$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa File: 27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa (raw, json) Hash identifier: KlpGFCZXHueYzvpJyCAxI4a8nUSO+mMcP32isY+/5s4= Subject key identifier: 86:83:3A:4E:C3:CE:3B:36:63:BB:DE:5E:5F:2F:CB:EA:5D:88:20:30 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AB220DFADDE189D78FE681280 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 54994 IP address blocks: 138.113.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:df:ad:de:18:9d:78:fe:68:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=b222c226-36ee-4a02-98a2-34df46acf462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:e8:08:cf:b4:8d:a9:7d:af:c0:db:84:77: dd:3e:52:86:d5:2a:78:3b:dc:98:e4:f8:41:c8:05: da:b9:75:a1:39:6e:0c:df:6c:47:97:88:48:82:e5: 6d:76:49:71:a6:cf:57:fc:67:be:db:16:2e:bf:fa: 51:e7:f6:9c:48:3e:dc:06:da:7a:ff:d0:1e:a3:7f: cf:a0:2d:8f:5b:10:bf:1f:05:a3:fa:ce:a4:aa:a6: 22:86:79:f8:cc:5f:1a:c6:14:21:11:2d:18:28:0c: b1:75:b4:1b:57:6e:df:6a:5a:01:ba:cb:89:31:2f: 5d:87:68:f7:e8:94:36:41:75:28:24:ef:f8:72:ba: 38:0d:ad:96:9b:fb:c9:97:09:23:47:e7:0f:41:1a: a7:9c:b2:2d:cc:42:a7:cf:74:a8:84:26:d0:da:76: 02:f8:67:e1:af:ad:d8:fd:24:17:d7:bf:70:0a:d6: 24:4b:c6:cf:b9:cb:3b:b9:14:82:46:57:1e:4b:12: a8:8c:6c:2a:9e:58:3f:58:82:74:6f:10:76:a9:7c: 7c:c0:50:2c:65:66:a9:ba:14:05:bd:49:a1:97:c7: 4a:85:27:a4:1a:f3:32:3b:92:5f:f8:f6:2c:7b:80: d0:82:32:b2:77:9a:85:fe:b0:1a:a3:8e:33:15:9e: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:3A:4E:C3:CE:3B:36:63:BB:DE:5E:5F:2F:CB:EA:5D:88:20:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:af:9c:37:be:da:f2:8b:59:53:2a:2d:c0:da:b2:74:e5:e7: c1:f3:f5:94:dd:d7:bf:6a:db:b3:81:b5:27:1c:c1:f2:30:07: 54:f8:26:58:a1:69:7d:b4:61:99:48:68:ee:ec:c5:51:2b:e5: a9:86:76:a3:ae:99:c6:23:9f:1a:85:9c:c9:32:64:be:93:e0: 7a:f1:0c:8d:97:e6:69:1e:90:8e:b3:f7:02:92:e2:5d:db:2c: 23:3c:38:7b:1a:dd:87:78:c5:3b:34:ee:4f:55:04:e0:dc:ff: df:20:8d:d6:a7:fd:3a:ba:1a:2b:4b:d7:83:5a:48:5b:5a:e5: a3:b1:63:93:23:61:68:10:5c:f8:bf:1b:1f:f7:aa:96:6b:03: ed:ce:60:94:1d:0d:3d:ac:09:5d:20:8c:82:9d:4b:e3:34:2b: 62:1f:d5:00:48:63:ba:c5:30:72:f5:88:2f:58:76:2f:2c:dc: 3f:e6:bb:96:1c:9d:10:22:f5:53:d3:75:1a:20:32:a7:40:c1: d2:28:ba:34:f9:5c:65:24:79:b2:92:d0:b0:de:99:e1:66:93: b7:9b:29:7a:de:f9:17:ec:eb:dc:98:ee:9b:b6:09:13:e0:39: d5:9f:07:2c:74:27:cf:f3:a7:ee:1f:72:3e:90:3b:c1:83:93: bd:3e:78:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN+t3hideP5oEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjIyMmMyMjYtMzZlZS00YTAyLTk4YTItMzRkZjQ2YWNmNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1XoCM+0jal9r8DbhHfdPlKG1Sp4O9yY5PhB yAXauXWhOW4M32xHl4hIguVtdklxps9X/Ge+2xYuv/pR5/acSD7cBtp6/9Aeo3/P oC2PWxC/HwWj+s6kqqYihnn4zF8axhQhES0YKAyxdbQbV27faloBusuJMS9dh2j3 6JQ2QXUoJO/4cro4Da2Wm/vJlwkjR+cPQRqnnLItzEKnz3SohCbQ2nYC+Gfhr63Y /SQX179wCtYkS8bPucs7uRSCRlceSxKojGwqnlg/WIJ0bxB2qXx8wFAsZWapuhQF vUmhl8dKhSekGvMyO5Jf+PYse4DQgjKyd5qF/rAao44zFZ7wfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaDOk7Dzjs2Y7veXl8vy+pdiCAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjc2NDljN2MtZDIyYS0z OWQwLWE1ZDYtYzNkYzE4YmMxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGvnDe+2vKLWVMqLcDasnTl58Hz9ZTd179q27OBtSccwfIwB1T4Jlih aX20YZlIaO7sxVEr5amGdqOumcYjnxqFnMkyZL6T4HrxDI2X5mkekI6z9wKS4l3b LCM8OHsa3Yd4xTs07k9VBODc/98gjdan/Tq6GitL14NaSFta5aOxY5MjYWgQXPi/ Gx/3qpZrA+3OYJQdDT2sCV0gjIKdS+M0K2If1QBIY7rFMHL1iC9Ydi8s3D/mu5Yc nRAi9VPTdRogMqdAwdIoujT5XGUkebKS0LDemeFmk7ebKXre+Rfs69yY7pu2CRPg OdWfByx0J8/zp+4fcj6QO8GDk70+eBk= -----END CERTIFICATE-----Generated at Tue Aug 5 08:13:49 2025 by rpki-client