$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa File: 0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa (raw, json) Hash identifier: MBF2dhNPANdXAKBYGv19wKKw+N666ZUOLSppcucOYOk= Subject key identifier: 66:F0:63:9C:D7:2A:EF:44:B6:15:2B:D3:4C:D7:F1:AA:28:6E:F6:5D Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285848EF613F416CE83AB0CB224420 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 18593 IP address blocks: 138.8.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:41:6c:e8:3a:b0:cb:22:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=42eaa3b9-41fb-4c4f-94ff-a2ebee7935dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:10:92:e1:f5:ce:d3:72:fe:b6:15:dc:d9: d3:6c:a4:b1:e4:c6:5b:55:69:69:31:da:c3:ef:2a: ad:0e:8d:31:63:8f:e5:61:66:0e:f5:ec:6b:16:53: 98:67:09:29:c0:c8:e0:6d:57:6c:ee:79:0f:3b:c3: 8f:54:f1:51:3c:99:4c:60:bd:c5:6b:ce:e6:68:a7: 6a:ac:cf:53:11:32:eb:8f:a4:98:5e:6d:68:85:01: 15:f8:98:ef:ff:bb:c7:f4:74:bd:7d:f2:eb:bc:4f: d1:a1:cb:3c:60:42:38:14:56:62:10:47:31:5d:c3: f1:69:f7:4d:5b:73:4c:97:d3:46:90:61:c2:c4:cd: 8c:7d:93:da:3d:67:ed:c2:5d:ea:ee:9a:1c:a3:1d: 45:a6:27:a1:57:d4:4d:66:30:80:de:f1:66:2f:b5: 53:4b:ff:46:13:4a:3e:ec:ec:b4:96:f3:9c:f1:6c: 2c:1d:f1:7e:2f:b0:e3:4c:39:4c:ef:d6:1a:34:2d: 87:4e:ec:a8:b4:40:b7:94:7d:93:ff:53:b9:8e:f5: 30:36:5d:ed:7e:7b:d9:5a:84:74:6e:76:c7:24:eb: 5a:4f:c9:d6:ad:40:b1:26:5b:8a:0a:c7:ca:3b:d5: 0c:83:9e:17:29:12:02:46:c1:99:6c:be:c0:72:d3: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:63:9C:D7:2A:EF:44:B6:15:2B:D3:4C:D7:F1:AA:28:6E:F6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c2:65:3e:ec:a9:22:41:79:32:55:7b:8f:c9:d8:60:8e:fe: b1:e2:52:cd:97:15:ab:37:48:ab:60:39:2b:44:f9:d8:8d:05: 51:f0:3b:8c:52:3d:cb:5e:ce:33:51:a6:64:af:15:8d:8c:01: a0:db:d0:40:91:fa:55:90:c0:8a:9d:e8:54:0c:2d:70:e4:eb: 11:4c:6f:39:b8:29:87:b3:04:22:dc:4f:8e:72:da:92:77:7a: 60:1d:c9:d5:12:7f:75:ec:f0:ee:57:f5:e3:07:1c:79:96:ae: 1f:41:74:aa:eb:5d:af:81:f8:6c:b3:ad:f2:9a:53:72:a2:b8: 6e:17:8e:a3:28:09:23:0f:96:f9:cf:cf:0e:db:26:44:fa:91: a0:77:79:e5:f7:f4:18:d3:ae:08:83:dd:22:9d:10:59:b7:aa: 6c:3d:a4:e2:2a:e5:9d:4c:c9:2e:11:7e:f0:a1:1d:5b:8f:8b: 49:48:08:4d:df:63:ec:35:a4:3c:ab:02:5b:dd:0e:89:2d:6a: 1f:fe:df:14:82:f3:27:2c:eb:24:a4:18:d4:b7:d2:94:ea:71: ef:c3:05:e8:26:04:e5:89:fd:c2:52:7d:f7:f3:b3:c0:98:8e: 5f:9c:56:f3:82:43:34:9a:c6:2d:ea:b4:34:b7:63:c3:c2:07: e9:1c:64:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT9BbOg6sMsiRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDJlYWEzYjktNDFmYi00YzRmLTk0ZmYtYTJlYmVlNzkzNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi90QkuH1ztNy/rYV3NnTbKSx5MZbVWlpMdrD 7yqtDo0xY4/lYWYO9exrFlOYZwkpwMjgbVds7nkPO8OPVPFRPJlMYL3Fa87maKdq rM9TETLrj6SYXm1ohQEV+Jjv/7vH9HS9ffLrvE/Rocs8YEI4FFZiEEcxXcPxafdN W3NMl9NGkGHCxM2MfZPaPWftwl3q7pocox1FpiehV9RNZjCA3vFmL7VTS/9GE0o+ 7Oy0lvOc8WwsHfF+L7DjTDlM79YaNC2HTuyotEC3lH2T/1O5jvUwNl3tfnvZWoR0 bnbHJOtaT8nWrUCxJluKCsfKO9UMg54XKRICRsGZbL7ActNmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbwY5zXKu9EthUr00zX8aoobvZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDE1NWU0ZjEtN2NkNC0z ZGI3LWFhNDktNWRkMjc2YWM4YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAightMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/CZT7sqSJBeTJVe4/J2GCO/rHiUs2XFas3SKtgOStE+diNBVHwO4xS PctezjNRpmSvFY2MAaDb0ECR+lWQwIqd6FQMLXDk6xFMbzm4KYezBCLcT45y2pJ3 emAdydUSf3Xs8O5X9eMHHHmWrh9BdKrrXa+B+GyzrfKaU3KiuG4XjqMoCSMPlvnP zw7bJkT6kaB3eeX39BjTrgiD3SKdEFm3qmw9pOIq5Z1MyS4RfvChHVuPi0lICE3f Y+w1pDyrAlvdDoktah/+3xSC8ycs6ySkGNS30pTqce/DBegmBOWJ/cJSfffzs8CY jl+cVvOCQzSaxi3qtDS3Y8PCB+kcZAw= -----END CERTIFICATE-----Generated at Fri Mar 14 07:55:01 2025 by rpki-client