$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa File: f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa (raw, json) Hash identifier: zxLSejuBVaAtsEmW5uDYh11KGiPdnguQERp0CBe9zMI= Subject key identifier: D2:47:86:46:CE:BB:E8:83:86:FE:30:DF:09:A0:CE:D7:9A:3C:EC:66 Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5 Certificate serial: 010D0C9F43285849CE9A3C8B6DC4A78C54558980 Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 138.43.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3c:8b:6d:c4:a7:8c:54:55:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=6c8acabc-8fa8-4130-9d65-435c755b9a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:c1:01:37:ae:96:f4:05:dd:73:fd:ff:a7: 92:76:ef:fc:5b:49:68:a2:04:14:55:6f:0c:a7:d9: 7b:9b:47:4c:b3:fa:b6:a8:92:24:38:f8:71:22:b2: d6:ff:a4:eb:46:51:6e:a2:12:53:a3:29:ce:1d:61: b2:d2:0a:fb:b3:b5:ff:ea:3d:1c:44:62:40:4c:81: 2a:9c:be:b4:c6:4a:8d:42:14:c6:b1:79:65:d2:bc: c0:b6:5f:49:f7:77:b1:85:65:bd:54:c8:80:9d:30: d9:aa:f2:b8:2c:bf:cc:f7:8b:97:df:0f:c9:b7:f6: 65:a0:e6:bd:36:82:a8:98:34:56:ad:9c:7c:95:c8: 14:17:de:59:2b:8f:14:c4:d3:c7:42:90:16:85:ed: 0e:82:a9:67:71:05:04:e8:7f:cf:b9:75:a8:7a:88: ac:a1:1a:8f:35:5d:e8:22:02:b8:10:98:88:20:a2: 7b:c1:4f:dd:c2:96:7f:1e:98:3e:55:40:d3:00:b0: 60:de:0a:d1:b6:16:61:41:bb:b5:24:61:1b:9d:b6: 22:0a:84:3d:e5:12:0c:3e:73:24:05:b2:89:d8:fd: ba:d8:3f:34:f3:96:c5:4c:8d:f8:f6:90:c6:1b:b4: c9:25:87:ba:94:c3:b0:88:50:0f:3c:b6:73:e5:d8: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:47:86:46:CE:BB:E8:83:86:FE:30:DF:09:A0:CE:D7:9A:3C:EC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl X509v3 Authority Key Identifier: keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer sbgp-ipAddrBlock: critical IPv4: 138.43.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:73:91:9b:48:c7:7e:70:c2:63:73:0d:b2:90:5e:c5:c9:be: a9:b5:7d:3a:68:7c:b6:17:3e:ae:95:35:49:f9:2e:61:31:f0: 94:b0:94:61:4b:a8:68:8c:cd:81:8b:89:42:b2:50:c4:af:5a: 42:11:ae:95:33:2d:80:9a:24:0a:8e:e8:62:c3:9b:ce:4b:d7: ac:11:4d:41:22:0d:14:70:57:47:6f:68:5a:76:a5:fa:86:b0: 18:aa:4b:22:7e:05:93:f3:39:d2:03:4f:fb:5e:a1:fe:e4:b8: 2e:59:9c:96:60:32:e4:bc:62:89:12:3e:ff:92:6f:0d:ad:eb: a6:ef:13:2e:b3:f1:89:a7:77:bb:1e:fa:5c:58:18:73:09:bc: da:29:4d:17:78:f6:12:24:50:ec:a4:24:5e:b0:51:2e:36:08: 30:27:5e:ef:99:9a:da:71:8d:5f:b3:e9:f7:e1:e6:d0:71:b9: a7:69:94:77:2f:fe:a1:cc:02:ed:45:38:db:4d:5e:13:4e:87: 68:38:d7:c6:1a:4b:ff:e5:82:dd:c0:e2:2b:1a:34:98:b5:5f: 5e:82:4b:3e:90:2b:0f:7f:47:11:49:91:9a:10:24:40:92:48: 38:2e:ff:1b:26:de:c7:ab:c7:27:19:ba:ac:3f:20:ca:ff:54: a0:11:46:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjyLbcSnjFRViYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjMjI0NDYtMjNmMi00MzNjLWJmZjAtYjM1YTc1NzM4 ZGQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NmM4YWNhYmMtOGZhOC00MTMwLTlkNjUtNDM1Yzc1NWI5YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipnBATeulvQF3XP9/6eSdu/8W0loogQUVW8M p9l7m0dMs/q2qJIkOPhxIrLW/6TrRlFuohJToynOHWGy0gr7s7X/6j0cRGJATIEq nL60xkqNQhTGsXll0rzAtl9J93exhWW9VMiAnTDZqvK4LL/M94uX3w/Jt/ZloOa9 NoKomDRWrZx8lcgUF95ZK48UxNPHQpAWhe0OgqlncQUE6H/PuXWoeoisoRqPNV3o IgK4EJiIIKJ7wU/dwpZ/Hpg+VUDTALBg3grRthZhQbu1JGEbnbYiCoQ95RIMPnMk BbKJ2P262D8085bFTI349pDGG7TJJYe6lMOwiFAPPLZz5djK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJHhkbOu+iDhv4w3wmgzteaPOxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMy MjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3MzhkZDUvZjNhMDk1Y2YtZjBlYy0z MDMzLWJlNWMtNzVjZmJjNTUzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMThjMjI0NDYtMjNmMi00MzNjLWJm ZjAtYjM1YTc1NzM4ZGQ1LzE4YzIyNDQ2LTIzZjItNDMzYy1iZmYwLWIzNWE3NTcz OGRkNS5jcmwwHwYDVR0jBBgwFoAU8YT6gquJUuXD3o6nhrcsxUhSkdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVh NzU3MzhkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiityMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERzkZtIx35wwmNzDbKQXsXJvqm1fTpofLYXPq6VNUn5LmEx8JSwlGFL qGiMzYGLiUKyUMSvWkIRrpUzLYCaJAqO6GLDm85L16wRTUEiDRRwV0dvaFp2pfqG sBiqSyJ+BZPzOdIDT/teof7kuC5ZnJZgMuS8YokSPv+Sbw2t66bvEy6z8Ymnd7se +lxYGHMJvNopTRd49hIkUOykJF6wUS42CDAnXu+ZmtpxjV+z6ffh5tBxuadplHcv /qHMAu1FONtNXhNOh2g418YaS//lgt3A4isaNJi1X16CSz6QKw9/RxFJkZoQJECS SDgu/xsm3serxycZuqw/IMr/VKARRtE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:23 2025 by rpki-client