$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa File: 34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa (raw, json) Hash identifier: REtQxEoSPyG3X5tw18rJUT1UOadQNGT+RgdCq4CGiAs= Subject key identifier: 3A:BD:F6:0F:D0:65:09:5B:A8:E0:65:4F:82:DB:5D:96:29:8D:67:A0 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F432858498E648E90CB70DC20C5CDB340 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 54994 IP address blocks: 138.113.11.0/24 maxlen: 24 138.113.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8e:90:cb:70:dc:20:c5:cd:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e334f6d4-68ad-4296-82a5-23bfcbc18415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4e:2b:6d:3a:23:8f:40:4b:e5:97:3b:51:67: 78:25:3d:bb:b0:0a:e1:23:49:4e:6e:12:ea:fa:ad: 0a:e3:d8:0d:49:c2:0d:de:08:28:04:ff:cf:f8:d3: e6:af:86:ea:b6:a2:74:b8:87:38:5e:69:64:df:b4: 2a:99:72:c8:9f:b1:8b:b2:0e:a4:90:ab:83:01:d4: 4c:50:90:d4:d0:fb:04:49:2f:10:a8:14:70:99:6f: a3:d7:74:67:ed:ce:ac:45:6a:17:cd:56:15:89:ee: 43:a9:20:87:29:ed:b0:ef:0d:01:f2:d1:a6:f7:d2: 4f:55:16:26:0f:d2:8a:c1:a2:e3:64:1c:57:08:a5: a2:24:67:17:08:99:43:24:71:06:fe:f9:bc:3c:d5: b6:e8:57:26:7f:8d:74:d7:5a:b5:2b:a5:e5:82:0b: 48:a1:e9:75:95:ed:30:ca:a2:f8:f7:a0:7f:12:f1: 70:ac:51:1a:97:53:7a:4f:a7:f2:80:57:8f:5d:ab: f7:fd:8a:31:e8:30:a0:74:5c:e3:a3:5d:42:f4:f6: d4:df:c9:97:d5:b4:fd:b3:30:0c:ae:6f:ff:48:2a: 04:3b:c2:3e:74:d9:c5:2c:55:f5:53:53:c1:10:51: 1f:65:e0:54:45:59:50:cc:06:fe:91:5d:f6:89:c6: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BD:F6:0F:D0:65:09:5B:A8:E0:65:4F:82:DB:5D:96:29:8D:67:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.11.0/24 138.113.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fa:11:11:34:ee:25:bf:a7:c5:a4:67:d7:41:3f:1f:71:d1: 95:f6:eb:c3:6d:f6:53:ec:af:2c:b8:64:46:36:e7:cc:a3:05: 05:96:6d:c0:cb:c5:3a:64:f2:ed:4c:e6:36:64:7d:5d:de:41: eb:02:41:80:12:99:69:05:0c:c9:0d:1d:38:27:83:23:2c:23: 47:a6:23:37:08:66:b3:b7:19:8d:05:b4:0e:28:cf:24:86:a3: aa:54:78:b8:f9:9b:83:68:0d:23:b5:b4:db:a0:ee:8e:77:3e: 1c:0c:93:0f:7f:31:cc:a1:f0:3d:52:d1:65:35:dd:00:1b:e8: 8e:cc:1d:fa:8c:06:02:18:02:d1:64:ce:9c:83:f7:16:57:38: cc:f3:66:d0:7a:de:b8:e9:88:40:08:cf:8e:40:b0:cc:7b:80: 48:9d:72:93:72:0e:f0:c9:9f:bb:97:db:ef:0c:a5:a7:99:d4: 26:ae:bd:a3:59:cc:07:9f:c8:68:68:89:1a:c8:d0:7d:88:9a: 68:8b:3d:f2:4c:8a:54:4a:fa:8d:51:a9:eb:56:46:38:02:1c: dc:ea:e0:5a:ca:c6:e4:5b:24:1b:a8:40:ca:a2:5c:e3:57:85: 36:b3:b1:92:63:c1:ae:40:9d:2f:54:91:c6:97:9f:cd:c1:e1: 19:5f:86:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmOZI6Qy3DcIMXNs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTMzNGY2ZDQtNjhhZC00Mjk2LTgyYTUtMjNiZmNiYzE4NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg04rbTojj0BL5Zc7UWd4JT27sArhI0lObhLq +q0K49gNScIN3ggoBP/P+NPmr4bqtqJ0uIc4Xmlk37QqmXLIn7GLsg6kkKuDAdRM UJDU0PsESS8QqBRwmW+j13Rn7c6sRWoXzVYVie5DqSCHKe2w7w0B8tGm99JPVRYm D9KKwaLjZBxXCKWiJGcXCJlDJHEG/vm8PNW26Fcmf41011q1K6XlggtIoel1le0w yqL496B/EvFwrFEal1N6T6fygFePXav3/Yox6DCgdFzjo11C9PbU38mX1bT9szAM rm//SCoEO8I+dNnFLFX1U1PBEFEfZeBURVlQzAb+kV32icYs+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDq99g/QZQlbqOBlT4LbXZYpjWegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzQ5MDZlOWMtYzJiZS0z NWUxLWI2YjctNDBlMDFkNGI0ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinELAwQA inERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACf6ERE07iW/p8WkZ9dBPx9x0ZX268Nt9lPsryy4ZEY258yj BQWWbcDLxTpk8u1M5jZkfV3eQesCQYASmWkFDMkNHTgngyMsI0emIzcIZrO3GY0F tA4ozySGo6pUeLj5m4NoDSO1tNug7o53PhwMkw9/Mcyh8D1S0WU13QAb6I7MHfqM BgIYAtFkzpyD9xZXOMzzZtB63rjpiEAIz45AsMx7gEidcpNyDvDJn7uX2+8MpaeZ 1CauvaNZzAefyGhoiRrI0H2ImmiLPfJMilRK+o1RqetWRjgCHNzq4FrKxuRbJBuo QMqiXONXhTazsZJjwa5AnS9UkcaXn83B4Rlfhow= -----END CERTIFICATE-----Generated at Tue May 6 18:13:50 2025 by rpki-client