$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa File: 51022801-32c2-341d-ac1c-1c40087ca9b6.roa (raw, json) Hash identifier: RCnpwwsA2FQetsBGrXYaRD7i4KsMin4pQCXsFg7fdW0= Subject key identifier: 7D:03:F0:A8:7F:14:46:15:7B:BE:B2:BA:60:BC:C8:28:75:77:CB:D2 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584902EC22456DF5BA443EB88000 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 33598 IP address blocks: 138.8.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:22:45:6d:f5:ba:44:3e:b8:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b85ca523-19a6-44d2-a5e7-9fd93cfb5466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:ab:53:55:e5:bb:4c:49:ae:77:5a:bc:af: 95:bf:85:3f:62:d9:3c:6b:17:b6:b1:20:5d:a0:3d: a9:f4:cd:a8:b5:02:32:13:fc:71:3f:f1:c7:fb:67: 79:b0:87:d9:f8:ab:d8:e1:fd:4f:5e:75:8b:e5:75: 80:99:e4:15:f4:3a:3a:6c:dc:77:9f:26:e5:42:7c: 52:88:fa:aa:b4:e0:64:53:9f:06:b1:7c:e3:ab:5b: 0e:3a:2c:d4:c0:b4:27:74:cb:6d:ef:34:0d:31:75: 24:d9:5b:99:ea:ce:73:7e:f3:93:aa:e3:a2:37:cc: 5e:89:9a:d1:f1:e9:6d:c6:51:96:16:08:ed:de:fa: c2:07:5e:7b:47:8a:db:92:f0:a6:5b:3f:8a:a6:bc: d0:1c:8f:c5:0e:4d:3c:07:9a:ed:70:67:63:5b:46: cb:67:7e:d4:aa:77:dc:1a:bf:6b:33:b2:e7:22:3d: c1:59:bc:5c:02:e2:0b:e3:5f:0f:b9:d7:94:df:76: 7c:e8:f7:f9:55:86:e2:cb:ab:86:fc:13:d5:ff:f1: e3:84:ac:93:2f:bf:d9:2b:90:71:06:29:7a:31:05: 25:c0:46:d0:72:34:f3:cb:e9:e9:ce:02:88:0a:9a: 80:7d:a2:ee:81:2d:af:04:30:4e:9f:a7:fb:be:c5: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:03:F0:A8:7F:14:46:15:7B:BE:B2:BA:60:BC:C8:28:75:77:CB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 138.8.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a3:c9:d4:8b:b8:c2:bf:16:83:38:01:d2:b9:28:28:a3:36: 68:f9:f9:b0:18:24:1f:e6:b5:fd:fc:d7:e7:46:6a:fa:24:8a: 09:b3:84:3e:cd:42:17:36:37:14:96:05:c7:11:e8:60:c4:ba: 0f:cd:c4:8f:3b:9e:a5:59:09:a1:40:a2:be:9b:95:36:04:4c: 28:c2:d4:c5:c6:02:06:dd:5b:fe:01:79:db:39:cc:49:6d:ea: a8:46:18:7c:1e:70:12:44:b7:eb:bf:5e:7c:a3:d6:f1:60:00: 1e:d6:9a:3c:93:59:1a:13:2b:7a:43:b3:62:21:49:56:54:db: f3:ad:a3:84:d7:14:a4:32:2b:08:d4:68:cd:d7:4d:ef:ef:5d: 83:14:43:37:9e:dd:c7:f3:30:42:64:38:72:fc:92:0c:6b:5d: b6:7f:d2:2e:42:c5:a6:28:78:b8:2d:60:d8:05:ca:5f:e3:c5: 85:48:dc:80:75:48:3c:ee:c6:6f:95:cb:15:77:0a:9e:b1:ff: f2:28:00:50:3a:e1:66:99:39:a7:86:c3:81:48:95:68:23:e4: 19:4d:a1:ea:30:17:95:eb:ba:f9:3e:f2:8d:a5:85:b3:ac:36: bb:94:f3:2e:ef:1b:4b:d0:fe:c0:34:92:2a:6c:37:3d:c0:c4: e5:98:a3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CJFbfW6RD64gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Yjg1Y2E1MjMtMTlhNi00NGQyLWE1ZTctOWZkOTNjZmI1NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjirU1Xlu0xJrndavK+Vv4U/Ytk8axe2sSBd oD2p9M2otQIyE/xxP/HH+2d5sIfZ+KvY4f1PXnWL5XWAmeQV9Do6bNx3nyblQnxS iPqqtOBkU58GsXzjq1sOOizUwLQndMtt7zQNMXUk2VuZ6s5zfvOTquOiN8xeiZrR 8eltxlGWFgjt3vrCB157R4rbkvCmWz+KprzQHI/FDk08B5rtcGdjW0bLZ37Uqnfc Gr9rM7LnIj3BWbxcAuIL418PudeU33Z86Pf5VYbiy6uG/BPV//HjhKyTL7/ZK5Bx Bil6MQUlwEbQcjTzy+npzgKICpqAfaLugS2vBDBOn6f7vsUnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0D8Kh/FEYVe76yumC8yCh1d8vSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNTEwMjI4MDEtMzJjMi0z NDFkLWFjMWMtMWM0MDA4N2NhOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+jydSLuMK/FoM4AdK5KCijNmj5+bAYJB/mtf381+dGavokigmzhD7N Qhc2NxSWBccR6GDEug/NxI87nqVZCaFAor6blTYETCjC1MXGAgbdW/4Beds5zElt 6qhGGHwecBJEt+u/Xnyj1vFgAB7WmjyTWRoTK3pDs2IhSVZU2/Oto4TXFKQyKwjU aM3XTe/vXYMUQzee3cfzMEJkOHL8kgxrXbZ/0i5CxaYoeLgtYNgFyl/jxYVI3IB1 SDzuxm+VyxV3Cp6x//IoAFA64WaZOaeGw4FIlWgj5BlNoeowF5Xruvk+8o2lhbOs NruU8y7vG0vQ/sA0kipsNz3AxOWYo/Q= -----END CERTIFICATE-----Generated at Tue Apr 29 17:09:13 2025 by rpki-client