$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa File: b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa (raw, json) Hash identifier: DyasPLezcNjiR3OzpVzoi2LXGbDDSYO0sJS+drrzTdE= Subject key identifier: 23:98:D2:E2:83:8E:F9:AA:BF:76:99:71:4E:41:95:EB:59:E6:F9:0D Certificate issuer: /CN=e0cdac38-6681-4b09-b992-31d2030b8796 Certificate serial: 010D0C9F4328584965E975396C01479215C3F400 Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 14618 IP address blocks: 138.133.119.0/24 maxlen: 24 138.133.132.0/24 maxlen: 24 138.133.133.0/24 maxlen: 24 138.133.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:75:39:6c:01:47:92:15:c3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=e2cb4b17-33b8-4c35-aafe-5cc3d9a751e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:69:38:2e:91:46:29:4b:e6:41:6c:35:3e:9b: 15:b4:7d:92:6d:c1:12:a5:86:34:7f:88:76:12:26: 1a:1e:af:72:8b:dd:f1:84:b4:73:5d:53:df:8d:e1: e8:1c:6f:1f:34:20:0d:c4:b5:29:4a:6b:89:8a:3e: d9:f0:25:68:4d:33:28:d1:ec:67:4e:9c:30:bb:89: e2:8c:3b:3a:15:68:30:52:ea:20:9d:4c:65:5c:e2: 8c:ae:b3:30:93:30:87:26:2e:7b:43:05:9c:d5:fa: 5a:ab:c5:33:69:aa:95:7e:e5:30:a4:bf:11:35:a2: 54:d1:fa:77:f5:ae:30:76:2b:f8:b0:65:51:58:e8: c1:99:25:6f:05:93:26:35:3c:58:c7:d5:6b:8d:f4: d3:5d:98:72:61:ac:75:e1:c1:93:b1:d1:4c:9b:19: 76:d9:1f:6b:46:c9:78:02:09:c6:f5:68:e4:9e:69: 81:29:c2:a8:a9:14:b6:4d:b6:c1:07:d5:3f:d3:30: 88:b1:71:82:f6:57:11:5e:8c:43:69:2a:8c:bc:72: e4:bc:7a:f0:49:0e:4f:6c:37:69:f6:fc:16:60:32: a8:c5:9e:d1:f1:ce:9a:b4:d8:a4:2a:3b:3e:e1:a3: 35:4a:19:cc:46:0d:6a:be:81:5a:7a:b1:6f:19:13: be:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:D2:E2:83:8E:F9:AA:BF:76:99:71:4E:41:95:EB:59:E6:F9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl X509v3 Authority Key Identifier: keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer sbgp-ipAddrBlock: critical IPv4: 138.133.119.0/24 138.133.132.0/23 138.133.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a1:ac:0d:26:c1:2f:c2:1c:fb:66:cb:b2:f5:91:e1:31:a3: 6f:2d:ce:7d:a8:42:88:d5:69:28:24:3d:6a:eb:73:8e:56:9e: 51:db:6a:2b:16:57:4e:37:69:25:f9:dc:34:86:e7:d7:5f:ac: 11:be:6c:2d:a1:ae:e1:e1:31:fb:86:9d:5b:5a:55:41:a3:cf: 51:ec:1a:a3:68:89:20:9e:f2:bc:67:cc:41:2e:15:5d:82:af: 96:de:d1:85:68:ec:e5:29:9e:d4:e1:1d:4d:2b:30:90:0f:a6: 36:28:69:6c:0c:a5:a6:98:b3:af:45:39:e3:dc:ed:e4:e5:fc: a1:97:c3:db:9e:69:ad:e9:d7:06:ea:72:c9:3b:a7:02:a2:65: 57:a9:be:16:2d:29:d7:5c:41:22:76:4d:ca:dc:a9:68:c7:37: 4c:d3:c6:e3:85:7b:a7:4b:88:6a:ab:c1:1d:f2:06:3d:23:f4: 50:a9:4b:0f:a7:78:c9:ac:85:3d:53:03:50:42:e5:98:e1:c1: 44:af:32:8a:bb:a6:12:bb:09:53:6f:af:a2:a0:c8:e5:8b:69: c6:e8:00:3b:bc:d7:3d:e6:77:4b:fa:cd:09:43:63:dc:ea:2d: c6:06:06:d4:2c:be:1a:84:45:aa:b7:5b:c3:83:15:14:fe:2f: b7:98:a9:ca -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEll6XU5bAFHkhXD9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4 Nzk2MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZTJjYjRiMTctMzNiOC00YzM1LWFhZmUtNWNjM2Q5YTc1MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWk4LpFGKUvmQWw1PpsVtH2SbcESpYY0f4h2 EiYaHq9yi93xhLRzXVPfjeHoHG8fNCANxLUpSmuJij7Z8CVoTTMo0exnTpwwu4ni jDs6FWgwUuognUxlXOKMrrMwkzCHJi57QwWc1fpaq8UzaaqVfuUwpL8RNaJU0fp3 9a4wdiv4sGVRWOjBmSVvBZMmNTxYx9VrjfTTXZhyYax14cGTsdFMmxl22R9rRsl4 AgnG9WjknmmBKcKoqRS2TbbBB9U/0zCIsXGC9lcRXoxDaSqMvHLkvHrwSQ5PbDdp 9vwWYDKoxZ7R8c6atNikKjs+4aM1ShnMRg1qvoFaerFvGRO+qQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCOY0uKDjvmqv3aZcU5BletZ5vkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGNk YWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvYjkyYmY0MzctYzJiNC0z YzY3LWE3YTctN2UxYjM0Y2ExN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBjZGFjMzgtNjY4MS00YjA5LWI5 OTItMzFkMjAzMGI4Nzk2L2UwY2RhYzM4LTY2ODEtNGIwOS1iOTkyLTMxZDIwMzBi ODc5Ni5jcmwwHwYDVR0jBBgwFoAUrlCk86BeuGcsAzm4yau8K2sXNDkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQy MDMwYjg3OTYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAioV3AwQB ioWEAwQAioXDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHWhrA0mwS/CHPtmy7L1keExo28tzn2oQojVaSgk PWrrc45WnlHbaisWV043aSX53DSG59dfrBG+bC2hruHhMfuGnVtaVUGjz1HsGqNo iSCe8rxnzEEuFV2Cr5be0YVo7OUpntThHU0rMJAPpjYoaWwMpaaYs69FOePc7eTl /KGXw9ueaa3p1wbqcsk7pwKiZVepvhYtKddcQSJ2TcrcqWjHN0zTxuOFe6dLiGqr wR3yBj0j9FCpSw+neMmshT1TA1BC5ZjhwUSvMoq7phK7CVNvr6KgyOWLacboADu8 1z3md0v6zQlDY9zqLcYGBtQsvhqERaq3W8ODFRT+L7eYqco= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:21 2025 by rpki-client