$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa File: f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa (raw, json) Hash identifier: ljd3ZeN1fBkRJ+YnUqXqJgAPf1DSKaRSnN+UPWCDKws= Subject key identifier: 54:53:A7:AD:02:4D:7B:B5:50:D4:FD:DD:79:2D:35:01:5F:37:9D:60 Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5 Certificate serial: 010D0C9F43285848EF612DD848520F4A08F90E00 Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 138.43.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:2d:d8:48:52:0f:4a:08:f9:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b71deea5-246a-412f-a0ca-da7d647403b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:d2:c5:e8:85:21:01:fc:c2:ba:45:10:b1: 0a:a9:ba:b8:8c:4a:f8:31:6f:fe:70:56:fb:74:36: bb:84:55:d6:da:be:a4:af:21:db:d8:34:bd:1f:4c: c8:b6:b7:64:60:92:94:42:fe:d6:d4:f5:d6:45:42: 83:e2:33:e9:02:97:12:cd:47:5a:f5:52:98:3b:1d: c7:80:3f:f4:d3:3f:30:23:96:e5:d8:c4:6a:49:cb: cb:39:d4:4a:de:39:97:7b:f5:f1:97:a8:db:5b:48: 44:97:d9:0a:95:ff:d0:b5:bc:0a:08:aa:93:e6:2c: a3:6c:7a:79:c5:73:66:17:16:75:bb:0b:b3:f6:39: a6:8c:b3:ef:34:35:dc:e0:fd:17:62:af:1c:44:28: cb:35:b5:ad:47:5b:b9:ab:63:90:cf:67:69:fe:8f: b9:8b:c8:02:89:d4:59:e8:ab:4a:a8:da:3a:5f:e3: 23:15:b6:de:51:d0:78:04:68:55:f0:1b:9e:06:64: 58:0c:25:5e:62:b6:fe:c0:a6:1c:a8:ed:33:6f:49: c3:12:16:e2:2d:40:cc:69:4c:b9:27:05:e1:99:ec: 23:61:23:d7:da:2f:7e:a6:d4:bb:9b:43:4c:7a:32: 9b:f7:40:25:cd:ea:3e:c1:70:e8:83:07:ce:f7:56: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:53:A7:AD:02:4D:7B:B5:50:D4:FD:DD:79:2D:35:01:5F:37:9D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl X509v3 Authority Key Identifier: keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer sbgp-ipAddrBlock: critical IPv4: 138.43.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f1:55:fc:f9:48:1a:07:f9:2b:92:45:5d:2d:56:ec:ed:67: bf:b3:76:cc:6d:c4:32:a8:d6:c2:46:f8:92:03:aa:50:5d:da: 48:29:2c:d9:ff:8c:8b:9e:20:1f:3b:81:25:49:02:a7:10:d7: 2c:a0:21:ae:bd:6e:a6:1d:cb:49:a3:e9:c1:04:9d:cb:73:e9: 53:da:ce:cf:ef:85:93:a4:b1:f0:9f:40:2d:e4:69:d4:21:bd: a8:de:73:f1:95:17:7d:65:1f:7c:a9:f4:ec:d9:6a:97:fa:6a: 55:6f:00:64:17:cd:9c:b3:4f:ef:23:3f:b1:15:27:ff:01:e7: b6:82:04:3c:de:02:b7:ca:7f:81:f5:ad:22:1d:bc:15:03:59: 76:eb:c0:3f:1d:60:fb:b7:35:2d:42:d6:14:6c:76:96:f1:91: 57:12:86:6f:24:0c:22:09:33:1f:74:03:0f:49:55:5f:e6:1c: 8a:b7:3a:7c:ca:31:cc:73:c4:e3:79:c0:ef:25:65:11:9a:6b: 4b:6a:0f:60:c0:c4:77:9f:03:27:bf:b6:91:50:88:82:d9:78: 00:51:e6:b8:02:0f:aa:29:9b:91:70:0f:77:8f:87:f3:2f:3c: d1:61:4a:63:e7:e5:36:54:42:36:d5:5e:9b:06:55:0b:08:56: b8:fe:9c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYS3YSFIPSgj5DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjMjI0NDYtMjNmMi00MzNjLWJmZjAtYjM1YTc1NzM4 ZGQ1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjcxZGVlYTUtMjQ2YS00MTJmLWEwY2EtZGE3ZDY0NzQwM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz57SxeiFIQH8wrpFELEKqbq4jEr4MW/+cFb7 dDa7hFXW2r6kryHb2DS9H0zItrdkYJKUQv7W1PXWRUKD4jPpApcSzUda9VKYOx3H gD/00z8wI5bl2MRqScvLOdRK3jmXe/Xxl6jbW0hEl9kKlf/QtbwKCKqT5iyjbHp5 xXNmFxZ1uwuz9jmmjLPvNDXc4P0XYq8cRCjLNbWtR1u5q2OQz2dp/o+5i8gCidRZ 6KtKqNo6X+MjFbbeUdB4BGhV8BueBmRYDCVeYrb+wKYcqO0zb0nDEhbiLUDMaUy5 JwXhmewjYSPX2i9+ptS7m0NMejKb90Alzeo+wXDogwfO91bBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRTp60CTXu1UNT93XktNQFfN51gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMy MjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3MzhkZDUvZjNhMDk1Y2YtZjBlYy0z MDMzLWJlNWMtNzVjZmJjNTUzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMThjMjI0NDYtMjNmMi00MzNjLWJm ZjAtYjM1YTc1NzM4ZGQ1LzE4YzIyNDQ2LTIzZjItNDMzYy1iZmYwLWIzNWE3NTcz OGRkNS5jcmwwHwYDVR0jBBgwFoAU8YT6gquJUuXD3o6nhrcsxUhSkdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVh NzU3MzhkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiityMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3xVfz5SBoH+SuSRV0tVuztZ7+zdsxtxDKo1sJG+JIDqlBd2kgpLNn/ jIueIB87gSVJAqcQ1yygIa69bqYdy0mj6cEEnctz6VPazs/vhZOksfCfQC3kadQh vajec/GVF31lH3yp9OzZapf6alVvAGQXzZyzT+8jP7EVJ/8B57aCBDzeArfKf4H1 rSIdvBUDWXbrwD8dYPu3NS1C1hRsdpbxkVcShm8kDCIJMx90Aw9JVV/mHIq3OnzK McxzxON5wO8lZRGaa0tqD2DAxHefAye/tpFQiILZeABR5rgCD6opm5FwD3ePh/Mv PNFhSmPn5TZUQjbVXpsGVQsIVrj+nHc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:33:15 2025 by rpki-client