$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa File: d2dcbfac-203a-33df-9f7f-12da3285750e.roa (raw, json) Hash identifier: Y34LTT1HuuQffIK9Nv0jo1lqJGOpPD7TVm5UrM9Ed1Y= Subject key identifier: 57:50:48:66:D6:D3:99:A0:7C:60:8E:E2:6B:B5:F2:BA:2D:91:A4:D8 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858491676BE8FB9BDC922D6A9F680 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa Signing time: Wed 05 Mar 2025 14:00:51 +0000 ROA not before: Wed 05 Mar 2025 14:00:51 +0000 ROA not after: Tue 03 Jun 2025 13:00:51 +0000 asID: 6195 IP address blocks: 138.8.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:76:be:8f:b9:bd:c9:22:d6:a9:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 5 14:00:51 2025 GMT Not After : Jun 3 13:00:51 2025 GMT Subject: CN=da627478-f95b-4cf4-8b08-88becef57c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:ba:70:05:38:b6:43:37:b8:9d:8e:90:8a: b1:20:1a:93:00:6c:51:da:a4:c9:b5:4e:d5:b3:00: 3b:1e:8f:60:64:ca:1a:c8:78:f4:85:51:ea:c6:ec: 7b:74:92:44:65:2e:8a:bb:99:0e:eb:25:22:a1:e3: ec:67:59:ae:50:39:ac:28:23:e1:7d:45:2c:b5:dd: 25:f5:da:64:37:2b:82:71:f3:2b:67:21:95:e2:e7: 78:62:af:1d:cd:70:09:50:98:30:39:7e:a7:7d:6b: 4a:50:ec:3d:3c:c1:60:e1:b6:d7:15:13:15:7f:5e: 73:5e:71:d0:b0:58:52:b9:5b:72:9c:fd:fa:97:c2: c8:8d:d7:bb:3e:78:a4:95:e1:43:17:4f:45:d7:24: 83:19:ff:46:7b:e0:2b:a6:7d:f3:ff:1b:1a:7f:aa: 59:15:8f:98:bf:2f:f6:87:52:45:a2:96:71:6a:8c: 58:cf:2b:c4:8e:4c:c3:db:03:6e:ed:f6:dc:e4:cf: 8a:63:fb:0f:fa:30:0f:4c:c2:61:d5:c5:14:bf:48: 82:b5:3e:86:4d:58:4a:ea:c9:71:7d:d5:e1:95:67: e2:3d:2c:69:4e:e6:ae:06:ec:65:ca:1d:3f:68:ee: 43:d0:0a:cc:97:55:35:9b:ec:2b:e0:99:c7:0f:28: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:50:48:66:D6:D3:99:A0:7C:60:8E:E2:6B:B5:F2:BA:2D:91:A4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d2dcbfac-203a-33df-9f7f-12da3285750e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:ae:f4:3c:9d:0c:d9:10:3a:33:dc:04:ce:e7:f9:8f:cd: 10:d9:9a:90:6b:e7:35:71:2d:01:2f:ac:07:af:88:1a:9d:15: 54:40:0b:cb:89:c3:95:ee:bf:15:00:15:15:2c:fb:f3:8b:25: 58:15:de:eb:f4:97:75:84:ba:06:0f:02:9c:e6:0f:3b:d4:ad: 5c:67:be:01:b5:6c:3c:44:61:35:1b:d8:97:6b:d4:15:44:53: e6:4e:89:3d:16:82:1d:da:f5:4e:bf:9c:cc:25:bf:f2:5e:f3: 65:21:44:8f:01:f1:4b:63:66:b1:8d:ba:48:38:cd:58:a1:f8: 71:48:af:5e:3a:8d:ab:c9:b4:e9:43:21:5d:2d:b7:d2:cd:93: a1:80:e8:e9:47:6f:c5:fa:db:30:9a:80:45:1b:ea:55:43:90: f6:95:e5:3a:38:13:f9:05:a9:c6:01:31:ea:e2:1a:34:26:68: 9a:7a:39:98:e4:e6:7d:68:18:3e:de:63:6c:eb:ad:49:69:09: fd:4e:6f:34:b5:52:ed:3a:3a:c1:03:81:2c:a7:10:a4:81:ea: be:0d:64:47:9a:61:81:c0:1c:ac:19:15:eb:7e:65:a0:1b:81: da:3f:84:18:50:19:7f:0a:05:9d:36:32:9c:43:22:19:c6:92: 37:65:ba:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWdr6Pub3JItap9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMwNTE0MDA1MVoXDTI1MDYwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZGE2Mjc0NzgtZjk1Yi00Y2Y0LThiMDgtODhiZWNlZjU3YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCq6cAU4tkM3uJ2OkIqxIBqTAGxR2qTJtU7V swA7Ho9gZMoayHj0hVHqxux7dJJEZS6Ku5kO6yUioePsZ1muUDmsKCPhfUUstd0l 9dpkNyuCcfMrZyGV4ud4Yq8dzXAJUJgwOX6nfWtKUOw9PMFg4bbXFRMVf15zXnHQ sFhSuVtynP36l8LIjde7PnikleFDF09F1ySDGf9Ge+Arpn3z/xsaf6pZFY+Yvy/2 h1JFopZxaoxYzyvEjkzD2wNu7fbc5M+KY/sP+jAPTMJh1cUUv0iCtT6GTVhK6slx fdXhlWfiPSxpTuauBuxlyh0/aO5D0ArMl1U1m+wr4JnHDyjH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdQSGbW05mgfGCO4mu18rotkaTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDJkY2JmYWMtMjAzYS0z M2RmLTlmN2YtMTJkYTMyODU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPErvQ8nQzZEDoz3ATO5/mPzRDZmpBr5zVxLQEvrAeviBqdFVRAC8uJ w5XuvxUAFRUs+/OLJVgV3uv0l3WEugYPApzmDzvUrVxnvgG1bDxEYTUb2Jdr1BVE U+ZOiT0Wgh3a9U6/nMwlv/Je82UhRI8B8UtjZrGNukg4zVih+HFIr146javJtOlD IV0tt9LNk6GA6OlHb8X62zCagEUb6lVDkPaV5To4E/kFqcYBMeriGjQmaJp6OZjk 5n1oGD7eY2zrrUlpCf1ObzS1Uu06OsEDgSynEKSB6r4NZEeaYYHAHKwZFet+ZaAb gdo/hBhQGX8KBZ02MpxDIhnGkjdluuY= -----END CERTIFICATE-----Generated at Mon Apr 7 23:38:56 2025 by rpki-client