$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa File: 919695ea-4fb8-3d6b-a522-e72feddea0c8.roa (raw, json) Hash identifier: ei5j6R6U9K75szkxJy0nNBm6mWhegfsTtnYLFdrBGeE= Subject key identifier: 0A:F2:7B:97:06:0C:FC:8B:7A:F5:EC:66:3E:54:04:8A:CA:54:49:18 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A07D53597909717EE1E335500 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 54994 IP address blocks: 138.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:35:97:90:97:17:ee:1e:33:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=4c55f44f-8af9-458b-aed1-0d2d7b917a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:57:d5:40:27:1a:d3:f0:b3:25:3d:4f:86: 8e:ed:6e:be:fe:ee:80:fe:b6:6d:7a:b4:39:c4:4c: c6:f8:04:bd:ce:34:99:8b:d4:44:32:b2:73:1e:eb: 31:78:8d:35:03:c8:69:b2:73:f7:16:da:ff:6b:fa: d3:dd:ec:3f:33:26:49:5b:0a:64:dc:37:52:12:bd: 00:89:46:cd:36:a6:f3:18:b8:c3:57:94:00:c9:21: 88:bb:56:e8:da:9d:fd:4c:ce:ec:c4:ba:e6:70:c8: e6:3d:c8:92:7f:a4:b1:b8:00:f2:9a:21:f5:d9:37: c2:1e:ab:4d:c3:84:64:38:43:0f:66:e0:4b:dd:04: 71:72:47:69:0d:5e:50:bc:36:1b:8e:e4:73:aa:99: 3c:ff:97:f3:70:57:46:bf:55:d8:7b:90:93:bf:4f: 4c:cb:dd:c9:28:d3:cb:b8:be:9f:c0:3e:72:eb:a1: 4d:4c:26:0c:c2:7b:eb:3b:27:39:1c:6c:7d:8a:b6: 76:dc:4c:7e:fe:a6:61:c4:19:54:cf:d0:7b:82:91: a0:be:cb:8b:90:46:6e:9c:bc:a8:b4:80:ca:3f:7d: a7:0d:df:1d:b0:dd:e9:10:b3:8f:75:a0:88:c2:6d: 9b:66:ad:c9:be:27:d0:0a:94:cc:94:d3:f8:38:77: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:7B:97:06:0C:FC:8B:7A:F5:EC:66:3E:54:04:8A:CA:54:49:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a8:87:ce:79:a8:fa:ce:b6:3e:b9:aa:5c:59:d4:cd:ac:81: 5b:41:ae:68:d4:e5:3e:59:a1:2c:f5:c3:3c:aa:a7:bb:1f:82: 9e:52:4d:02:a8:d0:1b:d1:fa:98:9d:b2:72:d6:86:88:b3:7f: 7e:c5:85:42:35:e5:7c:6b:74:1c:aa:7c:b4:22:36:f0:d5:9e: 30:5e:86:0b:b6:b4:be:73:94:fc:7c:7c:ce:c9:1a:36:3e:7a: f9:4e:00:1b:bf:e0:3b:9d:60:24:f1:d5:e1:95:17:44:8b:34: 84:21:c2:83:30:9e:5f:55:41:56:18:4d:0b:72:2f:2d:61:ad: 0d:d8:4d:20:e9:19:32:09:75:4a:03:0a:5b:7d:cb:aa:76:3d: 68:6e:12:cb:f3:88:60:8c:f0:61:7d:cf:6e:cd:a0:20:80:2e: 10:b6:69:db:7e:0b:5e:69:2d:7e:bd:ce:8d:d9:50:08:e1:d7: b5:b9:ba:a5:aa:75:04:2e:e3:32:8c:84:fc:c5:f9:cf:a1:d1: 38:60:25:fd:57:93:fc:ce:ac:74:e5:64:65:f7:1d:79:a7:a0: 96:8c:13:72:b9:fd:fd:fc:e9:58:e2:9a:98:e2:30:d4:94:ef: 2c:36:36:45:00:1b:23:b3:70:71:85:6f:d0:61:88:11:77:35: a0:f7:36:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TWXkJcX7h4zVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NGM1NWY0NGYtOGFmOS00NThiLWFlZDEtMGQyZDdiOTE3YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJRX1UAnGtPwsyU9T4aO7W6+/u6A/rZterQ5 xEzG+AS9zjSZi9REMrJzHusxeI01A8hpsnP3Ftr/a/rT3ew/MyZJWwpk3DdSEr0A iUbNNqbzGLjDV5QAySGIu1bo2p39TM7sxLrmcMjmPciSf6SxuADymiH12TfCHqtN w4RkOEMPZuBL3QRxckdpDV5QvDYbjuRzqpk8/5fzcFdGv1XYe5CTv09My93JKNPL uL6fwD5y66FNTCYMwnvrOyc5HGx9irZ23Ex+/qZhxBlUz9B7gpGgvsuLkEZunLyo tIDKP32nDd8dsN3pELOPdaCIwm2bZq3JvifQCpTMlNP4OHf/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArye5cGDPyLevXsZj5UBIrKVEkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTE5Njk1ZWEtNGZiOC0z ZDZiLWE1MjItZTcyZmVkZGVhMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKoh855qPrOtj65qlxZ1M2sgVtBrmjU5T5ZoSz1wzyqp7sfgp5STQKo 0BvR+pidsnLWhoizf37FhUI15XxrdByqfLQiNvDVnjBehgu2tL5zlPx8fM7JGjY+ evlOABu/4DudYCTx1eGVF0SLNIQhwoMwnl9VQVYYTQtyLy1hrQ3YTSDpGTIJdUoD Clt9y6p2PWhuEsvziGCM8GF9z27NoCCALhC2adt+C15pLX69zo3ZUAjh17W5uqWq dQQu4zKMhPzF+c+h0ThgJf1Xk/zOrHTlZGX3HXmnoJaME3K5/f386VjimpjiMNSU 7yw2NkUAGyOzcHGFb9BhiBF3NaD3NqQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:49:29 2025 by rpki-client