$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa File: d2792d34-8325-33de-95c1-c090857924a5.roa (raw, json) Hash identifier: 7i4vQEtIpK1y0QYRTZKQGIp0O+VbJdrXIBvdsyN22Gk= Subject key identifier: A7:D9:8B:18:6F:70:0F:96:8D:36:C0:18:30:A1:DE:D5:A3:48:AB:6B Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848AF2B7E31F22C8B4F5F522300 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 396253 IP address blocks: 138.43.101.0/24 maxlen: 24 138.43.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7e:31:f2:2c:8b:4f:5f:52:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=e10d2f26-15e2-45fa-b2df-e57efe9b6029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:e4:24:ea:41:1c:31:df:9d:cc:5e:b3:82: 21:bd:87:c3:ed:81:25:5d:3a:14:25:7f:6f:d9:f0: 62:1c:94:b3:e0:77:52:59:71:83:fe:37:32:95:00: d3:5f:39:d0:eb:32:05:2f:36:d6:f4:d5:e3:ec:22: 6b:8e:3b:93:ad:62:25:1e:8b:57:72:3e:b6:0e:1b: 61:67:d9:5b:51:16:04:b9:86:7d:d0:fe:d8:dc:28: 81:0d:97:c5:ff:8d:ee:fd:b4:a8:b0:12:ab:95:45: 47:ef:ff:74:eb:a0:64:90:a1:94:87:16:c1:ec:f0: db:09:26:55:73:d0:07:38:1d:24:ec:be:e3:99:7a: 8a:16:a6:52:06:a2:b1:df:7c:f4:8a:5e:98:fa:0d: e5:80:44:e6:db:54:0a:1a:c9:dd:32:d0:3d:ab:85: 9a:90:78:3d:3f:f1:6c:9c:3b:e1:71:ed:85:35:84: 5a:18:a5:aa:5d:a9:8f:e0:37:c2:f6:20:9b:0b:fc: 64:14:41:bf:1c:a9:7e:7a:6e:a9:c2:d1:25:67:c6: bc:5e:ff:dc:e7:76:2a:62:a6:4b:24:88:d9:4a:96: 3a:70:48:e6:e7:d5:26:b5:ef:c6:01:b1:a1:95:09: 2d:58:c2:90:53:8b:6a:5e:f8:07:bf:81:a8:78:fa: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D9:8B:18:6F:70:0F:96:8D:36:C0:18:30:A1:DE:D5:A3:48:AB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d2792d34-8325-33de-95c1-c090857924a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.101.0/24 138.43.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f0:01:4e:ac:0f:9c:6b:16:7e:99:5c:f0:f2:49:9a:36:93: f5:4e:6e:b3:29:a1:23:ea:30:db:2b:ce:a8:ca:f6:39:ba:78: 3d:22:33:1e:df:76:61:7f:90:c5:c3:65:fe:59:18:1b:ca:03: d5:cb:bf:86:e3:83:dc:c6:5e:16:d1:a5:f8:eb:2f:e6:de:e4: dd:3e:c5:aa:98:74:42:08:1c:f0:43:f8:6d:e3:53:ed:3a:79: ce:80:1f:f5:0c:c1:19:49:81:7b:9f:55:fd:2c:03:0b:13:fa: f2:03:d8:6a:bd:52:4e:0d:09:90:13:5a:4b:8b:d6:4e:bf:c4: c7:e0:c0:2c:5b:4d:26:00:8f:88:95:dc:85:9f:8f:ce:18:e1: be:93:1b:d3:26:07:19:99:26:83:bf:c2:17:a2:5b:e9:01:69: 44:85:18:a1:b3:e3:69:40:a4:82:5c:02:c4:a3:28:66:4e:0a: 42:19:84:e4:f1:44:6a:e8:06:06:f6:4f:7d:c4:ce:88:bf:a6: a9:62:00:cf:2e:85:07:e6:88:db:7a:ee:8b:ea:c5:63:b1:22: 5a:58:7d:fd:8d:8e:a4:ff:76:22:99:73:d5:a9:1c:6c:86:01: cf:86:28:ca:03:5f:ea:c4:4d:f4:f2:6a:e1:38:12:6c:a6:36: a7:ae:dd:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEivK34x8iyLT19SIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTEwZDJmMjYtMTVlMi00NWZhLWIyZGYtZTU3ZWZlOWI2MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywbkJOpBHDHfncxes4IhvYfD7YElXToUJX9v 2fBiHJSz4HdSWXGD/jcylQDTXznQ6zIFLzbW9NXj7CJrjjuTrWIlHotXcj62Dhth Z9lbURYEuYZ90P7Y3CiBDZfF/43u/bSosBKrlUVH7/9066BkkKGUhxbB7PDbCSZV c9AHOB0k7L7jmXqKFqZSBqKx33z0il6Y+g3lgETm21QKGsndMtA9q4WakHg9P/Fs nDvhce2FNYRaGKWqXamP4DfC9iCbC/xkFEG/HKl+em6pwtElZ8a8Xv/c53YqYqZL JIjZSpY6cEjm59Umte/GAbGhlQktWMKQU4tqXvgHv4GoePrFVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKfZixhvcA+WjTbAGDCh3tWjSKtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZDI3OTJkMzQtODMyNS0z M2RlLTk1YzEtYzA5MDg1NzkyNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiitlAwQA iitnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB7wAU6sD5xrFn6ZXPDySZo2k/VObrMpoSPqMNsrzqjK9jm6 eD0iMx7fdmF/kMXDZf5ZGBvKA9XLv4bjg9zGXhbRpfjrL+be5N0+xaqYdEIIHPBD +G3jU+06ec6AH/UMwRlJgXufVf0sAwsT+vID2Gq9Uk4NCZATWkuL1k6/xMfgwCxb TSYAj4iV3IWfj84Y4b6TG9MmBxmZJoO/wheiW+kBaUSFGKGz42lApIJcAsSjKGZO CkIZhOTxRGroBgb2T33Ezoi/pqliAM8uhQfmiNt67ovqxWOxIlpYff2NjqT/diKZ c9WpHGyGAc+GKMoDX+rETfTyauE4EmymNqeu3Q8= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:48 2025 by rpki-client