$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa File: 1397b71d-13d4-3f60-94a3-f56343af9a0b.roa (raw, json) Hash identifier: XrhmMRVZk0M1Ns67wYs+R9JyTyJp3q+xOJkP1ApRVwU= Subject key identifier: 9E:6F:DB:E7:3F:FC:35:D7:6C:EA:F5:56:82:69:3E:57:39:96:9C:57 Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Certificate serial: 010D0C9F43285849860469886685B0849336EE80 Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 897 IP address blocks: 192.138.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:69:88:66:85:b0:84:93:36:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=ac80bbc4-5876-4ae6-8d45-1f98e95dd3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:be:b6:5c:03:2c:52:ea:5b:7c:01:0a:9c: c1:c0:5b:71:b1:2a:12:47:7b:64:13:40:c1:4a:a1: 5c:84:8e:3a:72:c7:76:28:f6:d5:4e:8b:22:af:c5: 7b:bf:55:74:85:b5:9f:18:5f:69:aa:f5:70:b6:ae: df:57:01:a2:1d:bd:18:a1:37:18:ae:c2:32:3d:23: 01:45:00:3d:13:b1:22:d0:35:18:b9:f6:ea:69:c7: 64:30:8a:b5:3c:23:e2:77:ad:3d:24:4e:f3:f8:ac: 5a:c1:53:de:fd:e7:4c:84:af:36:f3:76:d7:0e:2c: 1e:71:91:af:dc:7d:7b:7e:8b:b6:93:65:df:b6:5e: 96:4b:c4:c2:9b:64:74:b0:65:56:3f:a0:a7:93:0f: 36:89:75:f1:28:c7:2e:bf:ca:af:cd:47:ef:de:7a: 81:29:b7:92:6e:ce:01:61:63:11:58:60:4b:1c:c3: 54:45:c8:f4:63:89:07:dc:7f:4e:13:bf:b7:b9:cb: 51:35:97:5f:2c:c7:42:3a:83:e0:08:12:a4:e4:0f: 87:3d:bc:20:c4:59:ad:b1:0a:0b:19:61:48:bd:2c: 15:c7:04:ba:f9:38:64:45:a5:a0:c6:01:d9:82:88: ff:24:82:0d:64:88:10:c0:dd:bc:0b:16:4a:2b:13: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:DB:E7:3F:FC:35:D7:6C:EA:F5:56:82:69:3E:57:39:96:9C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1397b71d-13d4-3f60-94a3-f56343af9a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl X509v3 Authority Key Identifier: keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer sbgp-ipAddrBlock: critical IPv4: 192.138.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:30:06:46:56:9e:85:5b:e4:a7:0d:d2:54:eb:c0:21:b7:9d: 25:6f:6a:92:68:86:dc:e0:4c:95:b9:ad:23:16:a0:38:79:58: 71:44:0c:16:48:3f:f8:eb:56:9c:25:5a:b9:17:78:36:c5:4d: ed:97:54:1e:4c:92:e7:8f:a4:00:8f:6b:44:a1:f1:7c:fa:56: d3:e7:0b:18:c8:af:f0:34:4c:47:c4:d4:4c:0b:d8:41:66:d1: d2:a6:6f:d1:e7:90:f7:67:10:09:cb:5c:12:00:a3:9b:f8:36: 58:e9:cd:84:66:da:26:c3:10:13:e2:22:48:3b:ac:20:82:e9: 69:8f:11:ee:ad:1a:f8:61:de:8f:d8:e9:66:b0:e8:91:59:e8: 10:72:73:82:ea:3b:42:b1:d2:54:f9:4a:d5:21:ec:d8:8a:f8: ed:95:42:22:51:c3:e9:50:9f:a2:c8:cd:73:1d:b9:a0:17:6c: 1c:32:0e:f4:39:09:ad:d9:ba:9a:51:e2:35:5b:26:c9:8b:1e: 26:bc:46:61:7f:fe:10:01:54:f6:ee:19:f0:1c:4a:2b:c0:c7: 1a:a4:dd:49:e2:e4:87:5f:e9:3c:b9:3e:09:00:5a:61:be:91: 51:13:45:68:5e:c8:99:83:aa:d8:0d:eb:b9:ab:2e:8a:74:70: be:ec:f3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBGmIZoWwhJM27oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi ZmYxMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk YWM4MGJiYzQtNTg3Ni00YWU2LThkNDUtMWY5OGU5NWRkM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15++tlwDLFLqW3wBCpzBwFtxsSoSR3tkE0DB SqFchI46csd2KPbVTosir8V7v1V0hbWfGF9pqvVwtq7fVwGiHb0YoTcYrsIyPSMB RQA9E7Ei0DUYufbqacdkMIq1PCPid609JE7z+KxawVPe/edMhK8283bXDiwecZGv 3H17fou2k2Xftl6WS8TCm2R0sGVWP6Cnkw82iXXxKMcuv8qvzUfv3nqBKbeSbs4B YWMRWGBLHMNURcj0Y4kH3H9OE7+3uctRNZdfLMdCOoPgCBKk5A+HPbwgxFmtsQoL GWFIvSwVxwS6+ThkRaWgxgHZgoj/JIINZIgQwN28CxZKKxNSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5v2+c//DXXbOr1VoJpPlc5lpxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2 YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvMTM5N2I3MWQtMTNkNC0z ZjYwLTk0YTMtZjU2MzQzYWY5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2 MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0 YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk Y2I4NGJmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwwBkZWnoVb5KcN0lTrwCG3nSVvapJohtzgTJW5rSMWoDh5WHFEDBZI P/jrVpwlWrkXeDbFTe2XVB5MkuePpACPa0Sh8Xz6VtPnCxjIr/A0TEfE1EwL2EFm 0dKmb9HnkPdnEAnLXBIAo5v4NljpzYRm2ibDEBPiIkg7rCCC6WmPEe6tGvhh3o/Y 6Waw6JFZ6BByc4LqO0Kx0lT5StUh7NiK+O2VQiJRw+lQn6LIzXMduaAXbBwyDvQ5 Ca3ZuppR4jVbJsmLHia8RmF//hABVPbuGfAcSivAxxqk3Uni5Idf6Ty5PgkAWmG+ kVETRWheyJmDqtgN67mrLop0cL7s8zo= -----END CERTIFICATE-----Generated at Mon Apr 28 15:03:35 2025 by rpki-client