$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa File: 30b3dfbf-986d-3282-be34-b6747cec19c5.roa (raw, json) Hash identifier: BGv+G9/7VhRy013TZ5fczW+8r98LwKoz9gNrhcvDW6E= Subject key identifier: B0:BB:50:C0:69:30:F9:65:18:93:87:EE:A6:EA:43:57:ED:0A:6C:2D Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285848EF613F291141943B627F0600 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 18593 IP address blocks: 138.8.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:29:11:41:94:3b:62:7f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1730db72-9852-4dea-be59-cc77357a06e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:f9:5f:ba:32:ef:20:b1:01:b1:3b:df:ef: eb:eb:b4:1d:e3:d6:cb:b6:1f:04:82:bd:86:2d:66: 78:24:4a:a1:fd:d9:8f:f1:b8:18:7e:9c:16:6c:1b: d8:76:e0:52:f0:90:9e:28:a0:39:1a:45:51:20:52: 3d:a5:08:54:75:08:68:54:dc:41:60:cb:a9:38:a9: 9d:17:c3:61:40:5f:43:6c:13:a8:8f:ff:bb:c5:2a: 04:b1:4c:58:be:95:7a:e7:5a:c6:d3:35:ac:e8:84: 47:9f:17:ea:22:5c:c5:4e:b7:d4:32:e1:93:d9:d8: 3d:ff:a3:88:68:f8:fc:38:f6:26:5d:2d:5e:b9:60: 75:3d:85:7c:a3:f0:80:3d:dc:1f:05:40:4e:c4:52: 12:af:20:f9:af:b0:d8:9e:8b:63:d3:02:d7:bd:69: 01:06:a2:9d:8d:57:f7:3a:dd:6c:53:18:6b:7a:09: 9e:30:3d:ef:e1:b0:d2:a7:db:9b:bf:7b:4b:e0:99: 0f:bc:48:8c:0a:2c:7e:a7:8f:e3:6b:e2:21:24:0a: 64:c5:ae:43:05:ce:38:ea:b0:03:af:b1:51:5b:86: 41:98:60:27:5f:55:53:09:8e:5b:1e:a5:ae:4c:d4: 11:ce:72:86:33:c6:0a:0b:07:ae:ec:bb:c9:26:49: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BB:50:C0:69:30:F9:65:18:93:87:EE:A6:EA:43:57:ED:0A:6C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:41:89:9f:b3:fa:d4:a6:13:ae:d2:63:35:7b:af:77:67:b9: ba:39:43:e8:60:f7:e6:2c:c5:0f:00:c7:6a:6f:d0:00:e6:95: 40:55:4e:1b:40:d6:17:ef:7b:10:05:90:15:87:a4:71:56:37: 88:6d:8b:29:5a:76:72:4e:b6:16:71:b4:35:db:6c:45:55:19: b8:6b:a0:21:39:c3:20:2d:47:2c:97:8c:10:06:e9:af:21:1f: 47:11:d3:30:46:89:67:2d:4c:c9:7b:18:67:1c:2e:f7:34:d5: 6e:72:2b:18:63:8f:55:24:2e:65:c7:e9:13:2e:b0:87:63:ca: 56:91:cc:8e:47:b7:6d:e2:fb:d1:47:75:35:f2:27:e0:59:a8: f5:44:92:45:38:97:3d:e7:cd:1e:f7:af:78:d7:a0:3a:6d:2d: 1f:ac:eb:50:f3:84:a0:a8:84:63:7c:5a:e7:22:44:41:c1:7e: 31:94:0e:9c:35:5d:2f:43:7b:0f:85:fa:04:6c:22:46:9b:cb: f4:77:99:5e:33:94:a9:a8:e6:a9:7c:cd:c7:54:64:1b:cd:aa: 4c:ca:8f:9d:3c:89:d4:af:8c:da:40:b6:9a:42:b7:c4:26:66: e1:3e:41:53:58:52:29:50:39:34:4a:24:f2:38:e0:b3:9b:eb: 00:ee:68:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT8pEUGUO2J/BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MTczMGRiNzItOTg1Mi00ZGVhLWJlNTktY2M3NzM1N2EwNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+z5X7oy7yCxAbE73+/r67Qd49bLth8Egr2G LWZ4JEqh/dmP8bgYfpwWbBvYduBS8JCeKKA5GkVRIFI9pQhUdQhoVNxBYMupOKmd F8NhQF9DbBOoj/+7xSoEsUxYvpV651rG0zWs6IRHnxfqIlzFTrfUMuGT2dg9/6OI aPj8OPYmXS1euWB1PYV8o/CAPdwfBUBOxFISryD5r7DYnotj0wLXvWkBBqKdjVf3 Ot1sUxhregmeMD3v4bDSp9ubv3tL4JkPvEiMCix+p4/ja+IhJApkxa5DBc446rAD r7FRW4ZBmGAnX1VTCY5bHqWuTNQRznKGM8YKCweu7LvJJkngGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC7UMBpMPllGJOH7qbqQ1ftCmwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMzBiM2RmYmYtOTg2ZC0z MjgyLWJlMzQtYjY3NDdjZWMxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBBiZ+z+tSmE67SYzV7r3dnubo5Q+hg9+YsxQ8Ax2pv0ADmlUBVThtA 1hfvexAFkBWHpHFWN4htiyladnJOthZxtDXbbEVVGbhroCE5wyAtRyyXjBAG6a8h H0cR0zBGiWctTMl7GGccLvc01W5yKxhjj1UkLmXH6RMusIdjylaRzI5Ht23i+9FH dTXyJ+BZqPVEkkU4lz3nzR73r3jXoDptLR+s61DzhKCohGN8WuciREHBfjGUDpw1 XS9Dew+F+gRsIkaby/R3mV4zlKmo5ql8zcdUZBvNqkzKj508idSvjNpAtppCt8Qm ZuE+QVNYUilQOTRKJPI44LOb6wDuaFM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:01:14 2025 by rpki-client