$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa File: a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json) Hash identifier: 97fAjZw27LvEjNz/AYDbKeiI3x3NCepZS6LYdlYy5zo= Subject key identifier: D9:68:1A:FD:54:09:1B:D1:8F:B2:0F:7B:E3:61:6F:65:25:F4:C4:60 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F43285849350EA73464FEA67BA0CB8C80 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 198949 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:34:64:fe:a6:7b:a0:cb:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=47dd7090-48d5-42b6-b202-8b9f9ec0f4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:0d:38:f7:9d:24:66:36:6e:0d:ac:ed:3a: 85:c2:99:3c:7c:f3:54:04:c5:55:2f:bc:09:a7:8f: c4:ad:68:1d:95:b7:82:04:17:63:bf:6b:84:a1:e9: 9b:05:b4:1b:91:45:3c:20:10:29:06:91:4c:8a:2a: 87:b2:ec:79:da:f7:b6:97:cc:b6:f2:0c:c9:6d:5b: fa:f9:ed:27:56:d4:22:5a:f8:5e:71:28:e5:71:69: dc:7e:23:2e:fe:55:10:df:03:de:f2:df:c9:99:af: 2b:8a:68:7f:8e:d2:f6:99:06:58:bf:6e:e6:f0:a4: 05:50:9e:37:7e:7b:07:61:1b:aa:cc:37:87:ea:a1: 6a:61:08:d7:42:74:80:a8:c5:a8:fd:c8:0d:57:7f: 42:33:3e:d4:85:e7:c6:e1:f2:3d:c3:fb:02:e2:99: 56:8d:b1:4b:ef:19:82:29:f4:d5:50:34:92:48:bd: b6:08:a9:7b:93:d4:07:6d:d9:93:b6:3f:72:68:16: 04:3f:cc:96:1f:1f:da:86:88:ea:8c:7e:45:71:c9: 07:49:39:07:7b:1b:24:e1:93:96:0c:e3:79:3f:37: 91:5d:88:ff:a1:f8:72:7b:7b:da:86:ca:18:9e:c9: 60:03:79:26:3d:d2:b6:de:4e:32:de:56:2d:b1:ad: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:68:1A:FD:54:09:1B:D1:8F:B2:0F:7B:E3:61:6F:65:25:F4:C4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5b:09:d2:bc:2c:4e:3c:60:40:a2:98:bf:e5:c8:44:fb:e5: 9b:8d:16:a7:34:83:98:80:fd:e1:30:1f:f8:a5:31:cf:65:c4: 76:85:db:16:87:0f:bd:14:d7:8e:ae:d5:5c:29:ca:7f:b4:5e: f0:bb:ca:98:d7:db:d0:40:ef:5b:32:36:10:39:b2:de:07:d5: 7d:c6:1d:c7:cf:b6:d9:bd:9b:66:68:8e:8e:56:a0:b7:49:e4: a9:36:40:d3:20:7c:51:ec:64:f8:05:02:d8:f8:58:56:cc:ff: d9:4a:18:c3:61:97:aa:18:27:50:05:77:4e:95:dd:dd:36:12: 15:97:ff:32:24:a0:02:58:b6:d5:41:f7:20:99:28:15:02:1c: c9:5a:9e:4e:98:5e:75:be:d0:3b:85:79:c4:2d:42:12:fe:a4: bc:fc:ac:1c:37:cb:00:73:2a:d4:12:4b:a4:82:7a:7f:c2:50: 7b:e7:db:8b:aa:ac:af:6c:de:4d:55:10:6f:74:4f:43:3c:b9: 55:a6:bf:1a:69:de:ee:c3:75:7d:03:11:15:1b:7e:19:a7:69: e4:b8:07:ae:b5:d4:1b:c8:90:0f:fd:b8:0e:df:c7:7f:05:b5: 2a:04:22:62:df:62:88:d3:cf:a9:d0:a9:58:b6:bd:af:c7:6b: 92:95:49:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEk1Dqc0ZP6me6DLjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NDdkZDcwOTAtNDhkNS00MmI2LWIyMDItOGI5ZjllYzBmNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNgNOPedJGY2bg2s7TqFwpk8fPNUBMVVL7wJ p4/ErWgdlbeCBBdjv2uEoembBbQbkUU8IBApBpFMiiqHsux52ve2l8y28gzJbVv6 +e0nVtQiWvhecSjlcWncfiMu/lUQ3wPe8t/Jma8rimh/jtL2mQZYv27m8KQFUJ43 fnsHYRuqzDeH6qFqYQjXQnSAqMWo/cgNV39CMz7UhefG4fI9w/sC4plWjbFL7xmC KfTVUDSSSL22CKl7k9QHbdmTtj9yaBYEP8yWHx/ahojqjH5FcckHSTkHexsk4ZOW DON5PzeRXYj/ofhye3vahsoYnslgA3kmPdK23k4y3lYtsa19nwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNloGv1UCRvRj7IPe+Nhb2Ul9MRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvYTI2YTc0MzUtZjVhYi0z NDE5LTg4M2ItMDIyZGMxMWM4NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGVsJ0rwsTjxgQKKYv+XIRPvlm40WpzSDmID94TAf+KUxz2XEdoXbFocP vRTXjq7VXCnKf7Re8LvKmNfb0EDvWzI2EDmy3gfVfcYdx8+22b2bZmiOjlagt0nk qTZA0yB8Uexk+AUC2PhYVsz/2UoYw2GXqhgnUAV3TpXd3TYSFZf/MiSgAli21UH3 IJkoFQIcyVqeTphedb7QO4V5xC1CEv6kvPysHDfLAHMq1BJLpIJ6f8JQe+fbi6qs r2zeTVUQb3RPQzy5Vaa/Gmne7sN1fQMRFRt+Gadp5LgHrrXUG8iQD/24Dt/HfwW1 KgQiYt9iiNPPqdCpWLa9r8drkpVJcg== -----END CERTIFICATE-----Generated at Sun May 11 20:42:39 2025 by rpki-client