$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa File: 8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa (raw, json) Hash identifier: dJuTvRK00k2MIw0XH4g43tKTid0IlPMgqHBnGg1sBY4= Subject key identifier: EF:5C:66:11:E8:F0:99:20:FD:24:73:28:E5:D8:14:F9:7C:7F:1B:D7 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584902EC22385FBF4F35BA2AE520 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 6195 IP address blocks: 138.8.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:22:38:5f:bf:4f:35:ba:2a:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=3c4bf4b8-eda3-4579-a93b-25316f42c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:7c:46:57:04:23:29:84:6d:63:9b:b2:e3: 2c:d5:5e:12:f0:87:17:a9:f7:61:ce:e7:95:bb:ec: 59:53:44:89:6c:2c:a1:87:be:bf:d1:5b:73:fb:a9: bc:13:fa:8d:8d:b8:d0:33:69:f0:43:2f:91:ba:95: 5a:91:6b:c0:93:9d:d4:4e:39:8b:4d:30:cf:26:c4: 9f:e6:eb:9c:ca:75:a6:df:a9:f5:fe:9e:4e:74:56: 1b:0b:76:3b:38:74:5b:6d:32:4f:8b:7e:f3:77:25: dc:2c:01:0c:cf:d3:00:81:10:74:54:ef:07:7d:40: 28:e7:54:ee:d9:2d:f0:69:e8:94:c7:74:a6:6e:84: 53:d3:05:97:f3:24:00:f9:89:f4:27:80:a0:ce:86: 53:96:6a:77:61:5e:f0:31:16:2a:5f:73:15:1e:64: f9:87:f0:be:3c:85:cd:0a:84:50:09:c2:5d:7d:70: b9:a6:b6:4d:d7:36:91:d7:17:80:a2:14:23:cc:87: 68:aa:f3:2d:f1:2c:88:af:68:d9:20:9b:1c:2e:a4: 06:98:2b:68:79:90:f0:c2:aa:0d:d4:78:3d:39:2e: 22:c9:f5:f1:a6:ae:79:75:d7:81:ca:f6:25:96:97: 55:9e:7d:50:2a:4f:64:65:52:c2:08:a2:d4:73:1e: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5C:66:11:E8:F0:99:20:FD:24:73:28:E5:D8:14:F9:7C:7F:1B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/8e7a707f-b1ed-3330-b22e-a581dcf13b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:41:21:b4:62:8f:86:71:a4:79:19:a9:4a:fe:98:a7:df:e8: f6:84:60:5f:8b:a3:af:60:6f:41:48:27:44:08:e7:2f:f5:ef: a6:43:db:dd:3b:75:b5:40:ea:46:63:43:7f:d6:9d:18:03:71: 14:fd:29:3c:d6:99:61:c3:9d:0b:0b:dd:5d:60:80:7e:41:d0: de:85:59:ce:48:23:a1:75:e6:07:13:7a:ba:85:c9:0a:89:e7: 60:0a:89:7d:52:e8:c1:bc:98:4a:6d:f6:e7:be:a5:35:5f:00: eb:76:64:46:94:ef:de:d6:ae:7b:63:bc:ea:33:62:09:8d:44: 65:82:37:40:6b:de:76:e8:82:54:f8:8d:3e:bf:d6:cd:68:d2: 40:ad:44:f5:76:71:35:54:9a:08:89:b0:c3:8d:d0:fb:a9:4e: 33:69:7b:7b:b4:15:b1:af:a0:bc:48:7a:f2:6f:b1:d6:a6:d4: 65:78:a4:2b:ce:ee:c4:a5:e6:7c:ae:0f:eb:35:39:d4:22:bb: f3:f9:de:1e:53:13:3d:97:52:89:63:5f:dd:70:05:e8:96:5a: 29:19:72:30:91:67:cb:33:5b:47:96:9f:0d:fa:ce:68:15:47: 38:82:17:6a:4b:54:7e:23:2b:5f:28:b8:18:bc:69:1f:8b:26: 7c:ec:10:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CI4X79PNboq5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk M2M0YmY0YjgtZWRhMy00NTc5LWE5M2ItMjUzMTZmNDJjNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFt8RlcEIymEbWObsuMs1V4S8IcXqfdhzueV u+xZU0SJbCyhh76/0Vtz+6m8E/qNjbjQM2nwQy+RupVakWvAk53UTjmLTTDPJsSf 5uucynWm36n1/p5OdFYbC3Y7OHRbbTJPi37zdyXcLAEMz9MAgRB0VO8HfUAo51Tu 2S3waeiUx3SmboRT0wWX8yQA+Yn0J4CgzoZTlmp3YV7wMRYqX3MVHmT5h/C+PIXN CoRQCcJdfXC5prZN1zaR1xeAohQjzIdoqvMt8SyIr2jZIJscLqQGmCtoeZDwwqoN 1Hg9OS4iyfXxpq55ddeByvYllpdVnn1QKk9kZVLCCKLUcx5OhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9cZhHo8Jkg/SRzKOXYFPl8fxvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOGU3YTcwN2YtYjFlZC0z MzMwLWIyMmUtYTU4MWRjZjEzYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdBIbRij4ZxpHkZqUr+mKff6PaEYF+Lo69gb0FIJ0QI5y/176ZD2907 dbVA6kZjQ3/WnRgDcRT9KTzWmWHDnQsL3V1ggH5B0N6FWc5II6F15gcTerqFyQqJ 52AKiX1S6MG8mEpt9ue+pTVfAOt2ZEaU797WrntjvOozYgmNRGWCN0Br3nboglT4 jT6/1s1o0kCtRPV2cTVUmgiJsMON0PupTjNpe3u0FbGvoLxIevJvsdam1GV4pCvO 7sSl5nyuD+s1OdQiu/P53h5TEz2XUoljX91wBeiWWikZcjCRZ8szW0eWnw36zmgV RziCF2pLVH4jK18ouBi8aR+LJnzsEJM= -----END CERTIFICATE-----Generated at Mon Apr 7 23:36:35 2025 by rpki-client