$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: nFX/RUsKglix35OkfMevNPjQzZ5kKGC6nJZFmxS4qyk= Subject key identifier: BF:1A:4B:DB:59:A4:08:BF:3A:43:5D:25:C0:53:2B:43:65:2F:49:C1 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584905B6B2673657C9E4B25104F0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b2:67:36:57:c9:e4:b2:51:04:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=450b079f-02b6-433e-ab3c-93c03281f598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:e4:9c:d3:ba:d4:f2:a3:16:33:60:39:de: d6:4b:12:53:52:de:2d:60:26:ed:4f:c0:71:41:25: ae:f1:40:23:bc:28:70:a9:9e:b3:dd:10:49:2e:7c: ef:bd:99:c8:d4:f3:5d:4f:c2:95:c2:1f:2a:e3:b3: 9c:eb:9c:4c:06:d1:ca:cc:02:38:39:9d:65:2b:20: ab:24:ba:72:53:e9:86:26:2d:b5:2c:2e:84:09:a5: 65:98:b0:a8:30:d7:03:39:9b:af:d4:73:cc:65:98: c3:8f:28:a2:78:70:c6:5d:28:3b:63:a3:b3:82:b6: b1:88:4a:1e:a0:00:41:0e:8a:43:ea:2f:7d:9d:df: 02:ed:e9:05:01:ab:16:c8:10:22:e8:cc:3c:44:f2: c2:c6:74:df:e6:71:f7:5a:73:af:ed:11:7a:1d:f1: 61:91:0e:f8:d2:93:1b:aa:ea:35:63:27:77:d4:13: 8a:6e:81:85:5d:09:fb:f2:07:22:8c:dc:c0:b8:ec: ac:1b:56:2c:07:71:c1:33:21:c6:6b:ec:f1:da:66: ef:cc:3f:f2:ef:96:91:49:f5:3e:e5:23:50:4d:da: 0b:bb:90:56:49:34:37:3b:bb:f0:8e:86:40:1e:8e: 93:c2:a8:19:4d:ac:98:6c:d8:3e:a5:01:0d:5b:c1: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:4B:DB:59:A4:08:BF:3A:43:5D:25:C0:53:2B:43:65:2F:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a1:19:d4:1a:f0:5e:15:4f:26:63:9a:ef:59:48:e6:5a:8e: 95:2a:24:3a:c1:98:24:bd:42:69:69:6f:1e:27:cd:ff:cd:d4: 45:b7:00:d2:fb:11:23:3b:de:33:6c:a5:be:78:38:ae:0f:19: a9:69:b7:77:73:c5:07:90:c5:01:9f:a5:5c:56:10:24:30:16: a4:44:1d:ec:58:6f:5c:c0:ed:11:92:b2:8b:52:bc:d9:c9:93: e7:94:28:78:89:d9:ef:18:9c:2e:e0:28:1f:aa:e7:c8:11:84: 78:e4:e1:0d:29:f9:4b:0c:73:fb:f8:3d:74:f4:26:6b:b8:fd: 4b:56:b0:dc:c2:a7:3f:9a:85:b6:11:ce:55:5e:b2:73:ac:63: ee:d1:ec:b0:9c:72:12:84:50:92:e3:fb:81:87:01:a6:1d:70: b6:6b:02:0a:ec:81:62:1c:e0:d0:d3:64:2a:57:5e:9a:e1:b4: d0:cc:ae:e9:e2:da:80:d9:b8:4d:dc:fc:ba:4b:1d:04:f7:45: 01:27:44:cc:ed:65:a7:c7:4b:72:0c:11:e4:c0:56:ef:d7:57: 95:4e:7e:bb:71:39:63:91:8c:22:af:46:d5:dc:fb:e3:4e:8f: 34:0d:a9:19:d7:32:28:bd:c5:92:e3:da:b2:61:c7:f5:01:4a: 51:e6:62:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrJnNlfJ5LJRBPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NDUwYjA3OWYtMDJiNi00MzNlLWFiM2MtOTNjMDMyODFmNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZTknNO61PKjFjNgOd7WSxJTUt4tYCbtT8Bx QSWu8UAjvChwqZ6z3RBJLnzvvZnI1PNdT8KVwh8q47Oc65xMBtHKzAI4OZ1lKyCr JLpyU+mGJi21LC6ECaVlmLCoMNcDOZuv1HPMZZjDjyiieHDGXSg7Y6OzgraxiEoe oABBDopD6i99nd8C7ekFAasWyBAi6Mw8RPLCxnTf5nH3WnOv7RF6HfFhkQ740pMb quo1Yyd31BOKboGFXQn78gcijNzAuOysG1YsB3HBMyHGa+zx2mbvzD/y75aRSfU+ 5SNQTdoLu5BWSTQ3O7vwjoZAHo6TwqgZTayYbNg+pQENW8GaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8aS9tZpAi/OkNdJcBTK0NlL0nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADihGdQa8F4VTyZjmu9ZSOZajpUqJDrBmCS9Qmlpbx4nzf/N1EW3ANL7 ESM73jNspb54OK4PGalpt3dzxQeQxQGfpVxWECQwFqREHexYb1zA7RGSsotSvNnJ k+eUKHiJ2e8YnC7gKB+q58gRhHjk4Q0p+UsMc/v4PXT0Jmu4/UtWsNzCpz+ahbYR zlVesnOsY+7R7LCcchKEUJLj+4GHAaYdcLZrAgrsgWIc4NDTZCpXXprhtNDMruni 2oDZuE3c/LpLHQT3RQEnRMztZafHS3IMEeTAVu/XV5VOfrtxOWORjCKvRtXc++NO jzQNqRnXMii9xZLj2rJhx/UBSlHmYt8= -----END CERTIFICATE-----Generated at Mon Apr 28 08:54:35 2025 by rpki-client