$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa File: 96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa (raw, json) Hash identifier: M70GM+MAx+h1UqA6fHagAxoC6PLL7bHwNlYwosMQDZA= Subject key identifier: 6D:99:B0:B0:32:F5:2E:F5:E2:FE:C1:58:83:B2:2C:25:9A:A2:B4:F8 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858491676BF32E8AA6F688360F9C0 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa Signing time: Wed 05 Mar 2025 14:00:51 +0000 ROA not before: Wed 05 Mar 2025 14:00:51 +0000 ROA not after: Tue 03 Jun 2025 13:00:51 +0000 asID: 33598 IP address blocks: 138.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:76:bf:32:e8:aa:6f:68:83:60:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 5 14:00:51 2025 GMT Not After : Jun 3 13:00:51 2025 GMT Subject: CN=cf4dd9cc-21e7-43b7-ba56-9e269b475f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:81:8e:d8:a1:a9:7f:1a:5d:a0:b5:95:49: 08:ae:a0:25:94:17:ab:e6:dd:1c:8f:e6:cc:06:a9: fd:15:64:42:ab:2c:11:a7:c1:77:f4:34:85:f9:2c: 05:9f:10:70:49:5f:69:b8:5b:fc:91:5a:92:82:8d: 39:0a:3f:a3:6a:40:06:0f:7d:aa:e0:3f:8e:29:61: f3:99:ae:2e:26:cd:45:d5:c8:fb:6c:7e:83:1e:2a: da:1b:51:4b:b1:7e:24:4b:5a:ec:0b:8b:52:ce:b1: af:ae:3b:02:9d:03:94:4c:44:7c:2a:c8:07:92:a2: 1f:0f:d6:c0:7e:01:3e:4e:b0:5c:56:89:71:34:e6: a6:73:c7:9a:cc:4d:70:f1:e4:c4:15:71:7a:88:b6: a7:0b:36:d4:51:c3:e2:6b:06:87:b9:47:30:ce:94: 94:1b:4f:a4:54:70:19:71:cd:f1:15:14:a9:6a:b0: 00:cf:64:cc:82:43:b0:7a:d3:78:3e:18:1b:f9:08: 5f:c3:61:42:fa:bd:d3:05:8b:2e:91:4c:46:6f:0d: 18:97:32:02:f2:f7:07:1c:66:9f:e3:66:81:60:50: f5:ce:14:49:a6:05:95:a5:bc:f4:4a:66:c9:97:0b: b3:8f:09:1c:10:c3:e0:b8:59:20:a3:f3:cc:80:ee: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:99:B0:B0:32:F5:2E:F5:E2:FE:C1:58:83:B2:2C:25:9A:A2:B4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/96644a9a-08d4-3468-8f0d-6fffce0cf43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d5:56:57:8c:80:ce:84:c9:76:2a:28:2e:ac:d4:a3:9c:7f: a3:78:f3:37:be:cb:c7:f8:70:75:20:c7:39:77:5d:30:c6:8f: 64:84:56:d3:7c:08:93:7e:79:4f:f5:3b:ff:e2:93:25:50:e7: 76:42:b0:b5:8a:e4:72:67:00:1d:09:06:55:3d:3c:59:d1:17: d2:a7:45:9e:43:28:9f:74:15:04:82:5e:e1:4b:5d:4f:e8:b7: 9b:3a:1b:2b:1e:20:12:6e:e8:89:a2:e3:96:28:8b:70:23:2b: 98:c4:52:98:3c:4f:90:89:cd:05:21:59:3b:5e:11:05:48:b1: a2:ea:7e:2c:09:3f:9b:bd:76:7d:65:c9:a5:c4:86:58:87:84: a1:f4:78:d8:3f:b5:6b:32:da:11:df:73:d4:68:0a:5a:44:e7: 00:f6:6d:f9:c1:ce:b5:5e:f5:a6:0d:2c:0b:4f:e1:37:d9:32: 4f:42:65:50:02:23:fa:10:17:c5:e2:6e:cf:18:64:72:34:6b: c3:bf:f1:27:24:38:c6:d0:a5:f2:66:77:75:7e:18:33:30:54: c9:06:f0:8d:04:8f:09:2c:b6:35:eb:79:97:73:7a:94:8b:58: d9:3a:4a:56:de:32:c1:cf:8a:be:8c:b7:52:21:4e:82:41:c6: 62:3b:b8:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWdr8y6KpvaINg+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMwNTE0MDA1MVoXDTI1MDYwMzEzMDA1MVowLzEtMCsGA1UEAxMk Y2Y0ZGQ5Y2MtMjFlNy00M2I3LWJhNTYtOWUyNjliNDc1ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwaBjtihqX8aXaC1lUkIrqAllBer5t0cj+bM Bqn9FWRCqywRp8F39DSF+SwFnxBwSV9puFv8kVqSgo05Cj+jakAGD32q4D+OKWHz ma4uJs1F1cj7bH6DHiraG1FLsX4kS1rsC4tSzrGvrjsCnQOUTER8KsgHkqIfD9bA fgE+TrBcVolxNOamc8eazE1w8eTEFXF6iLanCzbUUcPiawaHuUcwzpSUG0+kVHAZ cc3xFRSparAAz2TMgkOwetN4Phgb+Qhfw2FC+r3TBYsukUxGbw0YlzIC8vcHHGaf 42aBYFD1zhRJpgWVpbz0SmbJlwuzjwkcEMPguFkgo/PMgO5HowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2ZsLAy9S714v7BWIOyLCWaorT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvOTY2NDRhOWEtMDhkNC0z NDY4LThmMGQtNmZmZmNlMGNmNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjVVleMgM6EyXYqKC6s1KOcf6N48ze+y8f4cHUgxzl3XTDGj2SEVtN8 CJN+eU/1O//ikyVQ53ZCsLWK5HJnAB0JBlU9PFnRF9KnRZ5DKJ90FQSCXuFLXU/o t5s6GyseIBJu6Imi45Yoi3AjK5jEUpg8T5CJzQUhWTteEQVIsaLqfiwJP5u9dn1l yaXEhliHhKH0eNg/tWsy2hHfc9RoClpE5wD2bfnBzrVe9aYNLAtP4TfZMk9CZVAC I/oQF8Xibs8YZHI0a8O/8SckOMbQpfJmd3V+GDMwVMkG8I0EjwkstjXreZdzepSL WNk6SlbeMsHPir6Mt1IhToJBxmI7uLg= -----END CERTIFICATE-----Generated at Mon Apr 7 15:29:10 2025 by rpki-client