1/npKN8Qf3SPZLlD/LOhl2YcwJWanCJSgoOfafQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6N6HlH8ZEtt0YshR0Eo7oUamxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODcyNDA4ZWItMzVmYy0z MWE2LWI4YjYtYjE3NjU5YTAxMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4JP7Qb/5S8fAbhe1okEdGdDZDz2Jfk4nawuqzJEGLgpsf48aTlOrNP fFfMAjqcznaOaqTGhkHBibBqWhLbGH7d01aa3kVelunKYWMtR5HMd1ngF1Mp8eY4 ve2y80LoA7vJ4WcS/a0BQMvYGiKJNvdphVu+JxcxO2xbtt6sNl+NyHE2uegQ10Nl e0+8mnAjS2rjeml4N+ZvBQwY6Kyrgc39KCKPpMklOpD0Pr3R8nlUbPisMQHaYbu7 ib7yH7QEJ8eLhyhhadgG6/ce2FRUoIkgVUPqW+1fT3BRu71ttA8uXSBkMF3V45IN CNgUXDRLnL0KWTFPShHyh+UefTXMb2c= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:07 2025 by rpki-client