$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa File: 720ba2e2-29a5-310a-ae15-5a549837472a.roa (raw, json) Hash identifier: ClZGr1lZ5/4KG1suaqEJtXl4oTxOt6VmJUzXZGhdDfY= Subject key identifier: CE:9E:C8:ED:BE:77:A8:E7:A4:4C:10:F7:56:CB:F1:98:F6:BA:57:2C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AE032126B1EA1FBE0F7F0C100 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 54994 IP address blocks: 138.113.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:12:6b:1e:a1:fb:e0:f7:f0:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=01470d8e-b0df-4946-84ba-e707411641c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:50:f8:75:60:c3:c6:29:6a:ef:51:c1:40:df: 1a:da:62:66:ef:56:95:13:cc:e7:36:24:6d:9c:24: cf:a1:9b:85:96:e2:39:54:68:26:c5:1a:f1:dc:f9: bf:cd:e2:d5:a0:f2:16:2b:3c:38:db:97:e7:0f:d3: 11:00:1e:6b:ae:79:37:f0:f1:2b:3a:03:b1:f6:f7: 4d:96:70:93:f6:4a:c5:62:48:28:de:87:0a:b9:fd: 0d:6f:5d:18:3c:ae:9c:bb:a4:f6:2d:83:39:de:26: d7:66:36:45:68:9d:f5:68:bc:61:c8:63:d3:61:9e: da:19:d0:39:55:f9:b9:35:9c:c0:fb:68:78:08:58: 0a:bc:b8:42:52:b6:54:3f:72:40:72:bf:ed:30:c6: 7f:86:27:81:4d:79:0a:dd:bf:fb:fa:d8:8a:e5:ed: 3c:1c:16:43:35:c3:b6:7b:73:05:32:d4:cf:72:94: 1b:cb:96:a4:43:e7:0c:d5:11:72:41:7b:49:c8:0e: 8d:d4:08:d1:01:cf:18:59:2d:f7:f1:79:33:cb:73: ec:68:9d:28:b1:de:08:84:25:7a:70:97:9a:55:48: dd:bb:55:40:3c:55:af:0e:05:fa:f6:73:39:69:b1: 5d:c3:4a:91:f6:bc:e9:76:41:6d:77:24:58:59:c4: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:C8:ED:BE:77:A8:E7:A4:4C:10:F7:56:CB:F1:98:F6:BA:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4a:6d:25:26:bf:5f:12:85:7d:eb:ea:51:5d:04:51:d1:69: 96:c7:ae:c0:58:19:93:22:62:14:5e:08:09:0e:76:24:39:69: 10:0b:19:a4:45:6d:0a:ca:e7:22:9f:4e:0b:75:e5:10:4e:1b: 7d:39:e5:08:5e:ea:9b:f2:4a:57:92:b0:5f:35:eb:c5:60:0d: 4b:5d:a6:ab:b2:e4:76:62:64:27:00:41:86:89:b2:47:e6:67: f7:8b:2c:30:71:bc:9a:75:60:60:d2:0f:48:41:af:f7:4b:77: af:d9:0f:f0:d9:fa:16:cd:24:58:ad:58:68:a0:19:08:d3:ac: 06:6c:5a:b8:7d:36:2a:fd:77:84:4d:df:0e:fd:fa:f0:ec:40: 5f:f7:c9:98:08:0a:70:e1:07:ca:ed:ba:24:f8:94:bb:ca:90: 5f:df:92:78:89:8b:3c:00:ec:2d:7e:ec:a2:4b:b7:10:20:a3: 47:fa:9a:98:fa:93:71:4c:24:61:63:2c:51:56:e7:40:6d:12: 6f:1b:39:1f:ef:df:18:a1:b0:ec:9f:d3:8d:c4:f0:3f:0b:54: 35:60:c5:98:69:b9:e1:6d:ac:ba:80:c9:f8:96:05:27:c9:0b: c0:53:8e:74:c8:1d:1e:2c:e2:36:ed:59:bb:53:18:f9:73:10: fe:bc:ee:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMhJrHqH74PfwwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MDE0NzBkOGUtYjBkZi00OTQ2LTg0YmEtZTcwNzQxMTY0MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VD4dWDDxilq71HBQN8a2mJm71aVE8znNiRt nCTPoZuFluI5VGgmxRrx3Pm/zeLVoPIWKzw425fnD9MRAB5rrnk38PErOgOx9vdN lnCT9krFYkgo3ocKuf0Nb10YPK6cu6T2LYM53ibXZjZFaJ31aLxhyGPTYZ7aGdA5 Vfm5NZzA+2h4CFgKvLhCUrZUP3JAcr/tMMZ/hieBTXkK3b/7+tiK5e08HBZDNcO2 e3MFMtTPcpQby5akQ+cM1RFyQXtJyA6N1AjRAc8YWS338Xkzy3PsaJ0osd4IhCV6 cJeaVUjdu1VAPFWvDgX69nM5abFdw0qR9rzpdkFtdyRYWcRRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6eyO2+d6jnpEwQ91bL8Zj2ulcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzIwYmEyZTItMjlhNS0z MTBhLWFlMTUtNWE1NDk4Mzc0NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1KbSUmv18ShX3r6lFdBFHRaZbHrsBYGZMiYhReCAkOdiQ5aRALGaRF bQrK5yKfTgt15RBOG3055Qhe6pvySleSsF8168VgDUtdpquy5HZiZCcAQYaJskfm Z/eLLDBxvJp1YGDSD0hBr/dLd6/ZD/DZ+hbNJFitWGigGQjTrAZsWrh9Nir9d4RN 3w79+vDsQF/3yZgICnDhB8rtuiT4lLvKkF/fkniJizwA7C1+7KJLtxAgo0f6mpj6 k3FMJGFjLFFW50BtEm8bOR/v3xihsOyf043E8D8LVDVgxZhpueFtrLqAyfiWBSfJ C8BTjnTIHR4s4jbtWbtTGPlzEP687r4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:21 2025 by rpki-client