$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa File: 8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa (raw, json) Hash identifier: OWvyK8HCCh8HSQof+JrQdsDU5hfRJYaqQj5CPMFGPmk= Subject key identifier: 66:A6:20:7D:07:61:5A:7C:63:17:A7:AC:89:50:BC:29:BD:1C:DD:E4 Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Certificate serial: 010D0C9F43285849DC8FC8909850418E189C28E0 Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 395347 IP address blocks: 138.43.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c8:90:98:50:41:8e:18:9c:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d129858a-7098-41b8-a815-36f1bc8b62aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:79:0c:d2:e1:f8:68:21:41:40:58:54:c6: 5f:5e:21:6b:38:b0:9a:69:cd:db:6e:79:11:78:3b: aa:8f:d5:e0:cc:54:d1:08:18:cd:1b:f8:8d:b9:a2: 78:6d:a7:72:ce:78:0b:0c:f2:59:9a:16:a3:b7:cd: 6a:43:fe:64:48:b5:33:0b:a8:94:3e:17:d7:10:f3: 0c:94:61:7f:07:3b:68:cb:20:09:2a:5f:e4:dc:86: 6e:c7:6c:d0:f0:bb:69:6b:8e:cf:31:b4:7e:00:07: bc:45:d0:2b:94:b9:74:7c:d9:f5:e0:15:d3:10:04: 34:91:5c:f7:c0:cf:ef:ea:00:2d:ec:18:59:1c:cd: 63:66:09:3f:23:c2:0b:e0:22:dd:d6:fb:f4:b9:9a: 90:96:a3:8d:52:ba:8b:b6:bb:3b:f9:e4:67:75:4e: 97:30:5a:fd:c9:03:55:c5:43:d1:36:ad:aa:cf:bb: 2a:27:27:d6:d4:8d:42:bf:a4:85:2b:09:2d:a3:21: d1:f8:94:7e:c9:23:2f:d6:7f:5b:ec:bc:37:f9:02: 5b:07:48:19:ac:6a:52:76:17:75:c2:b2:2c:5b:d9: 26:a2:96:56:0f:a7:04:3f:d0:14:bb:e1:04:50:ef: 4b:1f:0e:af:85:90:3a:8b:86:21:84:38:7b:4f:e4: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:20:7D:07:61:5A:7C:63:17:A7:AC:89:50:BC:29:BD:1C:DD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl X509v3 Authority Key Identifier: keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer sbgp-ipAddrBlock: critical IPv4: 138.43.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:16:50:e0:a7:19:bd:44:f1:96:76:5d:fb:11:d9:b8:0b:96: 13:49:5c:9d:02:d9:5f:9e:54:01:c8:6b:a8:09:b2:ac:f4:26: cc:3f:68:cf:89:54:04:dd:e6:f7:76:d9:6f:5c:42:2a:aa:e5: c0:b9:1f:e7:b8:cb:2f:08:55:a5:5a:e5:95:56:20:d7:2d:7e: 26:e7:85:50:d3:2a:e5:25:2f:f3:8d:a3:fc:ae:54:ea:c2:96: 94:72:67:77:4f:57:a5:88:4f:ef:b1:e0:d5:10:2f:cc:b9:b1: 73:bc:4e:f7:ca:85:e7:a3:5e:fd:f0:4f:6b:f0:3d:19:2f:0c: 61:bd:e0:79:05:66:fe:f6:cd:32:1e:19:91:2c:4d:79:f7:1a: ac:dc:e0:9f:41:52:6f:f3:33:8c:96:46:50:dc:d0:36:a8:e5: ea:ac:db:5b:ac:42:94:6b:24:d4:af:92:66:73:98:b2:e1:aa: d6:0c:4d:ac:c7:05:58:39:37:06:c2:2c:8c:f8:c6:92:9d:91: ee:f0:20:fc:8d:23:0e:9f:c9:ca:de:6b:d4:74:08:82:82:4d: f5:c0:a7:36:c4:7c:ab:44:43:c0:a2:ed:65:24:89:90:b6:b5: 52:c4:7d:8a:cc:94:98:a6:d7:a4:ae:ad:c6:8e:4a:45:23:07: 1b:e1:db:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8iQmFBBjhicKOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjODA1ZDUtNThhNC00NTNlLWIxNmUtYzY3N2NjYjZi NDZkMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDEyOTg1OGEtNzA5OC00MWI4LWE4MTUtMzZmMWJjOGI2MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbl5DNLh+GghQUBYVMZfXiFrOLCaac3bbnkR eDuqj9XgzFTRCBjNG/iNuaJ4badyzngLDPJZmhajt81qQ/5kSLUzC6iUPhfXEPMM lGF/BztoyyAJKl/k3IZux2zQ8Ltpa47PMbR+AAe8RdArlLl0fNn14BXTEAQ0kVz3 wM/v6gAt7BhZHM1jZgk/I8IL4CLd1vv0uZqQlqONUrqLtrs7+eRndU6XMFr9yQNV xUPRNq2qz7sqJyfW1I1Cv6SFKwktoyHR+JR+ySMv1n9b7Lw3+QJbB0gZrGpSdhd1 wrIsW9kmopZWD6cEP9AUu+EEUO9LHw6vhZA6i4YhhDh7T+Q5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGamIH0HYVp8YxenrIlQvCm9HN3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4 MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3Y2NiNmI0NmQvOGNlZjdjMTMtNjdjMy0z YmI3LTlkOTMtODc5MjQwYTBjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjdjODA1ZDUtNThhNC00NTNlLWIx NmUtYzY3N2NjYjZiNDZkL2I3YzgwNWQ1LTU4YTQtNDUzZS1iMTZlLWM2NzdjY2I2 YjQ2ZC5jcmwwHwYDVR0jBBgwFoAUwQai+A2zt5NMcjsfcCq0j0hSr9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3 Y2NiNmI0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiivyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoWUOCnGb1E8ZZ2XfsR2bgLlhNJXJ0C2V+eVAHIa6gJsqz0Jsw/aM+J VATd5vd22W9cQiqq5cC5H+e4yy8IVaVa5ZVWINctfibnhVDTKuUlL/ONo/yuVOrC lpRyZ3dPV6WIT++x4NUQL8y5sXO8TvfKheejXv3wT2vwPRkvDGG94HkFZv72zTIe GZEsTXn3Gqzc4J9BUm/zM4yWRlDc0Dao5eqs21usQpRrJNSvkmZzmLLhqtYMTazH BVg5NwbCLIz4xpKdke7wIPyNIw6fycrea9R0CIKCTfXApzbEfKtEQ8Ci7WUkiZC2 tVLEfYrMlJim16SurcaOSkUjBxvh29M= -----END CERTIFICATE-----Generated at Mon Jun 16 02:21:13 2025 by rpki-client