$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: Gk7EPWkvYZ9w7esE2uQHYuN+1mR0HOKLOKS1rV/NG3Q= Subject key identifier: 31:66:2D:B3:5C:61:9B:CE:8A:72:1B:51:D6:39:5A:E2:CF:31:D1:10 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849E4EFBD8302A5AB2DD47C8A80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:bd:83:02:a5:ab:2d:d4:7c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=f4dfae69-b4a5-408e-95b5-1d17cd7ca2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:3d:7b:ea:40:8b:a8:ce:f2:63:59:d2:13: 34:50:c1:03:7b:e0:49:cd:65:13:15:a4:0a:81:59: 2c:a3:d0:12:84:9b:7b:30:1b:01:48:7c:9d:87:79: c3:ad:e2:dc:26:19:90:c8:69:d5:df:78:c0:6b:1f: db:94:73:c7:ba:63:57:ef:77:8e:0c:c8:f8:15:03: b1:f6:a8:b0:3f:07:25:08:b2:43:4f:35:19:4a:ad: a5:3c:6b:32:1c:1a:01:62:b6:36:e4:ab:38:e3:a0: dd:cd:4c:e6:f3:66:26:69:d3:08:5a:fc:f0:bc:fb: 64:87:19:01:a2:31:4f:96:17:14:0d:57:20:93:c0: 7e:5b:70:e9:ff:02:75:84:de:57:77:2a:a9:d4:c1: 65:10:f4:a2:90:8a:87:e4:78:78:4d:98:3f:10:50: 43:a0:69:9e:78:f6:0d:d4:54:38:af:7e:43:25:47: 0f:2c:de:3e:bb:c5:d8:82:98:68:67:2c:f5:0a:a2: 47:92:5d:a1:0e:5f:94:03:96:2f:40:df:24:22:13: 42:4c:b4:05:b8:79:fa:09:5e:d8:ca:e5:c1:30:bb: e7:3f:07:fc:05:f0:3e:f7:18:7c:87:f6:29:d9:29: 42:fb:6c:ca:82:ca:e0:78:17:76:a5:fb:cb:5f:2c: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:2D:B3:5C:61:9B:CE:8A:72:1B:51:D6:39:5A:E2:CF:31:D1:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1c:09:ba:04:76:6e:c6:2b:86:ee:0b:b9:62:e6:38:26:6f: 76:a4:d6:0a:00:25:35:7a:1d:74:a0:fa:17:4b:6b:86:70:11: 92:fc:7d:79:42:cd:a8:ad:02:e7:29:d1:85:c3:ef:c7:69:1a: 11:7a:e0:45:ef:06:c7:fa:7c:d5:97:6e:89:53:14:19:38:98: 60:f8:02:a2:cd:38:2e:d4:06:0a:a8:b2:c4:78:50:1b:46:3e: bb:df:52:55:6f:81:3b:e0:39:11:dc:f7:f8:7c:7b:2e:01:f3: ac:68:01:14:1f:d7:36:2e:97:1d:54:bd:98:c6:f1:84:da:7f: ca:60:35:43:01:41:64:02:4e:85:a8:3a:60:bd:1b:1e:62:2c: 85:90:5b:75:0a:4a:89:34:50:42:8d:80:8d:c5:9e:4c:64:47: 6a:0c:85:78:6b:30:69:25:f5:c6:ac:c3:0f:fc:99:36:37:35: 15:f4:82:a1:f5:57:45:09:2e:1f:7e:65:18:db:e5:9f:44:7c: 4c:c8:c6:ce:23:86:0c:20:74:81:71:1a:6a:f9:23:dc:5f:22: 0e:8b:dd:38:a2:8e:36:39:82:70:04:e8:58:f6:67:94:82:37: ee:a9:6e:ff:d8:92:e7:1b:08:48:ec:de:11:34:ad:51:fc:b4: e1:a1:17:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk772DAqWrLdR8ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZjRkZmFlNjktYjRhNS00MDhlLTk1YjUtMWQxN2NkN2NhMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0Q9e+pAi6jO8mNZ0hM0UMEDe+BJzWUTFaQK gVkso9AShJt7MBsBSHydh3nDreLcJhmQyGnV33jAax/blHPHumNX73eODMj4FQOx 9qiwPwclCLJDTzUZSq2lPGsyHBoBYrY25Ks446DdzUzm82YmadMIWvzwvPtkhxkB ojFPlhcUDVcgk8B+W3Dp/wJ1hN5Xdyqp1MFlEPSikIqH5Hh4TZg/EFBDoGmeePYN 1FQ4r35DJUcPLN4+u8XYgphoZyz1CqJHkl2hDl+UA5YvQN8kIhNCTLQFuHn6CV7Y yuXBMLvnPwf8BfA+9xh8h/Yp2SlC+2zKgsrgeBd2pfvLXyzJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFmLbNcYZvOinIbUdY5WuLPMdEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkcCboEdm7GK4buC7li5jgmb3ak1goAJTV6HXSg+hdLa4ZwEZL8fXlC zaitAucp0YXD78dpGhF64EXvBsf6fNWXbolTFBk4mGD4AqLNOC7UBgqossR4UBtG PrvfUlVvgTvgORHc9/h8ey4B86xoARQf1zYulx1UvZjG8YTaf8pgNUMBQWQCToWo OmC9Gx5iLIWQW3UKSok0UEKNgI3FnkxkR2oMhXhrMGkl9casww/8mTY3NRX0gqH1 V0UJLh9+ZRjb5Z9EfEzIxs4jhgwgdIFxGmr5I9xfIg6L3TiijjY5gnAE6Fj2Z5SC N+6pbv/YkucbCEjs3hE0rVH8tOGhF5Y= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:42 2025 by rpki-client