$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa File: 4ecac424-bd8e-38fa-87c3-648aadedc605.roa (raw, json) Hash identifier: F2AvT0Gzyfw5iOCvRfX5SXvmYVLWC0zTpwJJqvo1ZEQ= Subject key identifier: 3A:9F:F4:B8:BC:3B:58:A9:73:75:C3:69:D5:89:E8:98:7E:9B:99:87 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584902EC222BE90503226E9F0A00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 6195 IP address blocks: 138.8.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:22:2b:e9:05:03:22:6e:9f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=29704a24-17ea-4bcc-a3fa-dfae784df8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:cc:5a:95:5a:d4:47:46:17:8d:14:fb:c1: 1c:d6:32:dd:11:16:b0:e8:c1:56:49:79:c2:5d:9d: 7f:58:67:7c:4d:4d:18:df:1b:f2:15:e7:7d:e1:4b: ef:d4:ec:2a:3d:0a:7d:f2:0f:a9:f9:2a:c1:5d:d4: 9e:e3:87:25:75:f6:b0:86:05:34:b0:ce:09:91:c0: f4:0a:47:e6:70:99:e1:5a:27:9d:62:a9:2c:6e:16: d7:e1:ba:05:f8:d6:e5:2b:50:13:84:4e:9b:07:c0: 54:80:32:58:fa:db:2f:c5:17:95:2d:34:94:02:31: f3:c0:64:ae:c1:b6:d9:4a:c6:5f:07:b3:3d:b5:ac: f8:74:a5:83:1c:c5:66:1a:8a:f5:93:6c:d9:b3:b0: 76:bc:7d:26:63:52:f0:ba:73:d2:51:e9:61:96:f6: 6f:81:82:bc:cf:ec:52:a4:e9:05:e1:d7:88:93:12: 5c:7e:06:51:59:b7:d2:2f:67:15:30:6a:3f:b9:57: 49:89:fb:c3:5f:c9:33:bc:5e:3e:57:56:bb:ce:a7: f2:24:76:5f:65:eb:bc:f3:0a:c9:95:92:b7:3a:86: 01:51:2e:d3:75:55:ec:e3:c5:8d:42:7c:32:fb:01: 76:b5:51:0f:3c:e2:18:5b:2d:28:02:12:23:c8:3e: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:F4:B8:BC:3B:58:A9:73:75:C3:69:D5:89:E8:98:7E:9B:99:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a3:01:f8:71:ce:6e:7b:e1:cd:c5:63:b8:19:d6:fe:19:d7: dc:c8:39:ac:13:ee:44:69:25:4c:8e:36:d8:30:1e:9c:b5:45: d0:70:1e:94:7e:73:b8:1e:c8:22:dc:7c:ea:fd:e5:90:95:94: 5d:93:68:9b:4b:62:d9:ae:8c:b2:56:35:60:2d:19:bd:00:9e: 09:bc:9c:28:02:13:d7:b5:fe:f0:21:0b:f5:b2:60:c0:41:23: eb:d6:ef:16:4c:9b:56:96:c4:b8:1a:e7:14:44:31:b4:ec:e5: f9:2e:53:d4:38:9c:4e:20:d2:bc:79:6e:80:5b:19:4d:57:97: a0:35:e4:6a:40:0d:f7:50:7c:66:f7:a8:77:58:04:15:1d:f9: c4:9d:4c:f9:c0:c0:2d:4e:62:82:01:76:b5:e3:b1:8a:f8:ae: a3:f1:19:fc:ee:2b:d8:51:31:ef:48:6e:7c:7c:4f:96:34:ca: 84:56:93:78:53:e6:b3:0f:ef:ea:97:7a:5e:32:03:0d:e9:36: 82:fb:45:52:ec:82:2b:e8:d8:50:45:dd:32:07:d0:03:b0:34: fd:e5:c6:35:a3:0f:68:a1:1e:72:53:04:03:d6:e4:ef:ef:28: 99:f1:36:22:d0:12:db:3e:2f:ac:fa:5d:d9:b4:3c:08:49:b4: 58:97:4f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CIr6QUDIm6fCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Mjk3MDRhMjQtMTdlYS00YmNjLWEzZmEtZGZhZTc4NGRmOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD/MWpVa1EdGF40U+8Ec1jLdERaw6MFWSXnC XZ1/WGd8TU0Y3xvyFed94Uvv1OwqPQp98g+p+SrBXdSe44cldfawhgU0sM4JkcD0 CkfmcJnhWiedYqksbhbX4boF+NblK1AThE6bB8BUgDJY+tsvxReVLTSUAjHzwGSu wbbZSsZfB7M9taz4dKWDHMVmGor1k2zZs7B2vH0mY1LwunPSUelhlvZvgYK8z+xS pOkF4deIkxJcfgZRWbfSL2cVMGo/uVdJifvDX8kzvF4+V1a7zqfyJHZfZeu88wrJ lZK3OoYBUS7TdVXs48WNQnwy+wF2tVEPPOIYWy0oAhIjyD7ueQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqf9Li8O1ipc3XDadWJ6Jh+m5mHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNGVjYWM0MjQtYmQ4ZS0z OGZhLTg3YzMtNjQ4YWFkZWRjNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGjAfhxzm574c3FY7gZ1v4Z19zIOawT7kRpJUyONtgwHpy1RdBwHpR+ c7geyCLcfOr95ZCVlF2TaJtLYtmujLJWNWAtGb0Angm8nCgCE9e1/vAhC/WyYMBB I+vW7xZMm1aWxLga5xREMbTs5fkuU9Q4nE4g0rx5boBbGU1Xl6A15GpADfdQfGb3 qHdYBBUd+cSdTPnAwC1OYoIBdrXjsYr4rqPxGfzuK9hRMe9Ibnx8T5Y0yoRWk3hT 5rMP7+qXel4yAw3pNoL7RVLsgivo2FBF3TIH0AOwNP3lxjWjD2ihHnJTBAPW5O/v KJnxNiLQEts+L6z6Xdm0PAhJtFiXT28= -----END CERTIFICATE-----Generated at Mon Apr 7 23:48:43 2025 by rpki-client