$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa File: a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json) Hash identifier: wLZjWVCjE2/1S3qb0p1cLmDChW5suPuCNVJXustblEw= Subject key identifier: 18:BA:CC:B2:1C:70:7A:30:A1:98:55:89:E8:EF:7C:79:49:4E:27:07 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584855D595A9BF56400D6302F680 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 198949 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:95:a9:bf:56:40:0d:63:02:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=578a92ed-a3ef-4b70-84fd-634c21350649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:a7:4f:e5:d1:c6:cc:11:52:24:e3:e0:d2: 37:75:49:66:eb:7b:32:7f:fd:38:41:00:eb:6e:0c: 58:1e:47:f5:81:3a:d7:d4:ae:a9:d5:a0:e5:72:95: db:91:df:e9:58:79:bf:44:82:77:6b:04:ae:b0:52: 81:bc:b9:34:fb:c8:a1:e5:1b:1b:42:15:f2:30:b6: bb:d5:03:fe:bc:75:10:94:b9:cc:03:1f:2b:0a:7b: 47:62:2f:b0:07:b6:bd:4f:9c:7a:99:b8:0f:12:91: 2b:78:a9:77:24:ab:df:ad:2e:ea:9c:9e:28:27:39: ef:c2:04:b5:53:95:b3:91:0d:2b:28:1f:3c:a3:b1: 44:13:bc:05:74:78:14:58:78:e2:6a:f4:70:ea:2e: dc:b0:d3:be:2c:40:69:e9:4c:70:b9:c1:a0:13:be: 8e:26:6f:61:ae:75:b3:b8:33:36:f4:20:0a:1e:b7: 43:6e:4a:b2:01:fe:98:57:3f:c0:a6:20:dc:f3:c8: 31:9e:47:70:be:ab:64:c1:1d:cf:59:51:82:74:93: f0:0e:23:5c:95:a9:71:57:9d:40:79:49:c7:02:46: a5:19:d6:b9:cf:12:eb:c9:97:07:0f:50:6c:26:49: df:db:b7:19:25:65:38:56:73:bd:ca:bd:9c:11:05: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:CC:B2:1C:70:7A:30:A1:98:55:89:E8:EF:7C:79:49:4E:27:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4d:c5:54:0e:d5:bf:cf:67:66:a9:39:06:15:5d:bc:b2:8c: 82:1b:f7:92:c0:94:26:03:f4:56:d5:0c:1e:32:f1:75:38:05: 43:6a:0a:c7:d9:aa:83:41:73:74:91:40:8b:d8:80:a7:70:71: d5:73:64:7a:1a:c4:d0:42:ee:7b:be:44:0e:7b:70:dc:a7:74: f0:50:eb:5f:7b:a7:30:92:cc:cd:a9:3a:f7:41:b1:4a:eb:6a: 9f:03:40:85:52:c6:21:8c:a1:9e:7b:d8:39:30:de:01:80:b6: 2b:fb:e8:7f:49:60:75:6c:13:06:1e:f6:a7:70:84:a7:c6:79: 90:e1:58:15:e5:83:3f:15:fa:86:2a:37:2a:77:0e:b6:86:0a: eb:02:04:25:1b:4a:1d:a9:ac:28:41:b8:fb:01:fe:f0:4c:3a: 8f:e9:f8:f3:f1:fc:4f:76:e1:0f:62:10:7a:df:16:3b:e0:a8: 26:3a:bf:fe:de:39:cf:57:ab:23:6c:d1:0e:75:5c:e4:66:2a: 5b:c9:df:79:e1:51:79:a5:c1:c1:ca:8a:db:00:a8:44:fd:52: ec:5e:e4:32:1c:64:35:50:63:04:8f:17:9a:88:41:78:e6:14: 1c:7c:aa:fb:bc:cb:1b:0b:b2:24:6c:89:14:ff:02:8e:5b:c6: db:0f:92:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhV1ZWpv1ZADWMC9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk NTc4YTkyZWQtYTNlZi00YjcwLTg0ZmQtNjM0YzIxMzUwNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa6nT+XRxswRUiTj4NI3dUlm63syf/04QQDr bgxYHkf1gTrX1K6p1aDlcpXbkd/pWHm/RIJ3awSusFKBvLk0+8ih5RsbQhXyMLa7 1QP+vHUQlLnMAx8rCntHYi+wB7a9T5x6mbgPEpEreKl3JKvfrS7qnJ4oJznvwgS1 U5WzkQ0rKB88o7FEE7wFdHgUWHjiavRw6i7csNO+LEBp6UxwucGgE76OJm9hrnWz uDM29CAKHrdDbkqyAf6YVz/ApiDc88gxnkdwvqtkwR3PWVGCdJPwDiNclalxV51A eUnHAkalGda5zxLryZcHD1BsJknf27cZJWU4VnO9yr2cEQV/bQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBi6zLIccHowoZhViejvfHlJTicHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvYTI2YTc0MzUtZjVhYi0z NDE5LTg4M2ItMDIyZGMxMWM4NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIk3FVA7Vv89nZqk5BhVdvLKMghv3ksCUJgP0VtUMHjLxdTgFQ2oKx9mq g0FzdJFAi9iAp3Bx1XNkehrE0ELue75EDntw3Kd08FDrX3unMJLMzak690GxSutq nwNAhVLGIYyhnnvYOTDeAYC2K/vof0lgdWwTBh72p3CEp8Z5kOFYFeWDPxX6hio3 KncOtoYK6wIEJRtKHamsKEG4+wH+8Ew6j+n48/H8T3bhD2IQet8WO+CoJjq//t45 z1erI2zRDnVc5GYqW8nfeeFReaXBwcqK2wCoRP1S7F7kMhxkNVBjBI8XmohBeOYU HHyq+7zLGwuyJGyJFP8CjlvG2w+Scg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:20 2025 by rpki-client