$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: IDPE3YjK87dZLOCEL2yuPt0m2LD9fFnqvgPngBhaPCY= Subject key identifier: 82:8E:1D:77:9E:61:F8:21:23:6E:BC:CC:43:2C:50:FB:64:FF:BC:46 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849B6DF544223344F1E92DD2C80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:54:42:23:34:4f:1e:92:dd:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=255d7e42-d381-45af-b884-b220ce93e8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:2b:d6:2f:00:4f:59:76:47:c3:e8:21:41: 59:e0:bf:66:1d:97:1c:bc:2b:8e:ce:6c:3b:11:88: ac:38:bb:ab:51:40:07:8a:87:28:6e:e4:f1:7a:e3: 85:7e:07:5c:06:46:d1:1b:5b:06:cf:f0:b3:02:f9: d2:0d:6d:ac:9a:65:27:f4:8f:5a:3f:85:61:60:10: 21:0f:de:58:d3:cf:b5:e1:ac:d9:68:7c:c0:d5:5b: 34:e6:b5:3a:3c:1e:a5:dd:a4:0b:fc:6e:60:5e:e3: ec:d1:1c:22:45:65:73:aa:ce:19:f9:86:12:f8:88: e7:b3:ed:d0:c6:c5:3b:24:7a:44:b2:41:ce:2d:d1: 0a:0a:38:ed:42:e1:26:0f:e7:0a:de:f1:99:f9:4a: 26:ac:2c:e7:de:a1:91:b4:f0:4f:3f:05:39:23:92: 7a:c1:4b:fd:b2:9b:32:44:b0:21:69:84:00:ad:06: 5a:fa:59:a7:e4:bc:0c:4f:56:5b:a3:99:cd:71:d7: 6d:d4:21:2c:64:6e:f4:b1:e6:81:ee:17:06:91:57: cb:84:d2:1f:cd:72:61:c7:fc:2f:c1:5f:dc:14:a5: 75:cd:0b:62:c6:84:b5:c2:cc:6a:7c:fc:07:9c:94: 20:65:73:62:ef:2d:15:e9:dd:31:51:3c:9a:35:f1: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8E:1D:77:9E:61:F8:21:23:6E:BC:CC:43:2C:50:FB:64:FF:BC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f2:e0:b9:74:ec:5e:b7:b4:4b:73:53:3a:73:7a:b1:76:21: 7c:97:fa:13:c4:41:86:18:9b:7a:32:c0:28:a8:15:6d:ad:8c: 4f:97:f5:c7:a2:03:49:21:13:67:ec:ee:49:b1:b8:32:4d:b8: 35:32:f5:20:f1:05:1a:33:95:d7:af:b7:23:bd:a7:96:50:e8: 6e:b7:56:8a:e9:31:0c:ac:65:35:24:92:42:23:a5:99:db:ad: b4:38:b8:d5:3e:e8:c0:b6:5c:8a:70:6a:f0:a5:52:de:e0:4c: f6:c2:ac:92:76:0b:9d:a6:b3:26:1f:f2:e8:a9:87:3e:89:b6: 58:ef:64:24:83:a0:31:52:46:f5:a0:b8:4a:f8:93:11:92:1e: cb:82:44:f1:46:ac:89:75:87:bd:a3:55:d6:34:f0:26:5a:be: ec:e0:f0:ba:9b:40:14:7e:25:e2:b5:53:54:3d:35:2a:4c:cf: 40:94:91:aa:b2:61:22:32:61:6b:84:17:40:1b:0e:78:86:03: 04:a2:eb:06:e6:ca:8a:60:ce:ab:60:96:11:99:99:5b:b1:5a: b9:ef:18:db:73:f9:eb:c5:91:3f:a2:13:c9:ba:17:aa:e6:eb: a1:c4:30:05:b8:3e:ab:14:b1:d3:80:a9:62:7a:07:67:e1:31: f2:31:96:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231RCIzRPHpLdLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk MjU1ZDdlNDItZDM4MS00NWFmLWI4ODQtYjIyMGNlOTNlOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfMr1i8AT1l2R8PoIUFZ4L9mHZccvCuOzmw7 EYisOLurUUAHiocobuTxeuOFfgdcBkbRG1sGz/CzAvnSDW2smmUn9I9aP4VhYBAh D95Y08+14azZaHzA1Vs05rU6PB6l3aQL/G5gXuPs0RwiRWVzqs4Z+YYS+Ijns+3Q xsU7JHpEskHOLdEKCjjtQuEmD+cK3vGZ+UomrCzn3qGRtPBPPwU5I5J6wUv9spsy RLAhaYQArQZa+lmn5LwMT1Zbo5nNcddt1CEsZG70seaB7hcGkVfLhNIfzXJhx/wv wV/cFKV1zQtixoS1wsxqfPwHnJQgZXNi7y0V6d0xUTyaNfGMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKOHXeeYfghI268zEMsUPtk/7xGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzy4Ll07F63tEtzUzpzerF2IXyX+hPEQYYYm3oywCioFW2tjE+X9cei A0khE2fs7kmxuDJNuDUy9SDxBRozldevtyO9p5ZQ6G63VorpMQysZTUkkkIjpZnb rbQ4uNU+6MC2XIpwavClUt7gTPbCrJJ2C52msyYf8uiphz6JtljvZCSDoDFSRvWg uEr4kxGSHsuCRPFGrIl1h72jVdY08CZavuzg8LqbQBR+JeK1U1Q9NSpMz0CUkaqy YSIyYWuEF0AbDniGAwSi6wbmyopgzqtglhGZmVuxWrnvGNtz+evFkT+iE8m6F6rm 66HEMAW4PqsUsdOAqWJ6B2fhMfIxlt8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:19 2025 by rpki-client