$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa File: 7131aac6-c3db-33bb-bbc4-d301b29e4648.roa (raw, json) Hash identifier: 8s/gz3NTY30aL2cd/kE/jZ84oGvZnId2t7jvJUQr4ZM= Subject key identifier: 40:FD:43:D2:D2:53:35:1C:E0:81:18:C7:41:5C:98:52:7B:D3:0F:0B Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584900215E1976F28445FA960A80 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 54623 IP address blocks: 138.229.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5e:19:76:f2:84:45:fa:96:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=11e1af05-8151-4ad0-bce8-20e94ae824ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:ae:30:85:16:18:6e:e8:da:93:b7:82:a0: 06:e3:76:00:6e:6c:4c:f1:3d:fe:55:f1:47:0c:a5: 8d:45:97:13:59:9b:a0:40:ac:25:87:cc:fe:d2:2b: 60:a3:53:1a:89:cd:a0:bf:8a:ab:c1:4d:a4:ed:25: 89:69:9e:a6:f3:af:d4:c8:8f:9e:23:95:a4:64:a1: bb:d5:b1:19:a7:48:2e:74:f5:98:9b:18:3e:38:11: 82:d2:42:b7:53:8c:51:d9:7b:c5:a1:14:3b:98:a9: 9c:33:bf:97:6a:8c:81:bd:7d:cd:2a:43:eb:39:97: b8:fc:dd:8d:2d:51:40:b3:79:b1:e3:33:89:fa:4f: 80:ef:64:77:61:64:86:ab:57:02:49:3f:5c:45:b9: 38:04:0b:16:49:81:c4:77:85:83:ff:49:ff:e9:40: 5a:3f:28:73:ff:4c:6a:aa:99:d3:e6:93:d1:f3:81: fb:0a:57:2f:b7:df:04:29:0f:11:14:ec:f3:af:76: b4:0a:19:43:1f:09:3e:e7:0a:48:53:95:d6:2a:6f: 86:d1:dd:e1:86:05:ad:af:1c:1d:ec:08:64:78:9a: b4:c4:db:2b:c9:85:d2:49:da:5b:39:cf:ce:06:4b: 9e:43:52:fd:94:6f:3c:60:4e:bd:ff:3a:42:fa:82: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FD:43:D2:D2:53:35:1C:E0:81:18:C7:41:5C:98:52:7B:D3:0F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/7131aac6-c3db-33bb-bbc4-d301b29e4648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 138.229.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ac:c3:8e:92:7c:c8:3c:2f:36:bf:b8:f9:79:93:3c:18:04: 44:7c:08:31:eb:07:44:6d:2c:c1:ef:19:f5:6f:c3:0a:90:b9: 38:5f:7c:81:6a:d8:60:5f:a7:f1:0f:cc:fb:ec:ae:dd:2f:f3: 98:ea:79:a8:7e:35:ab:64:0f:4f:fe:31:09:98:16:50:f8:5f: 4c:6e:c2:45:7a:04:d7:2c:c7:88:ac:e5:99:de:75:1c:fe:90: 02:68:8d:cd:e0:38:f8:76:29:02:de:23:de:9e:7d:e1:f3:9f: 4d:2a:11:82:15:24:c8:c2:b2:6a:c7:20:8e:9c:77:e8:9e:c1: c3:c7:9e:2f:9b:b9:60:9f:71:b1:94:f5:4a:fd:48:9c:0a:45: 1c:1c:71:8b:6d:37:3b:db:ff:4c:6b:10:62:96:f3:30:55:5a: 7d:b3:31:3a:be:de:99:d2:51:e9:7b:37:4e:9c:7e:b2:0d:c5: 47:04:1b:06:1c:e4:8f:d4:82:7a:1b:fb:9a:86:4e:ab:39:61: 84:e3:dd:9e:13:c2:36:fe:4a:cf:d6:4a:91:d0:23:e0:9c:b0: 24:7f:4a:65:66:17:d8:f2:bd:5f:01:eb:01:86:d5:be:dc:bd: 65:8c:dc:d6:bf:d2:f8:fb:6b:4e:fd:74:df:08:88:f8:41:db: 9f:28:3c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV4ZdvKERfqWCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MTFlMWFmMDUtODE1MS00YWQwLWJjZTgtMjBlOTRhZTgyNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2SuMIUWGG7o2pO3gqAG43YAbmxM8T3+VfFH DKWNRZcTWZugQKwlh8z+0itgo1Maic2gv4qrwU2k7SWJaZ6m86/UyI+eI5WkZKG7 1bEZp0gudPWYmxg+OBGC0kK3U4xR2XvFoRQ7mKmcM7+XaoyBvX3NKkPrOZe4/N2N LVFAs3mx4zOJ+k+A72R3YWSGq1cCST9cRbk4BAsWSYHEd4WD/0n/6UBaPyhz/0xq qpnT5pPR84H7Clcvt98EKQ8RFOzzr3a0ChlDHwk+5wpIU5XWKm+G0d3hhgWtrxwd 7AhkeJq0xNsryYXSSdpbOc/OBkueQ1L9lG88YE69/zpC+oKI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED9Q9LSUzUc4IEYx0FcmFJ70w8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvNzEzMWFhYzYtYzNkYi0z M2JiLWJiYzQtZDMwMWIyOWU0NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKisw46SfMg8Lza/uPl5kzwYBER8CDHrB0RtLMHvGfVvwwqQuThffIFq 2GBfp/EPzPvsrt0v85jqeah+NatkD0/+MQmYFlD4X0xuwkV6BNcsx4is5ZnedRz+ kAJojc3gOPh2KQLeI96efeHzn00qEYIVJMjCsmrHII6cd+iewcPHni+buWCfcbGU 9Ur9SJwKRRwccYttNzvb/0xrEGKW8zBVWn2zMTq+3pnSUel7N06cfrINxUcEGwYc 5I/Ugnob+5qGTqs5YYTj3Z4Twjb+Ss/WSpHQI+CcsCR/SmVmF9jyvV8B6wGG1b7c vWWM3Na/0vj7a079dN8IiPhB258oPOw= -----END CERTIFICATE-----Generated at Sat Apr 12 14:58:34 2025 by rpki-client