$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json) Hash identifier: xx/iskuT6qVbAItRdbWYyqyzjpTd9FWI57fQEFVLtxs= Subject key identifier: 83:A7:40:D1:33:1F:06:8D:92:4F:A9:1A:4E:7E:02:1F:1D:F2:73:BB Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285848EF613F712BE0AFF2CF03AC00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 18593 IP address blocks: 138.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:71:2b:e0:af:f2:cf:03:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=933d5805-cb16-4230-9964-a97fcd2a9e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:7f:1a:2c:8a:de:60:de:cd:30:4b:a4:22: 39:ec:96:fa:45:37:12:d9:07:73:90:6b:f7:d5:97: d2:b0:ba:f8:ea:a8:fb:b8:42:e2:44:9d:e1:4f:bd: 80:f6:b6:2d:b8:53:43:8f:9d:ed:a7:8a:45:94:20: 5c:18:d3:e0:63:37:a3:37:94:2d:ec:f2:66:81:e3: 11:01:34:92:e9:6b:33:76:a3:bd:ec:8c:0f:8f:bb: a4:b5:21:a2:9e:1a:77:4d:87:13:f9:55:09:a4:d3: 4e:36:8c:af:2c:f5:67:17:e6:5c:a3:15:f7:db:ae: c2:2f:5f:c9:25:b5:ee:54:bd:c7:c5:6d:70:a0:5d: e9:6f:12:ea:fa:2b:1c:c6:69:fb:32:53:57:20:db: 2b:bf:1f:77:b8:5a:75:35:d6:46:9f:8d:6a:08:71: ea:fb:b6:39:68:37:b9:70:0c:24:16:2f:cb:36:d5: cf:ef:50:9c:45:5c:8c:5a:f7:d3:e5:8c:4a:71:99: 5a:7c:58:50:77:d8:a8:20:48:2d:79:aa:04:3b:7e: 58:95:a5:02:fb:44:21:8d:bf:ec:1b:17:db:1a:a9: 6e:24:c9:bd:ed:1a:43:f6:0a:54:c6:60:fc:2e:1e: 4e:b9:94:85:6a:57:7c:d7:4a:65:5d:15:35:ec:d7: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A7:40:D1:33:1F:06:8D:92:4F:A9:1A:4E:7E:02:1F:1D:F2:73:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e4:e1:b8:ad:c5:5d:54:1f:11:63:06:26:4b:30:02:5e:07: a4:c0:02:e3:3e:ea:df:f7:2b:fa:88:0b:a5:4d:a7:c9:21:01: 0f:c2:18:6d:d6:bb:ab:92:9b:68:dd:a3:3f:5d:2f:3e:ad:8b: cb:56:96:97:80:27:16:eb:ee:e0:c2:3f:ed:12:0e:d5:83:bb: bb:2d:fc:69:b8:88:ad:b8:28:a8:a6:03:3d:ed:34:51:6a:8c: fd:67:b1:74:e4:78:bd:4f:c9:28:b3:f5:8e:66:0b:6f:69:5d: 24:a7:0d:bf:cb:bb:ea:09:3f:5a:eb:8c:fd:80:42:30:08:e3: e5:94:37:52:2c:be:01:ab:8c:6f:8a:f7:14:e0:60:76:13:b1: 1f:af:aa:18:d3:46:9e:4c:88:dc:ff:db:b0:0e:0f:29:b7:8b: cc:21:51:03:66:7e:7f:64:73:dd:34:aa:bc:b5:96:cd:d6:68: 8f:27:79:21:4e:00:57:a9:25:4f:5f:cc:a0:60:57:a4:82:64: d3:35:14:6a:ad:e3:07:e4:3a:a0:d1:a1:83:c3:0f:f1:ad:14: a4:92:39:df:7d:77:b1:7c:2b:45:6e:51:7f:4c:8d:5c:8a:2d: 22:70:75:df:99:8e:b6:9b:8e:75:d8:6a:e8:a7:59:63:e7:ce: a7:2d:1b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT9xK+Cv8s8DrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OTMzZDU4MDUtY2IxNi00MjMwLTk5NjQtYTk3ZmNkMmE5ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hh/GiyK3mDezTBLpCI57Jb6RTcS2QdzkGv3 1ZfSsLr46qj7uELiRJ3hT72A9rYtuFNDj53tp4pFlCBcGNPgYzejN5Qt7PJmgeMR ATSS6WszdqO97IwPj7uktSGinhp3TYcT+VUJpNNONoyvLPVnF+ZcoxX3267CL1/J JbXuVL3HxW1woF3pbxLq+iscxmn7MlNXINsrvx93uFp1NdZGn41qCHHq+7Y5aDe5 cAwkFi/LNtXP71CcRVyMWvfT5YxKcZlafFhQd9ioIEgteaoEO35YlaUC+0Qhjb/s GxfbGqluJMm97RpD9gpUxmD8Lh5OuZSFald810plXRU17NfTDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOnQNEzHwaNkk+pGk5+Ah8d8nO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNDE0Nzc4N2EtODBjMi0z YjhhLTljYTUtNDk5ODRjOTY3MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXk4bitxV1UHxFjBiZLMAJeB6TAAuM+6t/3K/qIC6VNp8khAQ/CGG3W u6uSm2jdoz9dLz6ti8tWlpeAJxbr7uDCP+0SDtWDu7st/Gm4iK24KKimAz3tNFFq jP1nsXTkeL1PySiz9Y5mC29pXSSnDb/Lu+oJP1rrjP2AQjAI4+WUN1IsvgGrjG+K 9xTgYHYTsR+vqhjTRp5MiNz/27AODym3i8whUQNmfn9kc900qry1ls3WaI8neSFO AFepJU9fzKBgV6SCZNM1FGqt4wfkOqDRoYPDD/GtFKSSOd99d7F8K0VuUX9MjVyK LSJwdd+ZjrabjnXYauinWWPnzqctG1M= -----END CERTIFICATE-----Generated at Mon Apr 7 23:44:07 2025 by rpki-client