$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa File: 48b04ea5-053d-355d-9e7e-68ca99d7a329.roa (raw, json) Hash identifier: gKXnNRj0sMNVaNh4qZ4G6Y1Y8nTJT9qctG3rH6jlrSY= Subject key identifier: 4A:15:F9:93:59:20:91:13:C4:7C:2B:C9:F4:2F:0A:AE:BA:4E:2B:87 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AE032124866DFE0E840E6C980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 54994 IP address blocks: 138.113.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:12:48:66:df:e0:e8:40:e6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=b99d171d-f163-46c5-8a0d-51ddb8a2a9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:60:22:bf:b8:e9:56:78:6a:06:f7:99:4b:22: 05:1c:4c:ce:df:2a:9b:2c:c9:d1:3b:17:c3:4a:14: 49:f9:a0:b9:7e:47:e6:9b:75:ac:98:f5:9a:d1:8f: bb:1a:48:b1:2e:76:5f:93:4e:0d:98:ba:a8:14:9c: 05:c3:eb:f8:05:8f:f6:9d:58:18:a6:54:3c:5a:3e: 17:30:04:3e:5b:d6:bb:17:4a:d1:20:02:32:1e:e6: 17:13:77:02:f1:47:9e:56:47:5c:d0:01:b6:4e:1f: 6b:39:cd:43:1c:c3:a3:d1:1a:7b:e9:79:9d:3c:b4: c6:54:8b:0d:fd:44:55:a5:e5:cc:1f:00:6b:3d:4b: b3:ce:51:95:06:39:44:a0:7a:0e:f8:ed:76:5c:97: 92:69:04:00:21:13:3f:08:c0:8a:8b:b7:35:a9:f8: 86:85:61:f7:04:ac:1c:e4:49:29:90:ab:fe:f2:9c: 57:c1:ed:cb:b6:30:b4:72:48:d6:01:79:96:63:1a: 3c:fe:0a:54:5d:32:76:13:d0:56:65:df:f4:6e:6f: 95:45:d0:4b:ca:f0:5a:8c:15:01:b4:35:9f:5b:12: 4f:f8:a1:2e:47:a9:9d:3e:d1:4f:1d:e5:af:0e:84: 3b:18:be:7e:d0:42:e3:50:c9:18:6b:24:cd:43:c6: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:F9:93:59:20:91:13:C4:7C:2B:C9:F4:2F:0A:AE:BA:4E:2B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cd:af:d3:dd:ca:f0:7d:12:31:da:9d:09:f4:0b:fd:16:9a: 08:a8:a2:70:64:ce:0c:b4:e0:1e:0b:a1:df:9d:58:59:70:67: de:ba:fb:4f:02:81:9f:b1:3f:e6:a9:ac:e9:57:3b:98:e5:08: 9c:42:14:6e:1f:5b:ec:21:70:cc:19:17:31:b1:e5:ee:c5:40: 30:3b:26:4d:9a:65:c3:f0:95:45:0b:d9:f7:75:63:fe:2d:97: f2:ab:3e:10:78:68:0d:ee:d6:04:b6:ac:22:4a:98:c0:fd:88: eb:dd:22:79:ae:c5:f2:5d:a3:6e:e4:b4:7a:42:f5:6a:3c:80: 38:b9:84:7d:9b:2f:ac:29:98:f5:ab:d5:7b:6a:73:10:ea:9b: ed:89:a1:2e:58:1d:69:30:e9:92:6b:f0:ba:79:b3:72:fb:f2: 3b:02:4f:a3:58:ce:56:b0:08:e0:bc:78:83:b9:3c:87:23:73: 8a:64:a0:46:de:d9:67:31:78:df:6d:18:22:b4:81:4e:1c:30: 2f:02:9f:9c:f3:93:88:95:98:96:aa:c3:1e:eb:bd:33:44:71: a8:74:66:07:0c:d1:5f:8e:c8:9f:73:b5:ed:ec:6c:c9:dd:55: 9f:be:85:ce:a1:bf:81:c2:b8:a6:0e:50:81:eb:28:be:62:27: c2:80:18:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMhJIZt/g6EDmyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk Yjk5ZDE3MWQtZjE2My00NmM1LThhMGQtNTFkZGI4YTJhOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWAiv7jpVnhqBveZSyIFHEzO3yqbLMnROxfD ShRJ+aC5fkfmm3WsmPWa0Y+7GkixLnZfk04NmLqoFJwFw+v4BY/2nVgYplQ8Wj4X MAQ+W9a7F0rRIAIyHuYXE3cC8UeeVkdc0AG2Th9rOc1DHMOj0Rp76XmdPLTGVIsN /URVpeXMHwBrPUuzzlGVBjlEoHoO+O12XJeSaQQAIRM/CMCKi7c1qfiGhWH3BKwc 5EkpkKv+8pxXwe3LtjC0ckjWAXmWYxo8/gpUXTJ2E9BWZd/0bm+VRdBLyvBajBUB tDWfWxJP+KEuR6mdPtFPHeWvDoQ7GL5+0ELjUMkYayTNQ8YjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoV+ZNZIJETxHwryfQvCq66TiuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDhiMDRlYTUtMDUzZC0z NTVkLTllN2UtNjhjYTk5ZDdhMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDNr9PdyvB9EjHanQn0C/0WmgioonBkzgy04B4Lod+dWFlwZ966+08C gZ+xP+aprOlXO5jlCJxCFG4fW+whcMwZFzGx5e7FQDA7Jk2aZcPwlUUL2fd1Y/4t l/KrPhB4aA3u1gS2rCJKmMD9iOvdInmuxfJdo27ktHpC9Wo8gDi5hH2bL6wpmPWr 1XtqcxDqm+2JoS5YHWkw6ZJr8Lp5s3L78jsCT6NYzlawCOC8eIO5PIcjc4pkoEbe 2WcxeN9tGCK0gU4cMC8Cn5zzk4iVmJaqwx7rvTNEcah0ZgcM0V+OyJ9zte3sbMnd VZ++hc6hv4HCuKYOUIHrKL5iJ8KAGKI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:07 2025 by rpki-client