$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa File: 0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa (raw, json) Hash identifier: x9vqD7HkfvJ9Hpf93+QD8HAtiDkev/Df3+KooBdeUE8= Subject key identifier: 25:9C:07:03:57:4A:4A:9F:31:0F:9A:40:FC:5A:E9:FB:A7:D6:A0:04 Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5 Certificate serial: 010D0C9F43285849CE9A3C9D5BCD150CB96DBE80 Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 138.43.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3c:9d:5b:cd:15:0c:b9:6d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=56e92568-edee-4bda-8d8d-e5cfd36fb717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:f7:e3:fd:a8:2a:28:be:ca:e5:a0:8f:bc: 45:2a:6d:6a:f4:6b:57:1f:39:de:d8:bd:ca:5d:13: 73:0d:8e:98:72:cc:3d:09:6f:60:99:1d:29:7b:2a: a6:59:e7:e6:b6:c5:6c:7f:3c:3e:69:b0:1b:53:33: 5c:36:f1:4a:bf:1f:1e:6b:e1:23:60:ba:22:80:97: d8:2e:39:f1:c2:2a:1c:2c:98:b5:ed:65:90:5b:46: 68:d0:ec:4c:be:e7:4d:4e:4d:fd:84:e6:b9:ac:3a: cb:fc:34:49:3f:fb:fd:14:70:8b:53:9e:08:cc:9c: 40:32:2b:21:34:ee:60:23:a2:00:64:fb:ff:85:1e: df:7f:8a:0a:28:52:c8:8a:73:33:3d:3a:f6:12:94: 56:82:7e:15:c2:6a:c7:54:9d:06:ee:06:28:da:15: 26:5e:a2:ef:66:e6:cd:22:4c:5a:46:8d:b4:41:f0: 39:33:a3:62:38:b3:40:db:fa:ee:26:31:ec:e3:0f: 15:db:45:27:6d:16:4b:f8:aa:4b:d3:12:3d:19:85: 9c:fd:50:f8:be:27:f3:6b:81:91:a7:3f:c8:a5:af: fe:e0:d3:cb:82:74:e2:75:64:94:c9:36:31:8d:b0: a6:0c:c8:a7:c8:64:f0:48:d4:2a:c3:eb:dc:49:9f: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:07:03:57:4A:4A:9F:31:0F:9A:40:FC:5A:E9:FB:A7:D6:A0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl X509v3 Authority Key Identifier: keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer sbgp-ipAddrBlock: critical IPv4: 138.43.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:63:c8:70:3d:d2:ab:dc:99:3f:05:65:ee:66:de:06:3e:bc: 38:99:c8:c7:2e:bb:17:93:0a:81:2b:b1:c1:93:09:73:c0:c5: 5d:f8:c8:d4:36:0b:f2:2b:4f:48:fc:15:55:32:3f:06:08:cf: 09:d7:0b:fc:96:cd:8b:e6:a0:4b:68:73:72:c2:d8:fe:e7:05: 7c:d0:7a:eb:dc:c8:b2:0c:30:d2:16:a8:9c:b9:59:db:8b:12: f2:9b:14:92:eb:ab:c1:d5:2f:67:cc:77:87:1c:65:bc:07:07: 2b:be:68:03:26:7b:be:8e:4e:ff:93:75:0b:af:7b:e0:06:cb: 9a:8e:99:bb:a9:86:b9:33:aa:ed:ee:ae:f9:51:fb:c6:92:bc: 6e:fe:a4:4e:10:49:07:95:bc:ef:61:ed:ae:60:b0:0a:17:b1: 0d:56:b3:fc:4a:96:53:3f:78:42:a4:36:cb:79:16:fd:a7:5c: f4:c1:ff:62:6e:34:c3:d2:2f:ec:0c:93:a3:d6:59:52:8a:e1: ce:c9:7b:fb:0a:71:e0:79:1d:c9:f4:dd:a9:2a:6e:f3:9e:6f: 8c:e5:af:6a:d5:d6:e4:e7:e5:04:a2:58:5e:79:5f:c2:cc:5d: 55:0b:0e:0e:01:8e:2f:3d:70:6b:62:c7:c0:07:27:74:78:32: 11:2e:96:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjydW80VDLltvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjMjI0NDYtMjNmMi00MzNjLWJmZjAtYjM1YTc1NzM4 ZGQ1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NTZlOTI1NjgtZWRlZS00YmRhLThkOGQtZTVjZmQzNmZiNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyT34/2oKii+yuWgj7xFKm1q9GtXHzne2L3K XRNzDY6Ycsw9CW9gmR0peyqmWefmtsVsfzw+abAbUzNcNvFKvx8ea+EjYLoigJfY LjnxwiocLJi17WWQW0Zo0OxMvudNTk39hOa5rDrL/DRJP/v9FHCLU54IzJxAMish NO5gI6IAZPv/hR7ff4oKKFLIinMzPTr2EpRWgn4VwmrHVJ0G7gYo2hUmXqLvZubN IkxaRo20QfA5M6NiOLNA2/ruJjHs4w8V20UnbRZL+KpL0xI9GYWc/VD4vifza4GR pz/Ipa/+4NPLgnTidWSUyTYxjbCmDMinyGTwSNQqw+vcSZ/b9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWcBwNXSkqfMQ+aQPxa6fun1qAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMy MjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3MzhkZDUvMGU1NGUxZDAtMzNhNC0z ZDJiLWEyZTAtNmMyOGI4ZjI1ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMThjMjI0NDYtMjNmMi00MzNjLWJm ZjAtYjM1YTc1NzM4ZGQ1LzE4YzIyNDQ2LTIzZjItNDMzYy1iZmYwLWIzNWE3NTcz OGRkNS5jcmwwHwYDVR0jBBgwFoAU8YT6gquJUuXD3o6nhrcsxUhSkdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xOGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVh NzU3MzhkZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiityMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9jyHA90qvcmT8FZe5m3gY+vDiZyMcuuxeTCoErscGTCXPAxV34yNQ2 C/IrT0j8FVUyPwYIzwnXC/yWzYvmoEtoc3LC2P7nBXzQeuvcyLIMMNIWqJy5WduL EvKbFJLrq8HVL2fMd4ccZbwHByu+aAMme76OTv+TdQuve+AGy5qOmbuphrkzqu3u rvlR+8aSvG7+pE4QSQeVvO9h7a5gsAoXsQ1Ws/xKllM/eEKkNst5Fv2nXPTB/2Ju NMPSL+wMk6PWWVKK4c7Je/sKceB5Hcn03akqbvOeb4zlr2rV1uTn5QSiWF55X8LM XVULDg4Bji89cGtix8AHJ3R4MhEulhY= -----END CERTIFICATE-----Generated at Sun Jun 29 10:19:08 2025 by rpki-client