$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json) Hash identifier: n1r8f5EKVCcLbCLgxTxojSMl5fpaj2nHIE3HAuTf21I= Subject key identifier: 01:50:0A:D0:B7:81:45:4D:65:D0:63:F8:47:D6:BF:40:05:25:FD:3F Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F432858496FAF0D529D1ED454599816CC Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 8075 IP address blocks: 138.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0d:52:9d:1e:d4:54:59:98:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=dd26d7ad-673f-4e3b-b01a-fee220e067e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:4f:59:f3:16:e4:4b:12:8d:53:31:03:12: 26:3b:f1:ab:38:fc:5c:a9:dd:af:d7:3a:02:79:c4: d9:bf:f0:a0:27:de:d6:3f:48:5c:04:a4:b4:44:13: e7:cf:fc:3d:a0:a0:96:88:71:a2:6d:37:8e:b3:46: 9e:a6:b7:78:f3:33:32:ab:48:ce:e7:bb:39:d6:ba: 5f:fc:6a:12:66:2d:61:21:0c:11:93:72:a4:37:9b: 5d:4f:e2:6e:47:9f:01:5c:a4:97:8f:79:9e:82:63: 87:50:94:87:c0:a1:26:e1:a0:05:8c:b9:f8:c7:e4: 23:f1:f1:93:c0:f4:f8:4f:03:85:16:20:55:22:e1: 70:9d:96:13:fe:11:ac:bd:cb:48:01:6d:9b:d6:e9: 50:6d:4e:b6:4e:3d:3a:a4:6b:80:0a:69:dd:39:6f: ce:57:9b:fc:1e:d7:e2:cc:2a:6f:f8:56:b0:b8:e4: 62:b1:55:79:77:d3:9f:a6:25:6c:00:68:e6:bc:3d: c6:12:43:87:7e:f4:76:2f:ca:e6:10:17:e0:28:76: 9f:0f:cf:78:52:cd:d6:96:02:50:c6:3f:fd:fd:a5: e3:21:88:71:80:61:9b:cb:63:df:ae:6d:e9:4a:5b: e3:54:14:2c:a4:12:a0:35:11:cb:36:5d:f3:f6:91: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:0A:D0:B7:81:45:4D:65:D0:63:F8:47:D6:BF:40:05:25:FD:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:be:fc:21:6a:a8:39:f3:bd:cb:1f:88:e0:e4:4b:46:8b:bf: fb:ed:25:6a:b9:5f:b3:bd:be:13:fd:e0:c1:d4:47:61:29:73: d4:37:6d:60:12:83:20:14:44:5d:c4:35:c9:40:c0:e6:2d:df: 29:3e:78:6c:b6:8a:4d:a8:46:1a:71:a7:65:af:8a:47:4d:0c: 50:34:85:22:0d:2f:cd:d8:17:7d:e3:a9:c4:ef:b2:f7:22:58: 0c:9d:d4:e7:22:99:73:32:33:c5:79:a5:6c:d0:40:da:77:98: 57:f5:c8:15:45:bc:9b:7a:de:b5:35:62:d7:b9:e0:16:a3:fa: fc:a0:3e:44:cd:4d:ab:0a:82:6a:aa:97:52:cc:07:ac:6d:61: e6:7f:0e:18:0b:ec:0f:e4:6e:1c:a7:e1:bd:89:87:78:16:52: d5:d8:30:88:f6:89:ca:d6:ca:01:ed:bf:22:86:4d:3b:29:48: 33:09:f6:11:b6:d3:77:16:d3:eb:f9:07:08:3f:d3:5e:8b:a1: b9:21:c8:70:08:89:fd:bc:bc:ec:2f:5a:e8:da:be:5a:06:a6: ce:40:5a:11:c9:a8:44:88:a2:59:ca:e6:f3:e9:e2:e2:8b:b3: 58:b6:8e:96:e1:2b:8d:1c:d5:46:d9:61:12:0c:f5:b5:ce:95: fe:c0:a2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrw1SnR7UVFmYFswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGQyNmQ3YWQtNjczZi00ZTNiLWIwMWEtZmVlMjIwZTA2N2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQFPWfMW5EsSjVMxAxImO/GrOPxcqd2v1zoC ecTZv/CgJ97WP0hcBKS0RBPnz/w9oKCWiHGibTeOs0aeprd48zMyq0jO57s51rpf /GoSZi1hIQwRk3KkN5tdT+JuR58BXKSXj3megmOHUJSHwKEm4aAFjLn4x+Qj8fGT wPT4TwOFFiBVIuFwnZYT/hGsvctIAW2b1ulQbU62Tj06pGuACmndOW/OV5v8Htfi zCpv+FawuORisVV5d9OfpiVsAGjmvD3GEkOHfvR2L8rmEBfgKHafD894Us3WlgJQ xj/9/aXjIYhxgGGby2Pfrm3pSlvjVBQspBKgNRHLNl3z9pFfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFQCtC3gUVNZdBj+EfWv0AFJf0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvODJhNTlkMDktYTY4YS0z Yjc0LTgyMWYtYWNkM2MwNmRhYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK+/CFqqDnzvcsfiODkS0aLv/vtJWq5X7O9vhP94MHUR2Epc9Q3bWAS gyAURF3ENclAwOYt3yk+eGy2ik2oRhpxp2WvikdNDFA0hSINL83YF33jqcTvsvci WAyd1OcimXMyM8V5pWzQQNp3mFf1yBVFvJt63rU1Yte54Baj+vygPkTNTasKgmqq l1LMB6xtYeZ/DhgL7A/kbhyn4b2Jh3gWUtXYMIj2icrWygHtvyKGTTspSDMJ9hG2 03cW0+v5Bwg/016LobkhyHAIif28vOwvWujavloGps5AWhHJqESIolnK5vPp4uKL s1i2jpbhK40c1UbZYRIM9bXOlf7Aovc= -----END CERTIFICATE-----Generated at Mon Apr 28 08:24:56 2025 by rpki-client