$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json) Hash identifier: Z9IUS6rR7N7LtBt5SARbakoz5bfDaKc2Fj1uF7kqKV4= Subject key identifier: 73:8B:C2:76:41:36:E1:48:53:8A:F6:E7:86:B9:BE:05:85:11:1F:DF Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584949FE8FF2DBF39CF730720D20 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 23122 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8f:f2:db:f3:9c:f7:30:72:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=79ad530f-9b50-43cf-9280-a0b4e4513233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:16:6b:62:d9:00:ba:95:6f:b5:7e:ab:e0:2b: e1:7c:06:0d:44:24:d0:44:5e:d3:89:51:2e:fc:48: 8d:d1:c6:ce:bf:8f:98:81:49:c2:e0:20:29:e8:f3: 71:3e:34:70:00:25:84:de:af:a5:7b:10:17:19:50: 56:a3:3c:e2:af:e6:7b:10:0a:22:13:79:64:d9:3b: 50:db:cd:c7:7b:25:24:23:09:86:1e:b2:76:b7:b4: b2:19:3c:a1:93:42:ca:a0:3f:c4:93:ad:52:6e:eb: af:81:0c:07:22:50:c3:22:a9:3e:c0:5e:02:52:a0: 0f:be:4a:62:f7:84:76:50:18:bc:37:07:5c:75:14: 37:54:59:f4:95:f6:82:94:09:a7:6f:b9:8a:b0:43: 0e:0e:db:34:91:29:10:bd:53:96:da:eb:0f:12:63: 2b:af:4d:0e:89:28:f9:71:04:26:8f:8a:6f:b1:b6: 7e:8e:53:48:64:f1:64:46:d4:c5:99:81:5e:a0:96: 25:76:21:14:8e:4e:87:2b:b1:bc:bb:90:03:05:0c: 76:47:8d:2c:31:bc:6d:4e:fa:01:13:6a:40:60:b5: 12:83:33:20:e9:12:18:a7:4b:5e:1b:89:4e:f0:55: 21:e6:a1:25:fd:c6:b7:7a:58:2d:d6:ae:b4:a8:57: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:C2:76:41:36:E1:48:53:8A:F6:E7:86:B9:BE:05:85:11:1F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b8:37:b0:39:3a:48:fd:98:3c:8f:90:1a:9c:a3:54:ab:0c: 1d:03:1d:11:25:e5:5a:54:96:21:39:8b:a0:d8:a1:e6:7e:5d: f5:d9:33:68:0c:ad:33:64:63:25:c6:91:9f:95:56:67:77:05: 54:e3:58:c8:fb:07:ac:48:e9:74:df:11:5d:40:8c:5e:10:85: 4f:62:15:d5:07:f7:56:7c:30:f5:90:29:46:35:24:85:52:f9: d4:82:46:c0:2e:f2:39:aa:12:9d:e4:c6:66:bb:b1:d2:f0:86: 08:10:69:26:de:05:ae:66:ac:69:9d:0a:fe:51:7a:49:b5:1a: 46:99:38:ca:d5:b9:03:89:2f:6b:9b:60:d0:17:d1:3e:b4:c6: 53:f3:ff:f6:c0:5e:55:aa:2b:b3:21:1c:fd:11:5a:63:5b:26: e8:f1:af:27:25:f8:3a:14:2e:a6:dc:93:15:d1:c1:2b:33:78: 93:9c:21:e7:ab:1b:97:20:48:2d:65:cb:7d:eb:c0:7f:11:ba: 49:b8:7c:94:14:77:1c:cd:3f:7a:b4:ef:3b:89:93:42:70:ea: 7b:20:be:6b:c1:58:bf:eb:a5:94:f8:09:e1:fb:7a:26:f8:39: 91:c0:54:e6:9c:93:c7:f1:33:62:5e:47:3f:56:11:3e:a3:79: c2:b8:54:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElJ/o/y2/Oc9zByDSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NzlhZDUzMGYtOWI1MC00M2NmLTkyODAtYTBiNGU0NTEzMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBZrYtkAupVvtX6r4CvhfAYNRCTQRF7TiVEu /EiN0cbOv4+YgUnC4CAp6PNxPjRwACWE3q+lexAXGVBWozzir+Z7EAoiE3lk2TtQ 283HeyUkIwmGHrJ2t7SyGTyhk0LKoD/Ek61SbuuvgQwHIlDDIqk+wF4CUqAPvkpi 94R2UBi8NwdcdRQ3VFn0lfaClAmnb7mKsEMODts0kSkQvVOW2usPEmMrr00OiSj5 cQQmj4pvsbZ+jlNIZPFkRtTFmYFeoJYldiEUjk6HK7G8u5ADBQx2R40sMbxtTvoB E2pAYLUSgzMg6RIYp0teG4lO8FUh5qEl/ca3elgt1q60qFcNlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHOLwnZBNuFIU4r254a5vgWFER/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvNDU4YTMwOTktYzFlMi0z ZmRmLWI0MjAtODBjOGZkNWM1MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALrg3sDk6SP2YPI+QGpyjVKsMHQMdESXlWlSWITmLoNih5n5d9dkzaAyt M2RjJcaRn5VWZ3cFVONYyPsHrEjpdN8RXUCMXhCFT2IV1Qf3Vnww9ZApRjUkhVL5 1IJGwC7yOaoSneTGZrux0vCGCBBpJt4FrmasaZ0K/lF6SbUaRpk4ytW5A4kva5tg 0BfRPrTGU/P/9sBeVaorsyEc/RFaY1sm6PGvJyX4OhQuptyTFdHBKzN4k5wh56sb lyBILWXLfevAfxG6Sbh8lBR3HM0/erTvO4mTQnDqeyC+a8FYv+ullPgJ4ft6Jvg5 kcBU5pyTx/EzYl5HP1YRPqN5wrhUeA== -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:19 2025 by rpki-client