$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa File: 0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa (raw, json) Hash identifier: fGznlYdT4RKkJ4pF+waHvTxYN6h+voPrN285SlNjVl8= Subject key identifier: BF:C9:02:34:21:48:CB:47:44:E0:91:E9:74:E9:37:48:EF:B2:D4:6E Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858480EA506C9FF86A3A76F2A3F40 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 18593 IP address blocks: 138.8.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:06:c9:ff:86:a3:a7:6f:2a:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=8efc1068-5dfb-48ad-9b2f-5fb4d3f04e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:d4:07:be:b2:ea:58:ad:78:ff:a1:1b:c1: 30:29:0b:44:94:7f:5c:14:87:cd:64:04:6b:2d:41: 4f:18:81:95:39:c3:16:16:71:e7:37:4f:1d:08:02: de:07:59:41:9a:0b:4f:7d:b4:a8:2b:68:bf:34:0b: f7:43:a0:79:11:30:34:94:46:cd:38:bb:af:2a:69: 86:92:18:72:92:a5:84:1c:39:d2:21:0b:83:55:b7: f8:21:ad:79:10:e8:dc:1f:ce:e0:ac:1a:50:55:0a: b3:9d:9f:61:32:6c:a2:e1:dd:1a:c2:72:e5:7d:ec: 8f:42:02:dc:b7:6a:38:cd:ad:c6:28:1b:9e:cb:50: 8b:d1:93:24:d4:b6:c4:37:2f:ff:d3:17:a3:ba:06: 37:ab:75:ee:6a:23:59:7d:60:02:ca:cb:be:bf:d1: 07:c3:00:d6:12:a3:81:e5:b2:e3:1e:02:ca:cc:02: 7c:dd:49:ff:5b:09:80:78:20:e8:f3:74:85:c2:3e: 46:ea:0e:b9:de:b4:a9:06:32:0b:c8:4e:35:80:20: 55:d0:4b:df:d9:b4:a0:31:e0:20:8c:7f:8b:80:2c: 1d:b9:46:34:79:86:a3:6e:5b:12:8d:3b:f6:ae:de: e9:41:2a:76:af:91:cf:40:1d:66:60:8a:f3:ea:06: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:02:34:21:48:CB:47:44:E0:91:E9:74:E9:37:48:EF:B2:D4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b6:82:ce:92:5c:e8:67:c1:73:56:0b:73:70:2a:da:73:a8: d1:f2:98:1a:28:fa:75:72:63:ee:f5:1f:97:f2:22:ce:15:1e: 60:8f:f8:18:ea:90:08:45:c2:14:50:aa:ee:c0:52:d0:6a:6a: 10:b3:7a:cf:9a:66:b5:7d:e6:76:4d:e1:54:ea:9e:c4:19:54: 6f:0b:e7:09:1c:8d:33:c4:b8:61:73:8b:ed:4d:75:4f:8c:25: 9f:65:6c:9f:d9:99:a3:f3:cc:ee:3d:88:10:56:6a:70:85:61: a0:70:8a:87:2d:63:ba:be:40:ca:ef:95:82:35:ef:01:02:11: 4d:f6:47:a2:9a:cf:a6:c1:9d:57:07:5d:dc:5b:e7:59:bd:4e: e9:c1:fa:03:b3:9e:8c:64:e4:be:a5:72:8d:6d:91:7f:4d:5c: 7d:bd:5b:8f:50:12:77:c6:a3:7f:ad:dc:c8:a8:8a:8f:90:d5: 2e:d5:48:4b:e1:d3:e0:82:1f:fb:fd:b6:f8:73:50:3a:1f:6c: 56:09:18:e8:6c:0d:b3:30:55:db:3d:96:83:b4:3a:21:75:f9: 4c:a6:16:7e:38:d8:dc:5a:e5:99:58:76:21:70:40:50:7b:56: 4b:ad:03:9b:2f:9b:1c:77:d9:93:df:12:6e:16:c7:81:01:9c: c7:ba:fe:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQbJ/4ajp28qP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk OGVmYzEwNjgtNWRmYi00OGFkLTliMmYtNWZiNGQzZjA0ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx7UB76y6liteP+hG8EwKQtElH9cFIfNZARr LUFPGIGVOcMWFnHnN08dCALeB1lBmgtPfbSoK2i/NAv3Q6B5ETA0lEbNOLuvKmmG khhykqWEHDnSIQuDVbf4Ia15EOjcH87grBpQVQqznZ9hMmyi4d0awnLlfeyPQgLc t2o4za3GKBuey1CL0ZMk1LbENy//0xejugY3q3XuaiNZfWACysu+v9EHwwDWEqOB 5bLjHgLKzAJ83Un/WwmAeCDo83SFwj5G6g653rSpBjILyE41gCBV0Evf2bSgMeAg jH+LgCwduUY0eYajblsSjTv2rt7pQSp2r5HPQB1mYIrz6gYvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/JAjQhSMtHROCR6XTpN0jvstRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDE1NWU0ZjEtN2NkNC0z ZGI3LWFhNDktNWRkMjc2YWM4YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAightMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq2gs6SXOhnwXNWC3NwKtpzqNHymBoo+nVyY+71H5fyIs4VHmCP+Bjq kAhFwhRQqu7AUtBqahCzes+aZrV95nZN4VTqnsQZVG8L5wkcjTPEuGFzi+1NdU+M JZ9lbJ/ZmaPzzO49iBBWanCFYaBwioctY7q+QMrvlYI17wECEU32R6Kaz6bBnVcH Xdxb51m9TunB+gOznoxk5L6lco1tkX9NXH29W49QEnfGo3+t3Mioio+Q1S7VSEvh 0+CCH/v9tvhzUDofbFYJGOhsDbMwVds9loO0OiF1+UymFn442Nxa5ZlYdiFwQFB7 VkutA5svmxx32ZPfEm4Wx4EBnMe6/rE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:37 2025 by rpki-client