$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa File: 87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json) Hash identifier: xZ2xeJAchF0xdYyWqD9IsQPNo+bZX46ZPb+qxCX0phs= Subject key identifier: 91:F5:F9:C8:9A:AC:8A:5D:5F:29:FF:EC:B4:60:FF:58:ED:CC:AE:06 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849EBEA563EED8AD18E91027A80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 54994 IP address blocks: 138.113.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:56:3e:ed:8a:d1:8e:91:02:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2c73a8fb-2694-4c8d-9306-a62fe3397609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:1d:f5:bc:81:df:57:8d:27:95:79:65:e9: 51:af:9b:47:ca:93:b9:61:5e:50:9b:2d:95:1b:a7: 77:ca:70:b1:10:fd:42:a6:cf:68:96:e1:05:48:21: ff:3a:98:77:47:d2:67:83:c8:62:5a:b3:33:02:4a: 02:2d:1d:2e:18:6e:60:31:b4:c7:60:90:b5:08:95: 69:09:90:ed:d3:7b:5c:cf:9c:5d:14:48:fc:1e:0d: c7:52:53:48:39:80:aa:75:a6:b7:97:14:06:72:a8: 46:d6:28:28:f6:7c:b8:40:55:f5:9d:1e:b6:ac:6c: ef:72:34:16:3c:ef:e1:cc:f7:f0:4b:71:0f:25:fc: f3:6f:1c:c8:f5:ae:19:89:24:1e:07:4d:83:69:5b: 5c:83:cd:7d:ab:cf:08:c8:99:c6:d6:44:9c:3e:7f: e8:45:36:f7:43:01:c7:42:b7:66:f2:3f:1f:90:94: c2:a1:f3:fd:48:db:9e:ce:df:ae:aa:00:cd:4f:bf: 68:a2:9c:d6:a0:4f:77:d3:28:d7:e6:e9:19:06:6e: 09:b1:25:90:b2:33:01:a3:3c:8a:6d:2e:32:80:5a: 96:ab:43:b4:63:70:64:43:7f:7f:e6:0f:ce:4f:19: e2:20:8e:98:dc:4d:94:8d:f2:e2:5d:e5:1b:e7:8b: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:F9:C8:9A:AC:8A:5D:5F:29:FF:EC:B4:60:FF:58:ED:CC:AE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0f:0f:eb:ca:a6:59:77:43:55:9e:2b:ae:0e:02:8f:a2:25: cc:11:1e:73:54:bc:d0:7a:e3:ed:b5:70:e1:06:f9:82:2b:b5: 20:1e:f9:5d:a3:3e:24:27:f6:47:a3:9f:40:db:e9:96:ef:fd: 70:98:6d:74:47:c4:09:56:aa:a9:2f:da:79:3f:63:79:6e:9b: 30:f3:28:89:80:9d:8b:d3:5d:2a:e4:d0:e7:38:63:7a:28:ee: 70:1b:f9:36:0a:22:83:b8:1e:b8:4e:00:fd:9a:b3:13:2a:48: 9e:e0:37:24:c3:5d:c8:3e:25:6c:91:1d:f9:5f:a0:ae:63:7c: 10:75:97:fe:32:17:d3:40:aa:9f:7e:4d:17:ae:70:4f:d4:3e: 4c:89:8c:0c:5f:23:52:47:7f:8d:69:13:58:e4:cb:de:9a:8c: 47:15:7f:f2:c0:89:7a:9e:c6:95:dc:a9:ef:6b:72:73:89:ba: 7b:fd:0e:cf:17:2b:74:54:dc:4f:ab:78:2b:b6:37:3b:37:f1: 92:1f:26:28:40:5e:83:0a:93:6e:64:55:09:6c:92:a7:ae:96: 11:7f:06:7a:eb:e2:55:c8:53:dc:89:d2:f1:76:44:8f:c9:0d: 55:f4:72:d5:38:11:c9:19:87:fa:3c:64:b4:67:94:1b:a4:d8: 05:fb:88:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lY+7YrRjpECeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmM3M2E4ZmItMjY5NC00YzhkLTkzMDYtYTYyZmUzMzk3NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFod9byB31eNJ5V5ZelRr5tHypO5YV5Qmy2V G6d3ynCxEP1Cps9oluEFSCH/Oph3R9Jng8hiWrMzAkoCLR0uGG5gMbTHYJC1CJVp CZDt03tcz5xdFEj8Hg3HUlNIOYCqdaa3lxQGcqhG1igo9ny4QFX1nR62rGzvcjQW PO/hzPfwS3EPJfzzbxzI9a4ZiSQeB02DaVtcg819q88IyJnG1kScPn/oRTb3QwHH Qrdm8j8fkJTCofP9SNuezt+uqgDNT79oopzWoE930yjX5ukZBm4JsSWQsjMBozyK bS4ygFqWq0O0Y3BkQ39/5g/OTxniII6Y3E2UjfLiXeUb54thnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH1+ciarIpdXyn/7LRg/1jtzK4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODc5MjFiMjYtM2U0ZC0z YmY1LWI4MmQtOTI2OTIzYzBmNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcPD+vKpll3Q1WeK64OAo+iJcwRHnNUvNB64+21cOEG+YIrtSAe+V2j PiQn9kejn0Db6Zbv/XCYbXRHxAlWqqkv2nk/Y3lumzDzKImAnYvTXSrk0Oc4Y3oo 7nAb+TYKIoO4HrhOAP2asxMqSJ7gNyTDXcg+JWyRHflfoK5jfBB1l/4yF9NAqp9+ TReucE/UPkyJjAxfI1JHf41pE1jky96ajEcVf/LAiXqexpXcqe9rcnOJunv9Ds8X K3RU3E+reCu2Nzs38ZIfJihAXoMKk25kVQlskqeulhF/Bnrr4lXIU9yJ0vF2RI/J DVX0ctU4EckZh/o8ZLRnlBuk2AX7iN0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:15 2025 by rpki-client