$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa File: c993d273-204c-3af8-95dc-bc8d56df4008.roa (raw, json) Hash identifier: N6ua9n80ySrXJBJsNA5cL/MXT2/Ez5ZICtRJjLGddIc= Subject key identifier: 21:52:C2:95:03:C7:8B:01:B5:E1:3E:97:BE:04:0B:15:83:E9:E4:DF Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Certificate serial: 010D0C9F43285848FD56C4BD1F18C0E565724120 Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 395347 IP address blocks: 138.43.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c4:bd:1f:18:c0:e5:65:72:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=9501a2d3-d409-4c13-aaa9-ec980c64d0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6e:69:d1:c6:b0:ef:3a:89:ac:9e:39:03:f5: 34:21:65:e8:72:d3:c8:34:fc:03:63:fa:c0:b5:5e: 88:53:57:71:69:0c:dd:d1:00:5b:bc:bd:e5:64:73: 84:80:40:20:8f:f2:f6:77:53:87:a4:9c:8d:f8:8e: 36:b9:05:55:8a:0b:c8:fe:ef:1d:e5:96:c7:24:97: 0a:05:39:fd:ef:22:be:64:d0:7d:ac:a5:77:96:b6: b5:b7:33:1d:c4:d2:37:ee:4d:b3:e1:35:8e:3e:4e: 36:49:80:b4:29:5f:c9:e6:e9:49:61:34:cd:29:ea: 63:00:d9:b7:00:a4:a3:54:ff:9a:90:14:6d:9f:31: b3:c5:8b:6a:9b:16:d3:38:57:59:86:c2:a9:51:47: 69:23:cb:a2:95:42:72:43:eb:4c:e8:fe:21:04:f7: 77:a2:7c:32:bc:6e:e5:38:50:52:04:cb:b0:85:50: 50:5e:16:32:dd:a2:5d:04:84:9c:3a:d1:42:f3:bf: 0d:5e:ab:63:a3:6d:04:28:42:5d:94:3c:af:13:d2: d2:7c:e1:28:92:9e:76:71:2f:2c:20:5c:d3:f0:c5: cd:f0:61:80:56:e4:eb:94:1c:81:d7:49:37:7e:c8: 2e:1c:4d:a2:6c:b4:98:88:a4:a5:72:0a:a6:e7:5d: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:52:C2:95:03:C7:8B:01:B5:E1:3E:97:BE:04:0B:15:83:E9:E4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl X509v3 Authority Key Identifier: keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer sbgp-ipAddrBlock: critical IPv4: 138.43.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:70:6b:fa:bf:7a:c9:c1:d5:37:98:f3:ba:03:36:4f:8e:fc: 44:c1:2a:f3:1c:6d:43:4a:ad:db:f5:e9:21:27:33:91:cd:b5: 73:9b:f7:82:13:5c:1c:e9:48:6f:0b:d9:f2:e6:a2:d9:66:a5: ae:65:2a:05:c2:30:ca:2b:8a:b1:4f:63:12:60:c3:06:d1:43: a9:df:f3:d1:9a:d1:a9:1c:2b:fa:8a:61:92:35:6f:80:5f:f5: e7:c8:50:e3:5c:6a:89:43:31:e5:93:d6:69:96:99:ec:68:88: b1:1c:77:d5:21:78:b2:c1:ab:cd:82:b6:b1:8e:78:77:b5:00: d3:5a:69:c9:7c:29:87:26:a1:6e:12:fe:21:50:50:c3:d9:07: 0e:9f:60:d7:73:b2:e5:9f:f7:d4:56:4a:5e:d9:68:47:05:21: 29:22:a5:51:d0:1b:58:f5:59:c2:af:23:ea:21:9a:20:b3:e2: ab:4d:1d:24:58:fb:c6:f3:ee:94:de:3f:e0:0f:e8:1d:c8:eb: 68:94:7f:9b:b4:0f:8a:49:cf:5f:66:22:91:3e:6a:5f:cb:c0: b3:8c:67:74:b0:42:d9:33:78:62:f7:bd:36:30:f1:df:d5:a4: ee:46:8a:37:49:2d:3d:95:48:25:d9:00:f2:29:08:05:1a:5d: 6e:a6:e7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsS9HxjA5WVyQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjODA1ZDUtNThhNC00NTNlLWIxNmUtYzY3N2NjYjZi NDZkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTUwMWEyZDMtZDQwOS00YzEzLWFhYTktZWM5ODBjNjRkMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG5p0caw7zqJrJ45A/U0IWXoctPINPwDY/rA tV6IU1dxaQzd0QBbvL3lZHOEgEAgj/L2d1OHpJyN+I42uQVVigvI/u8d5ZbHJJcK BTn97yK+ZNB9rKV3lra1tzMdxNI37k2z4TWOPk42SYC0KV/J5ulJYTTNKepjANm3 AKSjVP+akBRtnzGzxYtqmxbTOFdZhsKpUUdpI8uilUJyQ+tM6P4hBPd3onwyvG7l OFBSBMuwhVBQXhYy3aJdBIScOtFC878NXqtjo20EKEJdlDyvE9LSfOEokp52cS8s IFzT8MXN8GGAVuTrlByB10k3fsguHE2ibLSYiKSlcgqm513jKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFSwpUDx4sBteE+l74ECxWD6eTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4 MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3Y2NiNmI0NmQvYzk5M2QyNzMtMjA0Yy0z YWY4LTk1ZGMtYmM4ZDU2ZGY0MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjdjODA1ZDUtNThhNC00NTNlLWIx NmUtYzY3N2NjYjZiNDZkL2I3YzgwNWQ1LTU4YTQtNDUzZS1iMTZlLWM2NzdjY2I2 YjQ2ZC5jcmwwHwYDVR0jBBgwFoAUwQai+A2zt5NMcjsfcCq0j0hSr9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3 Y2NiNmI0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiivwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZwa/q/esnB1TeY87oDNk+O/ETBKvMcbUNKrdv16SEnM5HNtXOb94IT XBzpSG8L2fLmotlmpa5lKgXCMMorirFPYxJgwwbRQ6nf89Ga0akcK/qKYZI1b4Bf 9efIUONcaolDMeWT1mmWmexoiLEcd9UheLLBq82CtrGOeHe1ANNaacl8KYcmoW4S /iFQUMPZBw6fYNdzsuWf99RWSl7ZaEcFISkipVHQG1j1WcKvI+ohmiCz4qtNHSRY +8bz7pTeP+AP6B3I62iUf5u0D4pJz19mIpE+al/LwLOMZ3SwQtkzeGL3vTYw8d/V pO5GijdJLT2VSCXZAPIpCAUaXW6m528= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:52 2025 by rpki-client