$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa File: 6cf2c805-2a89-392d-9045-0492053626d7.roa (raw, json) Hash identifier: JfFGrPYoBWg4Q4Qe0c3PaPoq5moKGIJxTQjZ8duApD8= Subject key identifier: B5:32:73:E0:7D:59:59:8D:4D:F2:74:CA:8F:9E:C7:7A:81:A6:D4:7C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A3A157F8C4257AE57F6FFD900 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 54994 IP address blocks: 138.113.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7f:8c:42:57:ae:57:f6:ff:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=0fe09768-1266-470c-bd8f-db879137384b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:ed:40:96:fc:d4:5d:69:5b:a1:b2:43:f1: 98:f4:f1:44:db:34:bf:15:c9:84:6d:c9:8a:78:15: 51:0f:b9:cf:b7:f8:4d:ef:01:ba:37:8f:3e:42:07: 1c:fc:e7:78:c4:76:f5:75:19:4e:ee:d3:3c:53:dd: 15:57:62:ac:69:ad:07:61:6e:dd:ec:53:8a:03:c8: 13:99:60:1a:0c:7c:df:51:df:6f:8a:0d:1b:1f:b2: 00:4e:a4:35:94:6f:a7:08:c1:10:dc:6a:91:05:67: 57:4d:38:28:66:64:66:8f:66:e2:75:55:ab:d0:80: df:a2:1c:de:f3:45:8f:54:84:0c:95:85:ce:5e:c9: a6:87:16:fd:b7:9f:32:07:cb:3a:8e:da:dd:2f:1a: a5:90:ee:7a:ad:be:57:ad:a1:55:09:2e:db:0a:9a: c4:dd:bb:b5:c5:ff:66:54:6e:32:22:d4:e6:31:ef: 19:54:ea:fc:76:8f:f0:f8:16:c2:af:ca:51:ca:05: 09:e3:30:e2:6a:4a:c1:c5:16:4c:b0:5f:a6:3a:45: 37:7b:49:4f:1f:6a:a6:04:0c:bd:43:92:68:80:d0: 7d:c8:b1:8f:7f:ce:c6:bd:50:78:bc:38:af:4f:e9: bf:f0:13:44:c8:a9:92:c5:8e:e2:a7:43:ad:3a:c2: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:73:E0:7D:59:59:8D:4D:F2:74:CA:8F:9E:C7:7A:81:A6:D4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:28:7b:b5:1b:04:aa:48:1f:13:a3:46:e4:24:7e:b3:73:43: f8:16:95:76:7e:8c:8c:3f:b4:f7:38:89:95:5c:b9:89:8c:fd: 35:f3:b5:df:01:56:38:ba:10:88:72:b7:17:47:ce:24:16:cd: 38:b1:14:1d:c7:03:1e:e1:70:e2:7d:03:cb:b6:68:a1:2c:13: ba:0c:43:6e:78:3e:b1:9d:62:e4:1b:fb:ce:2a:35:85:d0:87: 22:14:9f:af:c3:dc:d8:c7:94:50:b2:33:8e:6a:28:e2:0d:e1: 72:ee:f8:5d:31:9a:7f:0b:e6:c4:38:7f:c1:3e:c7:68:64:8a: 05:26:80:41:34:1a:9c:77:9d:ca:bf:60:f4:15:f3:bd:9c:5f: 2b:35:29:26:4f:65:e7:04:99:ee:52:54:99:77:09:dc:4b:9e: 17:57:05:50:30:f6:52:34:c2:1f:d3:9f:bf:6f:99:3a:65:60: 97:1c:51:fd:44:c3:f0:19:36:2b:9b:5f:cb:48:d7:70:f3:2e: d1:f7:b3:7d:ea:dd:61:88:71:da:3c:33:b2:1e:4c:07:e0:a1: a7:87:99:ed:b0:52:a0:01:b4:34:5c:56:b8:3e:06:41:2a:c3: c4:b5:ae:16:ec:24:2f:11:f9:cf:a5:58:dc:b4:11:b4:75:47: 62:67:16:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FX+MQleuV/b/2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MGZlMDk3NjgtMTI2Ni00NzBjLWJkOGYtZGI4NzkxMzczODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YjtQJb81F1pW6GyQ/GY9PFE2zS/FcmEbcmK eBVRD7nPt/hN7wG6N48+Qgcc/Od4xHb1dRlO7tM8U90VV2Ksaa0HYW7d7FOKA8gT mWAaDHzfUd9vig0bH7IATqQ1lG+nCMEQ3GqRBWdXTTgoZmRmj2bidVWr0IDfohze 80WPVIQMlYXOXsmmhxb9t58yB8s6jtrdLxqlkO56rb5XraFVCS7bCprE3bu1xf9m VG4yItTmMe8ZVOr8do/w+BbCr8pRygUJ4zDiakrBxRZMsF+mOkU3e0lPH2qmBAy9 Q5JogNB9yLGPf87GvVB4vDivT+m/8BNEyKmSxY7ip0OtOsIHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUyc+B9WVmNTfJ0yo+ex3qBptR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNmNmMmM4MDUtMmE4OS0z OTJkLTkwNDUtMDQ5MjA1MzYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUoe7UbBKpIHxOjRuQkfrNzQ/gWlXZ+jIw/tPc4iZVcuYmM/TXztd8B Vji6EIhytxdHziQWzTixFB3HAx7hcOJ9A8u2aKEsE7oMQ254PrGdYuQb+84qNYXQ hyIUn6/D3NjHlFCyM45qKOIN4XLu+F0xmn8L5sQ4f8E+x2hkigUmgEE0Gpx3ncq/ YPQV872cXys1KSZPZecEme5SVJl3CdxLnhdXBVAw9lI0wh/Tn79vmTplYJccUf1E w/AZNiubX8tI13DzLtH3s33q3WGIcdo8M7IeTAfgoaeHme2wUqABtDRcVrg+BkEq w8S1rhbsJC8R+c+lWNy0EbR1R2JnFs4= -----END CERTIFICATE-----Generated at Tue Jul 1 10:53:23 2025 by rpki-client