$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa File: d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa (raw, json) Hash identifier: ZZZ+i1ooOiQujhX0XSnamzVQhFdNRKcCrAm6KA4mRek= Subject key identifier: 13:46:FC:6D:65:4A:F4:64:8F:F5:7E:33:4B:E3:42:6D:44:E9:80:9E Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F43285849300E959FD0F947BF11E864E0 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa Signing time: Fri 14 Mar 2025 18:02:01 +0000 ROA not before: Fri 14 Mar 2025 18:02:01 +0000 ROA not after: Thu 12 Jun 2025 18:02:01 +0000 asID: 15267 IP address blocks: 138.129.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:0e:95:9f:d0:f9:47:bf:11:e8:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Mar 14 18:02:01 2025 GMT Not After : Jun 12 18:02:01 2025 GMT Subject: CN=5fcdba1f-17bc-4c0e-ba96-83b555dfcbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:0e:a4:4a:1e:34:cb:b2:16:a1:5f:17:a9: 26:66:66:61:93:75:32:69:bc:76:a3:1b:bb:bd:6a: 6e:a1:03:ff:c1:c5:9d:71:a7:63:af:cd:a0:3e:7f: 5d:f3:71:4c:1d:df:94:44:c2:6f:57:e1:8f:88:d0: 5f:61:e5:e2:63:57:38:42:d6:d6:58:d0:5e:8f:0b: 23:f7:ae:4b:3f:d9:92:c9:87:d0:7e:7f:c3:e2:cf: 88:db:2f:6a:2e:7c:61:88:20:6c:ab:65:02:70:e7: d6:13:19:a2:75:67:f9:c5:27:6d:19:fa:7b:c3:4e: 66:59:6f:2c:2b:67:8e:b0:d6:d4:48:4c:8f:66:9f: d7:0a:6c:e9:24:e4:58:2a:3a:4e:eb:e5:68:a8:e6: 11:f6:0b:12:cc:88:d0:b5:52:53:38:41:d0:39:30: 11:43:c5:9b:e6:74:d0:a9:43:41:16:bc:0e:fa:03: 20:ae:3a:4f:1e:dd:c1:e5:e6:d5:79:5a:c5:7e:64: 0e:eb:01:e8:df:c2:f3:3c:47:54:88:73:09:83:be: 99:29:ab:9a:e2:a8:50:e2:fa:3f:13:96:dc:b3:e5: 16:d7:cb:7f:5c:b4:5d:01:ec:14:08:6f:43:e5:4c: e0:a2:64:e0:ba:d6:3e:d4:18:d8:4f:d9:96:c4:63: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:FC:6D:65:4A:F4:64:8F:F5:7E:33:4B:E3:42:6D:44:E9:80:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:82:98:fc:fc:62:7a:d9:1b:5c:11:35:a1:3c:c6:1a:60:f8: 52:aa:42:b3:1c:e4:cd:0d:77:5c:77:80:14:7a:64:c4:35:c1: 01:5e:1c:0c:d3:56:41:cf:35:2b:a5:f6:8a:6e:08:c3:2d:47: 50:b7:85:5a:a4:38:a3:9e:cf:32:3f:1c:14:33:07:d2:a3:bd: bc:c2:92:66:d8:dd:60:e5:cd:07:c1:94:39:e4:f1:7e:b5:e4: 05:16:d1:da:17:b0:d9:d3:ae:b9:35:a9:5e:f3:8a:d5:9e:45: f8:61:45:9d:46:23:fb:b6:94:ea:dc:7f:02:be:f7:11:b9:72: b2:6e:8b:0f:45:ef:a5:04:26:c6:d2:f5:50:0a:cc:15:90:15: 67:36:36:73:fb:b3:51:5b:bc:3c:a0:f2:83:dc:80:b5:df:58: 60:99:99:06:5d:54:03:9c:e6:00:2a:f1:f8:8b:2b:e9:06:f9: fd:d5:87:c4:50:8f:2c:f4:e8:b9:25:9d:67:db:32:20:47:da: 6c:24:83:8f:3e:63:c1:a9:74:61:32:4c:07:cd:52:73:cd:a5: 44:a0:9f:b5:0f:b2:b3:38:51:83:dc:71:23:40:87:a0:d4:7a: e4:cb:53:a9:6f:76:dc:55:c1:25:79:98:f1:5a:7f:98:1c:3d: 8a:36:74:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwDpWf0PlHvxHoZOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDMxNDE4MDIwMVoXDTI1MDYxMjE4MDIwMVowLzEtMCsGA1UEAxMk NWZjZGJhMWYtMTdiYy00YzBlLWJhOTYtODNiNTU1ZGZjYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwcOpEoeNMuyFqFfF6kmZmZhk3Uyabx2oxu7 vWpuoQP/wcWdcadjr82gPn9d83FMHd+URMJvV+GPiNBfYeXiY1c4QtbWWNBejwsj 965LP9mSyYfQfn/D4s+I2y9qLnxhiCBsq2UCcOfWExmidWf5xSdtGfp7w05mWW8s K2eOsNbUSEyPZp/XCmzpJORYKjpO6+VoqOYR9gsSzIjQtVJTOEHQOTARQ8Wb5nTQ qUNBFrwO+gMgrjpPHt3B5ebVeVrFfmQO6wHo38LzPEdUiHMJg76ZKaua4qhQ4vo/ E5bcs+UW18t/XLRdAewUCG9D5UzgomTgutY+1BjYT9mWxGM0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNG/G1lSvRkj/V+M0vjQm1E6YCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZDFjMjk4MGEtMWRhZC0z ZmUwLThhNDgtMzg3MjljZDViYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDioEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6CmPz8YnrZG1wRNaE8xhpg+FKqQrMc5M0Nd1x3gBR6ZMQ1wQFeHAzT VkHPNSul9opuCMMtR1C3hVqkOKOezzI/HBQzB9KjvbzCkmbY3WDlzQfBlDnk8X61 5AUW0doXsNnTrrk1qV7zitWeRfhhRZ1GI/u2lOrcfwK+9xG5crJuiw9F76UEJsbS 9VAKzBWQFWc2NnP7s1FbvDyg8oPcgLXfWGCZmQZdVAOc5gAq8fiLK+kG+f3Vh8RQ jyz06LklnWfbMiBH2mwkg48+Y8GpdGEyTAfNUnPNpUSgn7UPsrM4UYPccSNAh6DU euTLU6lvdtxVwSV5mPFaf5gcPYo2dD8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:15 2025 by rpki-client