$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa File: df871738-5e35-3002-9112-c507cc9ddafc.roa (raw, json) Hash identifier: otMtOO/qz/5wXZe6lpKp7uKgQjjqDcSvGhN1bQlhDgI= Subject key identifier: D8:0F:DD:B0:9E:4E:F5:0D:2A:E9:54:C2:01:38:8F:DA:42:2F:21:A6 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F43285848A830AB34D09B70B5EC28A500 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 17326 IP address blocks: 138.129.16.0/22 maxlen: 22 138.129.64.0/18 maxlen: 18 138.129.96.0/19 maxlen: 19 138.129.128.0/17 maxlen: 17 138.129.217.0/24 maxlen: 24 138.129.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ab:34:d0:9b:70:b5:ec:28:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=1e2d02fe-ef2f-4f92-99bf-e29ad33f9f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:e2:78:0c:38:3b:3c:c7:8a:0a:81:68:89: fe:75:0a:63:47:c1:2e:2c:8e:7f:94:4b:5e:23:b4: 14:c7:b4:de:e0:e8:73:8c:52:ff:23:0a:20:2e:73: 47:8c:fa:e0:0c:da:b4:05:c7:65:ac:2b:58:fe:7a: d9:cf:90:89:ec:2d:75:77:0e:6c:bc:4c:ab:22:98: cb:4e:8f:ac:60:79:57:66:38:0c:91:a1:d3:80:64: 69:80:c6:f0:8c:98:f8:f1:a3:8d:e5:45:9d:00:33: 71:bd:1c:37:90:0a:7c:1e:64:53:35:86:6a:fc:fa: e8:b9:06:9a:5f:7c:f7:a1:2e:cd:3d:42:74:fb:83: 80:ef:2c:2c:13:75:19:97:e2:19:a3:a0:05:94:ad: be:24:e3:6d:6a:b6:e1:0d:77:e3:a9:1b:d1:47:4f: 63:5e:10:00:18:0e:c4:5a:44:ea:21:60:02:67:13: 48:0a:88:45:72:a7:9a:f2:95:3f:69:7c:b2:4e:d7: 2b:62:42:ea:09:aa:c7:09:90:c7:21:4a:f7:ab:22: c0:8b:d2:15:e8:9e:a0:ef:0a:15:06:96:e8:8b:45: c9:09:51:d1:c2:81:99:c8:bf:60:4b:5d:2f:ec:c8: 4d:a1:3b:86:ac:de:44:46:e5:26:6c:a9:5f:02:42: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0F:DD:B0:9E:4E:F5:0D:2A:E9:54:C2:01:38:8F:DA:42:2F:21:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.16.0/22 138.129.64.0-138.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d0:c8:2d:5a:1e:2d:43:29:07:cb:d0:08:fa:ed:3f:34:70: 01:0d:f2:12:a1:6e:ac:63:58:dc:03:9b:e7:b9:fb:fd:88:f7: f4:80:30:67:b4:bb:24:eb:ad:66:2a:8b:74:ca:ae:55:e9:25: d0:79:9a:9d:d1:55:fc:51:60:da:f8:d3:be:91:aa:9d:31:11: 0b:56:8e:3e:2c:cd:ea:72:50:ea:99:d3:c9:c3:de:a9:29:41: f6:0d:45:76:b3:44:56:be:41:73:49:ac:1a:48:28:1e:8c:9f: f8:1a:1a:10:91:ed:61:7e:f8:2e:15:45:ac:44:1a:10:30:0c: c5:b3:ab:bf:15:f4:97:18:3f:a5:60:af:87:a5:a5:95:f3:7d: 2f:eb:56:d0:a9:81:9f:c8:b0:b5:06:93:c2:f6:ac:5c:b4:0b: 15:46:ff:d2:c0:c6:87:0b:e8:02:08:37:b0:c1:e3:bb:b1:3e: 41:b4:2e:7c:6d:35:59:0e:5a:60:79:36:14:03:e0:9d:54:0b: 3b:9f:a2:42:cb:dc:52:07:88:1e:97:2f:f2:5e:48:e8:b5:5f: c7:ec:3a:05:fb:c9:13:47:f5:00:fe:84:9c:96:d5:52:05:9e: 5c:36:06:6e:52:23:cd:50:bb:e3:92:b8:91:88:3a:f4:97:bb: a2:e7:99:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEioMKs00JtwtewopQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MWUyZDAyZmUtZWYyZi00ZjkyLTk5YmYtZTI5YWQzM2Y5ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXTieAw4OzzHigqBaIn+dQpjR8EuLI5/lEte I7QUx7Te4OhzjFL/IwogLnNHjPrgDNq0BcdlrCtY/nrZz5CJ7C11dw5svEyrIpjL To+sYHlXZjgMkaHTgGRpgMbwjJj48aON5UWdADNxvRw3kAp8HmRTNYZq/ProuQaa X3z3oS7NPUJ0+4OA7ywsE3UZl+IZo6AFlK2+JONtarbhDXfjqRvRR09jXhAAGA7E WkTqIWACZxNICohFcqea8pU/aXyyTtcrYkLqCarHCZDHIUr3qyLAi9IV6J6g7woV Bpboi0XJCVHRwoGZyL9gS10v7MhNoTuGrN5ERuUmbKlfAkL4HQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNgP3bCeTvUNKulUwgE4j9pCLyGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZGY4NzE3MzgtNWUzNS0z MDAyLTkxMTItYzUwN2NjOWRkYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQCioEQMAsD BAaKgUADAwGKgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAe0MgtWh4tQykHy9AI+u0/NHABDfISoW6sY1jc A5vnufv9iPf0gDBntLsk661mKot0yq5V6SXQeZqd0VX8UWDa+NO+kaqdMRELVo4+ LM3qclDqmdPJw96pKUH2DUV2s0RWvkFzSawaSCgejJ/4GhoQke1hfvguFUWsRBoQ MAzFs6u/FfSXGD+lYK+HpaWV830v61bQqYGfyLC1BpPC9qxctAsVRv/SwMaHC+gC CDewweO7sT5BtC58bTVZDlpgeTYUA+CdVAs7n6JCy9xSB4gely/yXkjotV/H7DoF +8kTR/UA/oScltVSBZ5cNgZuUiPNULvjkriRiDr0l7ui55l8 -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:35 2025 by rpki-client