$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa File: 30b3dfbf-986d-3282-be34-b6747cec19c5.roa (raw, json) Hash identifier: 8j31x/8IGPDkBqtaEA3VrMoSoAz84Pm3bzMTf7PSOnw= Subject key identifier: 3F:3D:55:6E:93:B1:C9:5D:EC:A1:A0:98:45:A2:22:26:5B:B8:FF:76 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858480EA506B8A26BC6CC9E6DBF20 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 18593 IP address blocks: 138.8.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:06:b8:a2:6b:c6:cc:9e:6d:bf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=45897dcd-15ee-41f8-9d2a-358d5f0a4ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:02:ac:ba:56:ff:d6:cb:77:1a:a5:03:a2: a6:e9:60:6f:a2:82:b5:11:b6:26:11:73:e7:18:8a: 33:ca:44:25:86:44:a0:0b:cc:7f:d8:ce:97:72:86: b2:0e:f0:39:63:8c:02:31:51:af:90:b0:17:52:98: 44:03:9f:b9:67:be:7d:de:5c:6b:42:3a:0b:1a:64: ca:9e:c9:af:06:3b:ed:0f:ae:5e:7b:aa:aa:3b:c0: 4f:bf:59:13:55:a5:a2:49:f7:34:f5:ff:46:92:07: 72:b7:6e:98:29:04:7a:0a:bc:a0:1b:21:11:3e:d6: b9:2e:95:24:e7:6b:c2:07:ca:77:52:e9:f1:4a:a3: d8:d8:8d:07:83:0a:4b:15:9a:03:35:c8:ea:88:71: 11:4b:5b:6b:8c:5e:bc:1a:d6:41:11:d4:29:41:18: b7:7a:15:52:e6:35:d2:bb:10:7c:68:19:64:24:79: 24:87:04:6d:b4:8c:c9:9a:91:b5:d2:05:d8:89:24: 51:ac:39:49:34:e4:98:3e:c5:ba:e2:f3:d5:f2:6b: 40:12:96:f4:72:a4:31:20:7e:d9:a2:27:5c:b0:2a: 09:8c:4c:95:d7:09:31:0c:d4:f7:d6:8a:e4:93:80: 5d:34:e5:0c:a9:e6:f0:2f:4a:73:f4:0b:f7:9f:f9: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3D:55:6E:93:B1:C9:5D:EC:A1:A0:98:45:A2:22:26:5B:B8:FF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:81:75:e2:7f:72:29:71:88:b4:d8:05:18:f2:ba:48:04:c8: db:1e:57:e7:7d:28:be:53:26:56:b3:1f:f5:86:b8:bb:c9:66: 5d:f9:62:3b:be:69:01:94:a7:1b:0d:30:e4:b0:a9:d7:84:89: f1:33:d0:e9:f5:93:75:4b:2a:04:f1:1a:e3:c7:46:dc:a3:de: 52:f6:8e:ab:ba:91:fc:c0:c2:10:bd:34:bd:8b:0d:18:ee:8e: 4c:d3:a3:53:ab:ff:d4:5f:e9:30:f8:24:8d:da:1e:45:9c:2f: a6:0f:87:49:4e:9f:67:c8:e3:94:34:4f:1d:cb:ce:13:d8:53: 39:fa:00:aa:70:b3:22:e5:92:74:2e:23:58:c2:fa:f0:dd:f6: 9e:15:61:0f:76:dc:75:b0:db:fb:3e:a7:5b:51:64:0f:03:2e: 14:bd:e0:6e:54:07:dc:21:8d:07:b5:1f:29:dc:40:e3:fe:bc: 33:70:a3:73:c9:6e:ae:a9:28:fd:e0:8d:14:58:79:bb:4a:af: 7e:24:6e:ce:ef:37:11:f6:1f:1c:8f:ee:50:6c:1c:65:f9:fb: 0f:d0:65:12:a7:e8:a2:2c:3e:59:d5:db:34:d1:2e:6e:e2:e7: 2d:24:92:18:26:e6:2f:d9:f9:8c:a9:41:12:44:a5:a0:d1:ea: 5c:4f:99:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQa4omvGzJ5tvyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk NDU4OTdkY2QtMTVlZS00MWY4LTlkMmEtMzU4ZDVmMGE0Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKQCrLpW/9bLdxqlA6Km6WBvooK1EbYmEXPn GIozykQlhkSgC8x/2M6XcoayDvA5Y4wCMVGvkLAXUphEA5+5Z7593lxrQjoLGmTK nsmvBjvtD65ee6qqO8BPv1kTVaWiSfc09f9Gkgdyt26YKQR6CrygGyERPta5LpUk 52vCB8p3UunxSqPY2I0HgwpLFZoDNcjqiHERS1trjF68GtZBEdQpQRi3ehVS5jXS uxB8aBlkJHkkhwRttIzJmpG10gXYiSRRrDlJNOSYPsW64vPV8mtAEpb0cqQxIH7Z oidcsCoJjEyV1wkxDNT31orkk4BdNOUMqebwL0pz9Av3n/nphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD89VW6Tscld7KGgmEWiIiZbuP92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzBiM2RmYmYtOTg2ZC0z MjgyLWJlMzQtYjY3NDdjZWMxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyBdeJ/cilxiLTYBRjyukgEyNseV+d9KL5TJlazH/WGuLvJZl35Yju+ aQGUpxsNMOSwqdeEifEz0On1k3VLKgTxGuPHRtyj3lL2jqu6kfzAwhC9NL2LDRju jkzTo1Or/9Rf6TD4JI3aHkWcL6YPh0lOn2fI45Q0Tx3LzhPYUzn6AKpwsyLlknQu I1jC+vDd9p4VYQ923HWw2/s+p1tRZA8DLhS94G5UB9whjQe1HyncQOP+vDNwo3PJ bq6pKP3gjRRYebtKr34kbs7vNxH2HxyP7lBsHGX5+w/QZRKn6KIsPlnV2zTRLm7i 5y0kkhgm5i/Z+YypQRJEpaDR6lxPmdk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:39 2025 by rpki-client