$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa File: 4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json) Hash identifier: qVNl77kOm8odODvH2NYjqm2P70wUS17o86WaiZI+IU0= Subject key identifier: 01:E3:A6:79:34:BD:9F:66:90:CD:E7:AC:0F:1D:7F:5D:77:3E:B0:78 Certificate issuer: /CN=24c594b2-08c8-4864-afae-a607d79beb73 Certificate serial: 010D0C9F4328584953C41BCAF5491E6D5FB4B380 Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 398178 IP address blocks: 138.43.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1b:ca:f5:49:1e:6d:5f:b4:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=2d1bf00c-1e3d-496e-9fd7-3cd65dca1870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:55:9f:bf:66:80:69:eb:4a:9c:64:e8:95: db:82:79:f6:f4:bc:40:0b:bd:ad:f3:6a:f6:12:50: 71:55:e3:4e:2b:9c:0a:c0:5a:9a:c5:85:b1:6d:7c: 00:c5:86:bb:47:a2:50:75:64:ad:40:ee:2b:16:2a: 15:a6:8f:02:65:de:aa:b0:3e:b7:1f:73:84:f2:12: 85:c4:91:e3:d1:d5:c0:62:75:47:82:0b:10:f3:c2: 18:3a:43:26:8b:d1:c3:57:ad:a2:9b:2f:0c:2b:4f: 7d:99:e5:26:59:da:26:af:68:9e:5b:da:6b:5d:90: be:4b:cc:f7:d5:9c:3c:30:ad:f4:31:26:17:4f:d3: 8a:b0:88:ae:7c:34:d6:08:37:e6:ab:58:68:81:11: 42:30:29:bf:5d:c9:d9:24:e7:57:23:c5:b5:0e:b1: 1d:08:66:20:fa:ef:c4:bc:fd:ed:e4:56:73:7d:b3: e0:5b:fa:1d:50:1e:18:d8:95:ac:58:6d:0c:24:9a: 52:14:8c:69:9c:f6:5e:76:b2:4c:9a:63:f2:60:cb: e7:71:c1:3a:f4:02:6b:b7:30:c0:52:6d:ee:76:61: 1a:c5:8b:62:2e:1c:15:00:d9:2f:ad:9d:e3:15:45: 0c:3a:9a:a5:1d:ea:f7:3b:11:95:f4:1c:4d:8a:c1: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:A6:79:34:BD:9F:66:90:CD:E7:AC:0F:1D:7F:5D:77:3E:B0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl X509v3 Authority Key Identifier: keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer sbgp-ipAddrBlock: critical IPv4: 138.43.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:dc:cd:a2:41:de:8e:d8:4e:61:83:ad:9d:2e:32:2b:77:28: 1c:d5:55:54:41:0e:4c:a0:7e:46:e7:fc:e2:81:b1:9d:7d:5d: aa:fe:c8:36:91:2a:2e:a9:4d:61:bf:d5:80:f2:f8:52:2b:a0: e0:12:79:24:83:6e:fa:61:57:5b:8a:61:9a:cc:97:4c:15:0d: b5:6e:29:24:4d:69:95:c2:60:8d:30:c8:de:40:14:12:ca:78: 12:e6:29:65:f2:bd:b1:c2:c8:37:80:b3:4f:d3:c4:b9:56:93: 00:ea:eb:40:98:c3:a1:27:2f:1a:33:b9:21:04:7f:f3:d5:dd: e7:63:44:cf:bd:4f:f3:2c:2d:86:e3:2e:87:d9:ab:27:5a:b2: 5b:47:53:60:99:ac:13:0d:ca:f8:ce:e4:5e:19:17:23:cf:af: 0a:dd:65:21:74:22:84:2f:b1:3e:d4:07:a6:e5:6c:bd:a7:3c: 8e:b8:05:2f:2d:a3:d3:7e:fd:5a:a7:4c:56:f6:7f:62:c6:1a: ab:8a:da:b8:72:7a:a2:9a:06:bf:ea:6f:1f:15:f9:c5:4f:fc: f7:bb:bc:43:15:80:a7:57:65:4b:68:62:9c:90:d9:af:64:be: 9f:9d:22:32:d8:48:ac:94:45:03:cc:dd:10:89:44:8c:ef:41: 12:c2:25:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBvK9UkebV+0s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjNTk0YjItMDhjOC00ODY0LWFmYWUtYTYwN2Q3OWJl YjczMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmQxYmYwMGMtMWUzZC00OTZlLTlmZDctM2NkNjVkY2ExODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq39Vn79mgGnrSpxk6JXbgnn29LxAC72t82r2 ElBxVeNOK5wKwFqaxYWxbXwAxYa7R6JQdWStQO4rFioVpo8CZd6qsD63H3OE8hKF xJHj0dXAYnVHggsQ88IYOkMmi9HDV62imy8MK099meUmWdomr2ieW9prXZC+S8z3 1Zw8MK30MSYXT9OKsIiufDTWCDfmq1hogRFCMCm/XcnZJOdXI8W1DrEdCGYg+u/E vP3t5FZzfbPgW/odUB4Y2JWsWG0MJJpSFIxpnPZedrJMmmPyYMvnccE69AJrtzDA Um3udmEaxYtiLhwVANkvrZ3jFUUMOpqlHer3OxGV9BxNisF0AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHjpnk0vZ9mkM3nrA8df113PrB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNGM1 OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3ZDc5YmViNzMvNDg0NzI1MmMtMGQyNC0z NTM3LWE4NGItYWQ2MmNiMjkzOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjRjNTk0YjItMDhjOC00ODY0LWFm YWUtYTYwN2Q3OWJlYjczLzI0YzU5NGIyLTA4YzgtNDg2NC1hZmFlLWE2MDdkNzli ZWI3My5jcmwwHwYDVR0jBBgwFoAUgoeFKgr4Ck4pP6waYgLkT6jsMGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNGM1OTRiMi0wOGM4LTQ4NjQtYWZhZS1hNjA3 ZDc5YmViNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfczaJB3o7YTmGDrZ0uMit3KBzVVVRBDkygfkbn/OKBsZ19Xar+yDaR Ki6pTWG/1YDy+FIroOASeSSDbvphV1uKYZrMl0wVDbVuKSRNaZXCYI0wyN5AFBLK eBLmKWXyvbHCyDeAs0/TxLlWkwDq60CYw6EnLxozuSEEf/PV3edjRM+9T/MsLYbj LofZqydasltHU2CZrBMNyvjO5F4ZFyPPrwrdZSF0IoQvsT7UB6blbL2nPI64BS8t o9N+/VqnTFb2f2LGGquK2rhyeqKaBr/qbx8V+cVP/Pe7vEMVgKdXZUtoYpyQ2a9k vp+dIjLYSKyURQPM3RCJRIzvQRLCJcc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:13:33 2025 by rpki-client