$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: sainm3cQrJgtCF/eNY+FAyOC0bXY+KBTEUSYwTgruQw= Subject key identifier: 22:AA:6B:F6:E9:C2:7C:BC:03:B4:E3:0E:A6:B2:F6:19:3F:3E:08:A1 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849F01A8190BE95455D97A3B1C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:81:90:be:95:45:5d:97:a3:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=0b2948ca-fefe-4ddc-bc4b-e14f5ad48862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:42:a5:8a:35:62:73:6f:b0:1b:3f:65:f1: 9b:13:f8:16:ad:e0:a6:cc:d6:5b:bf:7a:16:79:15: ba:5c:c6:b7:2a:7a:0d:a5:35:3b:57:bb:f7:2d:85: 7f:d6:fe:3a:b2:4c:a8:75:a5:25:c8:dd:33:ce:f3: b6:3f:45:d0:0a:0a:64:b2:3b:3f:7c:a7:2a:1b:ac: 43:c9:78:50:0f:e9:95:80:3d:3a:72:4d:04:e3:a9: 6a:ff:56:45:c3:c8:20:f9:b5:fb:9e:b5:37:ec:94: f2:ce:1a:22:cb:bb:7a:31:c1:c1:32:91:3e:c5:e9: d7:c6:6a:79:fd:86:7f:3a:09:fe:4f:10:0c:91:af: 12:8d:b1:68:e6:b6:65:f7:be:0b:ce:1f:60:05:b9: f8:32:47:cd:44:f3:d0:da:16:4e:5b:f6:64:e5:51: b6:a7:51:bb:4d:62:ca:0c:88:9c:af:45:1f:54:2c: 63:4f:41:a2:00:07:b4:77:79:f6:13:1f:bd:15:45: 55:76:20:4e:db:7e:dd:66:89:88:e3:ec:89:91:d6: 75:78:58:5b:97:6f:08:32:c0:4f:4c:ca:26:2f:33: 7a:a5:53:dd:8c:84:c5:a9:05:d1:a7:60:4a:97:c1: 97:bf:b2:d5:fb:22:67:5b:be:c9:7d:2c:c0:a9:2b: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:6B:F6:E9:C2:7C:BC:03:B4:E3:0E:A6:B2:F6:19:3F:3E:08:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:19:aa:06:3d:85:1c:8d:0a:0c:e9:ae:a4:0c:94:c5:15:9f: cc:02:3c:13:58:66:1a:25:c2:25:01:86:5d:f5:cb:ba:5e:99: 78:17:21:7b:c6:24:45:5f:05:cf:f0:f6:ea:48:96:33:81:52: 91:3d:a1:5c:39:51:17:a8:57:a5:a1:99:8d:bd:f9:ac:32:cc: d4:e5:b0:da:b7:f9:c4:60:8c:df:fb:8c:a2:94:76:78:49:9d: 60:6b:dd:f4:d6:d9:a6:5f:62:21:58:48:bc:f0:77:cd:95:c6: 3b:93:03:21:af:c6:0e:61:d3:46:17:b4:82:40:a9:b0:fd:a5: 69:01:ce:ef:39:f5:d6:53:42:ec:1a:39:4b:4d:3a:35:da:96: c1:20:b7:d8:82:95:59:ca:f1:0a:32:e6:19:37:96:11:35:70: c8:3e:1c:81:f1:8e:60:74:eb:08:bb:42:c8:08:e9:ea:6b:26: 1e:b8:99:97:30:41:50:47:b8:d4:c1:33:e0:a0:84:58:1d:f2: d9:1d:64:33:01:4e:1e:70:eb:02:9f:f4:c1:49:f0:29:cb:c0: 78:2f:93:9a:be:0c:76:20:05:1a:62:2f:0b:61:f8:88:51:26: 7d:d2:ec:df:3c:aa:b2:2a:9c:64:5d:1e:4a:3b:aa:75:90:1c: 8b:03:93:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoGQvpVFXZejscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MGIyOTQ4Y2EtZmVmZS00ZGRjLWJjNGItZTE0ZjVhZDQ4ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJCpYo1YnNvsBs/ZfGbE/gWreCmzNZbv3oW eRW6XMa3KnoNpTU7V7v3LYV/1v46skyodaUlyN0zzvO2P0XQCgpksjs/fKcqG6xD yXhQD+mVgD06ck0E46lq/1ZFw8gg+bX7nrU37JTyzhoiy7t6McHBMpE+xenXxmp5 /YZ/Ogn+TxAMka8SjbFo5rZl974Lzh9gBbn4MkfNRPPQ2hZOW/Zk5VG2p1G7TWLK DIicr0UfVCxjT0GiAAe0d3n2Ex+9FUVVdiBO237dZomI4+yJkdZ1eFhbl28IMsBP TMomLzN6pVPdjITFqQXRp2BKl8GXv7LV+yJnW77JfSzAqSv5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKqa/bpwny8A7TjDqay9hk/PgihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMZqgY9hRyNCgzprqQMlMUVn8wCPBNYZholwiUBhl31y7pemXgXIXvG JEVfBc/w9upIljOBUpE9oVw5UReoV6WhmY29+awyzNTlsNq3+cRgjN/7jKKUdnhJ nWBr3fTW2aZfYiFYSLzwd82VxjuTAyGvxg5h00YXtIJAqbD9pWkBzu859dZTQuwa OUtNOjXalsEgt9iClVnK8Qoy5hk3lhE1cMg+HIHxjmB06wi7QsgI6eprJh64mZcw QVBHuNTBM+CghFgd8tkdZDMBTh5w6wKf9MFJ8CnLwHgvk5q+DHYgBRpiLwth+IhR Jn3S7N88qrIqnGRdHko7qnWQHIsDkyo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:18 2025 by rpki-client