$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: GF3Eg4DvLiLEMo5E4/vJzk101KwmRGx14tAwND3Zxps= Subject key identifier: 71:74:AC:6C:96:2C:B6:A8:3C:5D:A3:56:F5:64:0D:46:54:14:FD:D4 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AC5AB8E025CAEB991E7DFFB40 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8e:02:5c:ae:b9:91:e7:df:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=e384fbb5-d20a-4038-ac27-0993c47d5d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:76:04:0f:18:9d:8e:70:2f:e7:25:85:d1: e6:2a:13:88:d4:70:d3:3b:2f:07:6f:1c:83:3b:c1: 16:f8:c5:dc:b0:6d:1c:2f:03:0c:09:be:17:fc:0d: 5f:96:aa:e2:fa:c7:53:10:4a:6d:3c:a3:29:02:c4: 9d:cc:da:c8:76:d3:af:c3:7b:9a:6a:8c:65:5c:d1: f6:d5:35:f2:97:4d:46:70:d1:7f:df:99:eb:c0:b4: 3a:68:c5:1a:c5:33:46:d0:03:17:d3:14:cc:9c:19: fd:5d:7e:c2:69:df:dd:b1:4b:83:a0:01:25:5e:61: d7:dc:f2:f6:8d:ae:22:5b:5d:fd:a0:66:e8:e5:1a: c2:49:5a:d0:ce:1c:1e:e6:71:4d:85:79:c2:95:ab: 99:18:2d:f9:cb:64:c3:57:58:87:01:38:a5:48:f0: 20:2f:ba:0a:b2:09:37:ac:20:b3:55:47:02:13:dc: 94:07:ee:bb:f6:f2:79:f7:7b:cc:bd:56:9a:18:f5: 1a:94:e1:f4:44:6f:ca:f6:76:c0:f3:ea:17:84:62: 1b:b0:ea:28:b6:08:5c:c4:a0:63:89:a7:cc:9b:a2: ac:a0:a1:c3:33:f2:ad:5c:8d:53:4f:e0:b4:1f:91: 46:0f:c6:ef:21:91:a6:ee:34:9d:64:39:d1:51:45: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:74:AC:6C:96:2C:B6:A8:3C:5D:A3:56:F5:64:0D:46:54:14:FD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:67:72:89:91:68:40:ab:e4:1c:c8:0c:e6:56:bb:38:ef:84: ca:ac:34:29:b8:66:b7:5d:d7:3c:1e:14:16:f8:a9:22:c7:43: 10:88:06:9c:8a:4d:61:00:f4:9d:e3:fa:66:5a:61:21:14:b5: 0d:42:0b:34:cc:d1:9a:c7:f6:8f:76:53:82:46:9c:b0:a3:80: fb:44:98:a7:ec:e9:da:58:12:03:77:c9:74:83:3b:7d:77:de: 5d:a7:64:4c:aa:25:7a:05:2c:5c:0e:ae:9c:6a:07:ce:df:c2: 1a:74:84:e3:be:5e:4e:70:f9:b9:e5:f3:59:b9:49:33:1c:49: ba:44:8a:02:e4:75:d0:2f:2a:c0:7b:33:d9:7d:e8:04:92:73: 9d:b2:0d:1b:f2:6f:56:42:7a:8b:b3:d4:00:e1:86:76:cd:14: e4:d9:0a:4f:f4:b9:98:4e:9a:80:a3:79:c2:01:6f:c7:9c:e6: fd:c8:a0:05:8b:f2:49:7b:2d:c5:e3:c9:f7:26:6e:f6:7a:8a: 8f:27:ae:80:84:56:b9:1a:4a:62:e7:f5:71:e4:39:82:6e:35: c5:1c:52:c7:ba:11:0a:45:e3:21:8f:84:01:f2:e1:a7:de:09: f7:b5:e9:76:68:4d:8e:c8:cd:15:3b:0a:a5:24:b0:08:33:2d: 62:e6:5b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq44CXK65keff+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTM4NGZiYjUtZDIwYS00MDM4LWFjMjctMDk5M2M0N2Q1ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yZ2BA8YnY5wL+clhdHmKhOI1HDTOy8HbxyD O8EW+MXcsG0cLwMMCb4X/A1flqri+sdTEEptPKMpAsSdzNrIdtOvw3uaaoxlXNH2 1TXyl01GcNF/35nrwLQ6aMUaxTNG0AMX0xTMnBn9XX7Cad/dsUuDoAElXmHX3PL2 ja4iW139oGbo5RrCSVrQzhwe5nFNhXnClauZGC35y2TDV1iHATilSPAgL7oKsgk3 rCCzVUcCE9yUB+679vJ593vMvVaaGPUalOH0RG/K9nbA8+oXhGIbsOootghcxKBj iafMm6KsoKHDM/KtXI1TT+C0H5FGD8bvIZGm7jSdZDnRUUV7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF0rGyWLLaoPF2jVvVkDUZUFP3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1ncomRaECr5BzIDOZWuzjvhMqsNCm4Zrdd1zweFBb4qSLHQxCIBpyK TWEA9J3j+mZaYSEUtQ1CCzTM0ZrH9o92U4JGnLCjgPtEmKfs6dpYEgN3yXSDO313 3l2nZEyqJXoFLFwOrpxqB87fwhp0hOO+Xk5w+bnl81m5STMcSbpEigLkddAvKsB7 M9l96ASSc52yDRvyb1ZCeouz1ADhhnbNFOTZCk/0uZhOmoCjecIBb8ec5v3IoAWL 8kl7LcXjyfcmbvZ6io8nroCEVrkaSmLn9XHkOYJuNcUcUse6EQpF4yGPhAHy4afe Cfe16XZoTY7IzRU7CqUksAgzLWLmW7Q= -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:25 2025 by rpki-client