$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8e93ab2-0372-3cc7-9219-60a0ebd5130c.roa File: c8e93ab2-0372-3cc7-9219-60a0ebd5130c.roa (raw, json) Hash identifier: p8sxmTUh9h9VJyh+Rs2yCJiKGZ43O9ttHpBaPHKZyE4= Subject key identifier: 8D:80:90:0A:F7:C6:7C:EC:DB:0D:EC:40:20:78:A9:8F:0F:BE:FF:C1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858485B6AFEDB5B7C2D5BA22B2640 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8e93ab2-0372-3cc7-9219-60a0ebd5130c.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 7018 IP address blocks: 138.229.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:fe:db:5b:7c:2d:5b:a2:2b:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=ab3b0edd-a2b8-4f65-9676-12efc84677af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:be:90:21:9d:9e:c9:86:2c:94:fc:51:16: b4:d2:ff:7c:97:98:07:bc:31:18:ec:f9:17:2c:51: 47:db:a5:79:51:5a:58:7c:96:1c:45:ec:18:c5:89: 4f:51:5f:af:01:77:a4:0f:e5:64:7f:af:d2:b6:a9: 4d:99:16:aa:ad:a3:a3:6e:fb:c2:e4:f0:4b:f6:f5: 14:b7:12:fe:85:aa:bf:40:65:cc:70:72:f8:e5:6d: 00:19:52:bf:8d:c0:6f:0e:67:f1:3f:11:bd:90:ba: d8:7b:0f:76:30:f7:a1:83:f0:0e:87:c7:32:4f:d5: 51:c8:7e:e9:7c:b7:71:bd:1b:eb:34:03:4e:3d:26: d5:19:68:0c:60:4b:0f:39:3d:84:37:3b:35:4f:14: 88:e5:66:44:7c:8a:01:14:08:7d:a4:b9:43:cc:cf: 13:09:15:5d:88:a2:6c:5a:58:77:1d:60:bd:72:ec: f6:cc:35:42:cc:04:f0:1d:ef:42:67:90:d0:e2:12: 63:96:a9:48:01:92:2f:6d:08:78:f4:7f:58:cb:8a: b8:5a:a3:c0:16:c0:d9:8d:9d:35:7d:f7:14:69:dc: be:8e:83:c9:ec:d9:62:a8:bc:5e:72:8b:73:da:69: 49:4a:51:c4:6e:85:a1:c7:4b:1e:e8:0a:f0:a2:da: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:80:90:0A:F7:C6:7C:EC:DB:0D:EC:40:20:78:A9:8F:0F:BE:FF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8e93ab2-0372-3cc7-9219-60a0ebd5130c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d7:24:f0:aa:27:65:c0:9c:fa:ae:22:56:3a:b3:2f:3d:22: 3e:21:4d:55:c3:9a:35:7d:58:23:13:aa:c7:2f:57:32:c3:f7: 4c:ae:65:9c:3d:f7:1e:01:30:c9:10:cf:cd:e9:3d:c7:4b:fa: 9c:5d:06:35:c3:eb:e3:9e:e5:a0:d0:9a:3e:cb:dd:4d:1f:b4: 07:f0:0f:d5:f3:59:67:27:b0:7e:bd:ba:66:ec:d2:6f:c6:45: 66:c0:95:63:4b:ef:82:2f:75:01:eb:bc:f2:45:06:9d:6c:5e: 24:05:23:d0:c2:a9:47:39:06:42:22:49:2b:12:58:d3:8f:69: b4:9b:f0:ac:a3:c3:d2:58:e1:75:60:eb:c0:b8:bd:68:dc:7f: cc:98:03:81:0b:a3:59:7c:b2:c1:12:35:61:72:0e:ab:b6:f1: 8b:98:b8:ba:58:11:5c:57:62:ff:6e:d9:a2:53:24:0c:1e:f0: ef:58:de:b3:66:76:35:44:f0:16:91:2a:0f:c6:2b:96:7b:13: 87:e9:a1:5e:0b:d1:1e:29:cd:51:e9:e1:7f:43:fd:76:51:fe: 77:c6:57:55:07:74:f8:cf:6f:89:f2:69:39:d1:ee:da:bb:c4: 81:42:60:59:18:ce:dd:23:fd:74:25:be:0f:78:72:72:26:00: dd:4e:f2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbav7bW3wtW6IrJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk YWIzYjBlZGQtYTJiOC00ZjY1LTk2NzYtMTJlZmM4NDY3N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPW+kCGdnsmGLJT8URa00v98l5gHvDEY7PkX LFFH26V5UVpYfJYcRewYxYlPUV+vAXekD+Vkf6/StqlNmRaqraOjbvvC5PBL9vUU txL+haq/QGXMcHL45W0AGVK/jcBvDmfxPxG9kLrYew92MPehg/AOh8cyT9VRyH7p fLdxvRvrNANOPSbVGWgMYEsPOT2ENzs1TxSI5WZEfIoBFAh9pLlDzM8TCRVdiKJs Wlh3HWC9cuz2zDVCzATwHe9CZ5DQ4hJjlqlIAZIvbQh49H9Yy4q4WqPAFsDZjZ01 ffcUady+joPJ7NliqLxecotz2mlJSlHEboWhx0se6ArwotqjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2AkAr3xnzs2w3sQCB4qY8Pvv/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzhlOTNhYjItMDM3Mi0z Y2M3LTkyMTktNjBhMGViZDUxMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnXJPCqJ2XAnPquIlY6sy89Ij4hTVXDmjV9WCMTqscvVzLD90yuZZw9 9x4BMMkQz83pPcdL+pxdBjXD6+Oe5aDQmj7L3U0ftAfwD9XzWWcnsH69umbs0m/G RWbAlWNL74IvdQHrvPJFBp1sXiQFI9DCqUc5BkIiSSsSWNOPabSb8Kyjw9JY4XVg 68C4vWjcf8yYA4ELo1l8ssESNWFyDqu28YuYuLpYEVxXYv9u2aJTJAwe8O9Y3rNm djVE8BaRKg/GK5Z7E4fpoV4L0R4pzVHp4X9D/XZR/nfGV1UHdPjPb4nyaTnR7tq7 xIFCYFkYzt0j/XQlvg94cnImAN1O8pk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:50 2025 by rpki-client