$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa File: 9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa (raw, json) Hash identifier: EybUif2fVa++4yIiiVxMGh9KBIsSowQrwSD9gxTQRss= Subject key identifier: C4:3C:B5:CB:FA:A0:39:BF:D2:37:2E:F3:A5:00:DE:86:40:EC:C8:CF Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584902EC2266FE1045EBDEC6C190 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 33598 IP address blocks: 138.8.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:22:66:fe:10:45:eb:de:c6:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=13b4aa8a-cdeb-4a89-ba67-025cc8688b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:af:ae:47:a8:21:af:fa:dc:af:2d:86:e2: 2b:4a:86:23:8a:f1:66:1f:c7:a3:59:24:66:a5:2f: f3:58:b4:7e:4d:2b:8f:85:c7:19:c6:e2:c0:63:22: ec:eb:e5:40:72:63:3a:8c:9e:1d:63:74:6d:95:66: 58:d0:59:8b:d5:f3:d1:bf:be:87:d4:84:77:33:0d: bd:4e:98:7f:82:10:95:64:d3:7a:f7:11:29:70:7a: 6a:6c:39:dc:dc:5e:db:0a:e1:19:91:fc:3b:ca:11: ea:b2:06:84:f6:d2:3c:7e:8f:66:fa:e1:7a:e2:88: f7:bb:7e:22:19:7d:37:24:c5:c2:8e:6c:2c:3e:1c: 8f:73:ac:d1:54:ee:e7:fe:de:70:ae:6f:d7:76:10: 61:c6:5c:e4:1d:2f:17:5a:8a:b4:53:2f:c2:27:7a: 10:9d:81:4a:99:f6:0e:1c:d0:da:34:f1:d8:44:e3: 08:b5:ae:6a:ef:2b:59:8b:ee:9f:1a:0d:74:32:8a: c3:be:a9:92:c9:b8:4f:84:f6:f7:d8:bc:39:b4:b1: 42:3b:c9:fc:77:f7:da:ab:f4:b3:b1:92:f5:d1:e4: e6:b3:91:77:25:de:ec:9e:36:b6:84:7e:8b:4d:9e: 67:8a:ef:fc:97:11:f8:88:ac:45:60:6f:a8:af:00: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:B5:CB:FA:A0:39:BF:D2:37:2E:F3:A5:00:DE:86:40:EC:C8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/9643bec3-bf4b-3ebe-b96d-0148bcfce259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cd:40:e6:22:74:4b:be:ed:b4:10:bf:7c:92:2f:20:2d:d6: 82:44:7a:77:99:86:47:d6:7a:a0:31:fc:36:fc:91:18:0b:e8: 7a:65:eb:a9:63:43:fb:6f:28:61:4e:8d:3d:a9:db:33:8d:f1: 13:7a:08:47:d1:55:f3:19:5d:1f:e5:89:61:e3:d8:79:e2:c5: 72:81:8b:b9:26:f8:d7:c1:5e:7a:62:61:17:af:c0:62:34:14: a2:45:f8:93:58:a1:67:28:81:0f:2f:3c:f4:df:69:dd:55:8c: 5d:d3:6b:44:70:a7:9b:aa:34:45:6f:e1:e2:f8:53:24:57:db: 88:06:07:a7:33:c3:04:8f:6c:69:51:51:a2:4d:b4:e8:68:95: 43:40:ee:b5:f5:e6:45:40:11:f7:c1:ca:42:34:4d:1a:4d:f8: 3c:80:1b:76:bf:bf:49:be:68:9c:ae:9a:97:2c:ee:82:b5:bb: fa:51:1a:11:27:79:74:c9:63:4d:46:93:07:f3:8a:18:20:ca: 37:7f:d6:8a:b1:5a:ac:ef:c5:fa:5d:66:c4:7b:13:fc:22:88: a5:c6:9c:2c:11:84:f4:1f:8d:c2:ca:0d:07:cc:1e:7d:41:1b: 84:2b:03:52:e5:ea:b9:7a:78:dd:f8:a5:07:2e:0f:79:e4:77: 13:1b:5a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CJm/hBF697GwZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MTNiNGFhOGEtY2RlYi00YTg5LWJhNjctMDI1Y2M4Njg4YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt2vrkeoIa/63K8thuIrSoYjivFmH8ejWSRm pS/zWLR+TSuPhccZxuLAYyLs6+VAcmM6jJ4dY3RtlWZY0FmL1fPRv76H1IR3Mw29 Tph/ghCVZNN69xEpcHpqbDnc3F7bCuEZkfw7yhHqsgaE9tI8fo9m+uF64oj3u34i GX03JMXCjmwsPhyPc6zRVO7n/t5wrm/XdhBhxlzkHS8XWoq0Uy/CJ3oQnYFKmfYO HNDaNPHYROMIta5q7ytZi+6fGg10MorDvqmSybhPhPb32Lw5tLFCO8n8d/faq/Sz sZL10eTms5F3Jd7snja2hH6LTZ5niu/8lxH4iKxFYG+orwB6YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ8tcv6oDm/0jcu86UA3oZA7MjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY0M2JlYzMtYmY0Yi0z ZWJlLWI5NmQtMDE0OGJjZmNlMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXNQOYidEu+7bQQv3ySLyAt1oJEeneZhkfWeqAx/Db8kRgL6Hpl66lj Q/tvKGFOjT2p2zON8RN6CEfRVfMZXR/liWHj2HnixXKBi7km+NfBXnpiYRevwGI0 FKJF+JNYoWcogQ8vPPTfad1VjF3Ta0Rwp5uqNEVv4eL4UyRX24gGB6czwwSPbGlR UaJNtOholUNA7rX15kVAEffBykI0TRpN+DyAG3a/v0m+aJyumpcs7oK1u/pRGhEn eXTJY01Gkwfzihggyjd/1oqxWqzvxfpdZsR7E/wiiKXGnCwRhPQfjcLKDQfMHn1B G4QrA1Ll6rl6eN34pQcuD3nkdxMbWno= -----END CERTIFICATE-----Generated at Mon Apr 7 15:26:44 2025 by rpki-client