$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: iI+MBVIfdeXjw+KZpln0yTtdG73ybmzNDsetqr6yDOU= Subject key identifier: 27:A3:2E:2A:29:2A:39:3D:D1:38:2A:77:30:37:2A:9E:37:4F:E7:14 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A9636922C476658EEF4268C00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:92:2c:47:66:58:ee:f4:26:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a79d799c-cdd7-4409-b70b-e37bfb4b64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:22:d4:69:bc:a1:98:45:28:2b:e4:66:7b: 27:ad:7d:4a:1b:39:43:b4:95:26:1e:58:d9:66:26: dd:9d:18:ac:da:55:c9:3e:a7:ce:73:98:5c:d3:2e: f6:2e:3a:e8:1d:0b:8e:b9:3c:81:25:b6:eb:d5:9c: b1:79:b3:ce:f3:af:c6:be:62:23:1d:0a:03:f4:3d: 6f:5d:cf:81:c1:ca:ea:ff:97:78:5d:36:71:cc:a4: 5e:a1:30:0a:6c:18:92:57:ff:2d:3c:66:25:3b:25: c4:88:ff:2c:01:e8:39:75:76:31:b4:b9:75:1f:e9: 75:c2:92:52:5c:bf:12:97:7c:bb:0a:48:93:e5:01: b8:54:43:36:fb:f0:82:b3:20:1a:eb:5a:a7:11:09: be:ad:20:47:24:71:a8:d8:43:39:f3:ba:d0:a6:7b: 1c:f7:74:84:f3:dc:b1:cb:60:81:bd:04:ed:6d:2c: ce:3f:2e:6f:c0:18:c2:97:8d:04:1f:bd:18:ec:83: d1:9e:b8:9b:c4:51:d5:c0:c9:82:10:c8:06:ff:dd: 3e:21:42:d0:31:76:9f:a2:cb:68:95:b7:3f:84:33: b7:29:5f:c4:7c:04:6a:70:b2:99:aa:d1:4a:61:bd: c8:6e:03:d7:b6:eb:cc:42:5d:4f:61:73:95:df:bf: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:2E:2A:29:2A:39:3D:D1:38:2A:77:30:37:2A:9E:37:4F:E7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3b:47:d4:68:da:58:55:df:2c:9c:52:58:0b:ba:52:46:ec: ee:9c:07:26:9c:3b:37:7a:d2:a3:87:74:3d:85:78:03:42:10: e1:fc:cf:99:3b:f2:bd:1e:24:12:0e:6f:7b:b2:e4:67:73:c3: 6e:bd:c4:24:c9:95:d9:83:22:04:d0:26:91:0d:f9:2d:aa:47: a6:3a:85:e9:58:70:b1:bc:5d:23:f8:73:1b:cf:a6:0f:75:13: f3:ef:92:b3:55:e9:40:67:c7:a9:3c:cd:42:cc:e2:ed:c9:de: 1d:77:49:de:67:fe:d5:90:3b:55:35:7f:0e:11:de:74:f6:58: d6:f9:f6:a2:a9:62:76:f9:7c:1a:f2:01:9d:db:9c:16:56:f0: 7d:0b:1b:ff:61:07:b3:cf:09:21:de:ab:8e:ee:d0:c7:ed:ed: 68:b2:a6:b6:77:75:a6:21:23:47:52:f5:b4:6a:ac:1a:0d:bd: c6:a4:2e:ea:51:61:18:00:6e:3c:fd:3d:94:79:08:28:6e:3a: 0f:ff:68:74:80:f4:ca:2d:bb:23:4e:b0:bf:52:79:f4:d8:94: e5:09:c1:5d:c8:1b:6f:07:7b:d9:6d:b1:3d:8a:1c:a9:d7:84: 66:01:11:2c:1f:82:c5:6a:c1:26:a3:8d:32:31:61:0e:b5:b9: 23:47:a0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpIsR2ZY7vQmjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTc5ZDc5OWMtY2RkNy00NDA5LWI3MGItZTM3YmZiNGI2NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tYi1Gm8oZhFKCvkZnsnrX1KGzlDtJUmHljZ ZibdnRis2lXJPqfOc5hc0y72LjroHQuOuTyBJbbr1ZyxebPO86/GvmIjHQoD9D1v Xc+Bwcrq/5d4XTZxzKReoTAKbBiSV/8tPGYlOyXEiP8sAeg5dXYxtLl1H+l1wpJS XL8Sl3y7CkiT5QG4VEM2+/CCsyAa61qnEQm+rSBHJHGo2EM587rQpnsc93SE89yx y2CBvQTtbSzOPy5vwBjCl40EH70Y7IPRnribxFHVwMmCEMgG/90+IULQMXafosto lbc/hDO3KV/EfARqcLKZqtFKYb3IbgPXtuvMQl1PYXOV378/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCejLiopKjk90TgqdzA3Kp43T+cUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg7R9Ro2lhV3yycUlgLulJG7O6cByacOzd60qOHdD2FeANCEOH8z5k7 8r0eJBIOb3uy5Gdzw269xCTJldmDIgTQJpEN+S2qR6Y6helYcLG8XSP4cxvPpg91 E/PvkrNV6UBnx6k8zULM4u3J3h13Sd5n/tWQO1U1fw4R3nT2WNb59qKpYnb5fBry AZ3bnBZW8H0LG/9hB7PPCSHeq47u0Mft7WiyprZ3daYhI0dS9bRqrBoNvcakLupR YRgAbjz9PZR5CChuOg//aHSA9MotuyNOsL9SefTYlOUJwV3IG28He9ltsT2KHKnX hGYBESwfgsVqwSajjTIxYQ61uSNHoOg= -----END CERTIFICATE-----Generated at Tue Aug 5 08:23:36 2025 by rpki-client