$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa File: 1a632d63-6b73-39e1-a60d-629fb0d0c198.roa (raw, json) Hash identifier: 8HoHv9ul3so48lkFeY/nuSFo+dfj6s4zsGeBXmSu/fQ= Subject key identifier: B3:16:3C:06:67:F0:1A:A5:2E:F4:63:3A:2F:8A:CE:E4:DC:B6:DA:C1 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858491676BEAE152A7C85A194C240 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa Signing time: Wed 05 Mar 2025 14:00:51 +0000 ROA not before: Wed 05 Mar 2025 14:00:51 +0000 ROA not after: Tue 03 Jun 2025 13:00:51 +0000 asID: 6195 IP address blocks: 138.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:76:be:ae:15:2a:7c:85:a1:94:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 5 14:00:51 2025 GMT Not After : Jun 3 13:00:51 2025 GMT Subject: CN=a304d33a-9f94-44aa-9e07-3c01e88c570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:d2:ef:2f:5f:ed:2c:9b:d2:00:f5:0a:cc: 95:fa:e1:e2:c2:91:55:a4:28:f9:57:e6:77:59:6e: 53:dd:d8:a8:6a:a7:12:c9:40:7a:d8:f3:db:13:43: 97:ce:f1:4f:1d:19:fe:33:5c:83:10:12:15:82:bb: ff:81:25:39:97:ab:bf:90:ac:c1:58:86:16:da:f0: 0a:88:b8:93:0d:2d:9b:83:eb:af:f2:53:de:ea:0a: f6:ba:cd:af:03:28:4e:03:ff:5f:ac:56:74:a6:ea: 65:37:52:ae:36:c4:a9:e6:ee:59:83:ed:43:0d:b9: 50:bb:ca:b9:e8:2c:17:da:f3:c9:50:3c:a6:f3:b8: 9c:90:09:78:dc:b0:28:6e:8c:36:7a:11:5c:f3:12: 55:ee:67:70:f4:0c:7c:d4:94:95:83:3c:7d:34:d9: 58:82:8d:be:d7:fb:a7:88:42:25:5d:50:55:c8:ae: 12:e3:f7:90:54:53:fe:4a:28:bf:5e:6d:f9:66:87: bc:28:7a:d6:e0:97:fa:52:75:0f:6e:02:be:ad:53: 5d:6b:4a:9d:9d:c0:0e:5d:8f:19:7f:cc:98:63:24: a8:b2:98:2c:3d:05:77:a3:4d:10:01:67:4c:8f:d5: 4f:50:4c:e8:29:3d:15:51:ab:f8:a0:7c:2f:20:7c: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:16:3C:06:67:F0:1A:A5:2E:F4:63:3A:2F:8A:CE:E4:DC:B6:DA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1a632d63-6b73-39e1-a60d-629fb0d0c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f8:23:c1:2c:ee:ea:0b:1d:26:0f:44:eb:0b:80:66:bc:c4: 20:5a:28:e1:a9:4d:1f:6c:e8:1c:bf:2b:84:dc:b6:32:a0:7a: fc:6b:8a:d8:fd:bd:d0:2a:15:82:3c:46:04:25:41:39:3a:34: 8d:81:55:e4:d4:0a:e9:3b:ac:92:db:ec:f5:b0:20:ec:47:79: 6e:0d:6c:d4:d0:ab:33:fe:31:f1:95:2f:53:ae:83:a9:4d:16: 01:a7:43:c2:40:3a:a9:d4:8f:3c:30:13:c6:8b:c5:19:72:9c: 4e:0e:1f:38:dc:13:62:41:e8:bc:9f:5c:55:3d:78:e3:2a:52: 04:23:4a:84:96:e9:0e:ed:5e:a1:06:88:f0:7e:7a:93:1d:eb: 33:18:3e:f3:46:5c:df:98:64:05:d1:07:27:3a:d5:01:1d:83: 2d:ef:bd:f3:20:8f:5b:ab:a7:cc:ff:e0:a0:d9:c8:6b:37:ac: e4:34:be:5e:2d:58:37:f9:a3:fd:76:6c:e4:6c:91:2f:40:e1: 55:65:35:d0:88:bf:33:0c:3c:df:22:50:1b:45:11:42:f0:cf: 2a:31:bf:6f:03:9c:66:fc:46:80:1c:1b:75:83:10:65:f4:c0: ab:c7:0f:42:7d:2b:c3:c2:27:fb:89:10:25:d3:68:98:e5:ed: 29:9e:62:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWdr6uFSp8haGUwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMwNTE0MDA1MVoXDTI1MDYwMzEzMDA1MVowLzEtMCsGA1UEAxMk YTMwNGQzM2EtOWY5NC00NGFhLTllMDctM2MwMWU4OGM1NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqXS7y9f7Syb0gD1CsyV+uHiwpFVpCj5V+Z3 WW5T3dioaqcSyUB62PPbE0OXzvFPHRn+M1yDEBIVgrv/gSU5l6u/kKzBWIYW2vAK iLiTDS2bg+uv8lPe6gr2us2vAyhOA/9frFZ0puplN1KuNsSp5u5Zg+1DDblQu8q5 6CwX2vPJUDym87ickAl43LAobow2ehFc8xJV7mdw9Ax81JSVgzx9NNlYgo2+1/un iEIlXVBVyK4S4/eQVFP+Sii/Xm35Zoe8KHrW4Jf6UnUPbgK+rVNda0qdncAOXY8Z f8yYYySospgsPQV3o00QAWdMj9VPUEzoKT0VUav4oHwvIHyU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMWPAZn8BqlLvRjOi+KzuTcttrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMWE2MzJkNjMtNmI3My0z OWUxLWE2MGQtNjI5ZmIwZDBjMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT4I8Es7uoLHSYPROsLgGa8xCBaKOGpTR9s6By/K4TctjKgevxritj9 vdAqFYI8RgQlQTk6NI2BVeTUCuk7rJLb7PWwIOxHeW4NbNTQqzP+MfGVL1Oug6lN FgGnQ8JAOqnUjzwwE8aLxRlynE4OHzjcE2JB6LyfXFU9eOMqUgQjSoSW6Q7tXqEG iPB+epMd6zMYPvNGXN+YZAXRByc61QEdgy3vvfMgj1urp8z/4KDZyGs3rOQ0vl4t WDf5o/12bORskS9A4VVlNdCIvzMMPN8iUBtFEULwzyoxv28DnGb8RoAcG3WDEGX0 wKvHD0J9K8PCJ/uJECXTaJjl7SmeYmY= -----END CERTIFICATE-----Generated at Mon Apr 7 23:36:50 2025 by rpki-client