$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa File: 872408eb-35fc-31a6-b8b6-b17659a01317.roa (raw, json) Hash identifier: QoTXSRlBOxKVFPv1NbtUSa4KpNMey/Cn96VV26qsC6M= Subject key identifier: 6C:84:41:86:FA:FA:E9:4D:DA:47:E9:D3:92:66:DC:07:4B:76:C4:D3 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285849ABB49C572364A4EEB0B8BB60 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 396253 IP address blocks: 138.43.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9c:57:23:64:a4:ee:b0:b8:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2d8d1d9f-e7d6-458a-9016-5683ae182701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:7d:55:fe:54:bc:b6:c5:99:93:b5:97:55: ce:56:58:29:cc:19:0e:d8:61:4b:bd:31:98:38:d7: a6:0c:59:17:90:06:e4:62:78:9e:bd:73:bf:7d:9e: 56:fd:52:ab:2a:47:c3:62:4b:3b:b2:05:3e:5d:d3: 46:81:b9:15:d6:d1:e9:04:5e:e9:c2:c7:94:c7:ec: 3c:99:a3:d7:a5:1d:a2:bd:0c:b0:64:36:b6:94:16: 37:2d:59:7b:3a:66:1f:b9:29:b8:2c:60:1c:2b:bb: 32:27:d6:db:00:4a:9b:48:da:59:bd:06:e7:c5:7c: 24:9d:dc:aa:6b:dc:69:b9:52:00:10:f8:4d:5f:7c: 70:68:90:76:3d:fc:56:52:e3:87:db:4c:fa:74:0a: 5a:33:9d:c3:2e:72:cd:31:5c:38:00:38:b4:75:39: 0f:c5:40:9e:6d:a4:c2:bd:6c:ba:5d:df:6c:30:d9: 6f:f1:7a:aa:76:8e:3a:e2:37:82:a9:0a:0c:dc:22: 5d:e6:77:a3:63:ea:7d:ae:83:96:b0:00:db:15:f6: 7a:7e:ce:5c:78:43:0b:15:5a:f5:da:8c:55:e7:b7: 4b:26:4c:f3:4b:71:e9:94:38:dd:ee:4e:02:86:81: bf:8f:53:a5:7e:5c:ae:84:99:4b:72:bb:e5:f5:eb: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:84:41:86:FA:FA:E9:4D:DA:47:E9:D3:92:66:DC:07:4B:76:C4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:63:11:5b:ad:e8:2c:fc:ea:b1:0d:a2:58:d0:2e:0d:24:35: d5:2a:ab:b3:15:a0:d3:b9:a0:ed:41:6c:dc:a7:84:e9:16:36: 58:00:f9:81:6c:33:4e:67:44:28:3d:3c:4a:fd:c1:23:db:aa: 62:1b:38:7d:a6:48:3c:c4:1d:de:6f:7c:9e:40:bd:49:3f:c5: 56:76:72:6a:fc:81:7c:8b:5e:ed:3d:a7:6c:36:46:42:c4:a4: 36:7c:3f:dc:9a:6e:fe:a0:df:ac:9d:03:d1:62:96:59:33:9f: d8:75:28:47:b7:13:50:00:95:78:0f:50:95:05:ce:4c:92:c9: 51:5e:60:83:0a:ee:7a:6f:cc:e5:cd:dc:21:f2:1d:9c:ec:97: 2b:48:e4:8c:28:a9:39:79:9e:7e:1b:d9:d0:b1:9e:47:20:b0: 88:38:93:79:f5:09:77:cc:a1:ff:1b:c4:fe:9d:86:d9:52:75: 04:5e:96:28:75:d0:c3:8b:47:d9:b9:a2:1e:b7:32:c5:42:16: 79:5f:ef:23:e3:17:1f:cc:98:c8:27:5e:8f:a3:62:0b:70:3b: 3e:70:1d:6d:c2:e4:5e:b6:97:81:98:ab:40:39:4d:e1:bb:a9: a3:a0:86:f2:fd:7a:4f:77:db:ff:33:b6:de:43:82:62:36:ef: 42:b1:c9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJxXI2Sk7rC4u2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MmQ4ZDFkOWYtZTdkNi00NThhLTkwMTYtNTY4M2FlMTgyNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBl9Vf5UvLbFmZO1l1XOVlgpzBkO2GFLvTGY ONemDFkXkAbkYnievXO/fZ5W/VKrKkfDYks7sgU+XdNGgbkV1tHpBF7pwseUx+w8 maPXpR2ivQywZDa2lBY3LVl7OmYfuSm4LGAcK7syJ9bbAEqbSNpZvQbnxXwkndyq a9xpuVIAEPhNX3xwaJB2PfxWUuOH20z6dApaM53DLnLNMVw4ADi0dTkPxUCebaTC vWy6Xd9sMNlv8Xqqdo464jeCqQoM3CJd5nejY+p9roOWsADbFfZ6fs5ceEMLFVr1 2oxV57dLJkzzS3HplDjd7k4ChoG/j1OlflyuhJlLcrvl9esjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyEQYb6+ulN2kfp05Jm3AdLdsTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODcyNDA4ZWItMzVmYy0z MWE2LWI4YjYtYjE3NjU5YTAxMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5jEVut6Cz86rENoljQLg0kNdUqq7MVoNO5oO1BbNynhOkWNlgA+YFs M05nRCg9PEr9wSPbqmIbOH2mSDzEHd5vfJ5AvUk/xVZ2cmr8gXyLXu09p2w2RkLE pDZ8P9yabv6g36ydA9Fillkzn9h1KEe3E1AAlXgPUJUFzkySyVFeYIMK7npvzOXN 3CHyHZzslytI5IwoqTl5nn4b2dCxnkcgsIg4k3n1CXfMof8bxP6dhtlSdQRelih1 0MOLR9m5oh63MsVCFnlf7yPjFx/MmMgnXo+jYgtwOz5wHW3C5F62l4GYq0A5TeG7 qaOghvL9ek932/8ztt5DgmI270KxyWo= -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:40 2025 by rpki-client