$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fdc4778a-8123-3a4e-85c9-e898ae77584f.roa File: fdc4778a-8123-3a4e-85c9-e898ae77584f.roa (raw, json) Hash identifier: muj8WxSUffqePhKh/hEFbhd+ew9HPUOQ0q3wU7ubzP4= Subject key identifier: 62:56:5E:5E:45:6E:15:72:E6:42:D6:7B:37:36:FD:8C:6F:08:20:F7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858493C092C7AF7675BFB9C47BD80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fdc4778a-8123-3a4e-85c9-e898ae77584f.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 138.229.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2c:7a:f7:67:5b:fb:9c:47:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=3da87849-4ac8-4d38-bc3c-71d4e55b5cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:a2:a4:dd:ed:5a:99:4f:90:1c:ac:f7:0a: b7:97:ab:d3:0d:f1:8b:48:46:65:d8:3b:f1:35:1f: 39:ab:dc:bf:27:29:b0:d5:4b:b8:6c:10:fd:60:0a: fb:67:61:da:8a:b0:94:44:b8:ff:00:79:1b:a6:6f: 75:ff:ed:c3:45:76:b9:a7:77:69:31:f8:4d:4b:e0: 1e:6d:6e:80:d0:ca:f9:a2:50:f7:c3:c0:69:ed:9d: 45:37:27:e9:08:16:73:92:97:3d:5b:03:fd:d1:8d: ff:a2:24:0e:63:9d:b7:e9:8d:8c:b4:71:ae:7a:f7: 5a:47:68:78:f9:eb:88:b8:2a:44:6c:7a:23:28:1a: 91:03:c3:37:e6:13:98:fc:d8:9f:1b:21:37:99:23: 49:f7:7c:b9:4b:ea:60:5a:6f:55:a3:8a:f6:28:31: 56:d7:a1:ff:ea:73:a9:1d:20:d1:91:0d:50:67:50: 72:6d:ba:6a:46:ad:33:ba:15:2e:0a:50:c9:c7:f7: cf:b1:a4:33:ec:60:20:66:6a:0a:a4:81:99:97:ba: 4e:d1:07:7e:7f:9b:6a:b5:d8:a3:c1:30:e7:6e:fe: f8:97:8d:d6:61:c5:c6:39:b8:23:0f:d7:16:36:19: 0a:54:26:7c:09:4d:a6:40:ad:40:b1:70:93:8e:e8: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:5E:5E:45:6E:15:72:E6:42:D6:7B:37:36:FD:8C:6F:08:20:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fdc4778a-8123-3a4e-85c9-e898ae77584f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:fb:9f:27:7d:4d:49:78:2c:13:04:60:6a:01:27:8e:ca:93: e0:fe:fc:be:9c:14:09:c0:c6:00:93:63:65:64:6f:91:df:73: 00:4c:4e:02:60:24:34:93:87:61:75:f1:99:ac:8e:17:fb:44: 0b:23:db:d2:61:f5:72:32:94:20:7b:2f:d1:79:6f:cd:68:b5: 22:9c:7d:aa:d9:bf:68:e0:a1:f4:a3:0a:95:5d:e8:0d:ed:82: 5d:98:9a:be:02:7e:46:4a:14:2c:a4:89:9b:5c:6b:56:35:f0: 8b:5e:ec:18:ff:fe:43:89:c6:f4:61:38:fc:18:df:4c:98:36: eb:99:b6:bc:bb:12:3d:9a:e6:f9:f4:1a:86:9c:6f:73:77:58: 84:4f:f2:5d:71:7e:9b:43:37:c8:e4:55:02:6a:95:6b:ed:63: 64:d5:86:f2:6e:aa:78:59:86:b8:e2:f1:81:d1:f3:d9:e2:3a: bb:01:21:4a:19:2c:77:ef:b7:28:90:db:64:fb:30:42:09:47: 39:3b:d4:7b:96:ad:81:9b:0d:6e:be:b1:5e:a2:2e:47:5b:ad: 1e:3a:d8:a2:7c:65:f6:01:a7:4a:e0:6c:b4:b2:e9:3a:16:8a: 9c:1f:90:4d:e3:a3:18:43:61:a9:64:ac:ad:9f:69:91:58:90: a0:4c:d6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSx692db+5xHvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk M2RhODc4NDktNGFjOC00ZDM4LWJjM2MtNzFkNGU1NWI1Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKqipN3tWplPkBys9wq3l6vTDfGLSEZl2Dvx NR85q9y/Jymw1Uu4bBD9YAr7Z2HairCURLj/AHkbpm91/+3DRXa5p3dpMfhNS+Ae bW6A0Mr5olD3w8Bp7Z1FNyfpCBZzkpc9WwP90Y3/oiQOY5236Y2MtHGuevdaR2h4 +euIuCpEbHojKBqRA8M35hOY/NifGyE3mSNJ93y5S+pgWm9Vo4r2KDFW16H/6nOp HSDRkQ1QZ1BybbpqRq0zuhUuClDJx/fPsaQz7GAgZmoKpIGZl7pO0Qd+f5tqtdij wTDnbv74l43WYcXGObgjD9cWNhkKVCZ8CU2mQK1AsXCTjuhW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJWXl5FbhVy5kLWezc2/YxvCCD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmRjNDc3OGEtODEyMy0z YTRlLTg1YzktZTg5OGFlNzc1ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr7nyd9TUl4LBMEYGoBJ47Kk+D+/L6cFAnAxgCTY2Vkb5HfcwBMTgJg JDSTh2F18Zmsjhf7RAsj29Jh9XIylCB7L9F5b81otSKcfarZv2jgofSjCpVd6A3t gl2Ymr4CfkZKFCykiZtca1Y18Ite7Bj//kOJxvRhOPwY30yYNuuZtry7Ej2a5vn0 Goacb3N3WIRP8l1xfptDN8jkVQJqlWvtY2TVhvJuqnhZhrji8YHR89niOrsBIUoZ LHfvtyiQ22T7MEIJRzk71HuWrYGbDW6+sV6iLkdbrR462KJ8ZfYBp0rgbLSy6ToW ipwfkE3joxhDYalkrK2faZFYkKBM1qo= -----END CERTIFICATE-----Generated at Fri Apr 4 21:21:40 2025 by rpki-client