$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa File: 720ba2e2-29a5-310a-ae15-5a549837472a.roa (raw, json) Hash identifier: CTwKQdAmx4f7vAiMXCMebsoWAfMOx5lermYEHIASx3w= Subject key identifier: FE:2B:6E:F9:A0:FD:94:50:F6:38:B2:DD:58:D9:00:81:2D:6F:8E:F9 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849FFCD4E70D5CF95133CB2D4A0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa Signing time: Wed 28 May 2025 03:58:37 +0000 ROA not before: Wed 28 May 2025 03:58:37 +0000 ROA not after: Tue 26 Aug 2025 03:58:37 +0000 asID: 54994 IP address blocks: 138.113.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:cd:4e:70:d5:cf:95:13:3c:b2:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 28 03:58:37 2025 GMT Not After : Aug 26 03:58:37 2025 GMT Subject: CN=ad82f349-5cde-4349-8900-3182458d8b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:14:ab:18:33:9c:2f:ba:5e:76:0c:66:cf: 0f:45:28:71:ee:dc:ff:c7:3b:ee:49:ff:8d:79:8a: a8:6b:1e:f4:12:48:0d:17:22:d6:3e:66:ec:aa:c4: 9b:51:d0:04:77:28:bd:f2:33:14:26:94:c6:aa:9f: 6d:7c:27:da:c4:f4:25:8d:f7:00:63:f4:d2:68:d3: ee:98:f1:22:88:d5:3f:2b:6a:08:68:b3:4a:c6:8b: 8e:ad:62:4e:a6:f3:bd:7f:f8:37:b7:d1:d6:22:ea: 61:fa:c2:24:5c:af:4c:f4:0d:6c:f2:d0:ca:a1:72: 1e:f0:b6:e3:ca:c3:b6:fa:07:58:23:a2:21:c6:f5: 56:1d:b6:c6:25:cb:3b:d5:62:a0:19:ee:50:b4:95: 6c:7f:26:e2:4c:5a:49:d0:51:ef:37:6a:59:23:be: 6f:ab:d5:43:40:78:2f:a2:eb:f4:8a:2d:32:1f:2c: 63:6e:b2:85:d5:85:d2:be:24:88:e4:4c:40:22:2c: 30:e7:39:40:47:7d:8a:f2:3f:07:f1:41:73:fb:04: e4:ff:21:ec:95:8a:ea:33:4f:35:73:a1:47:5e:d9: 7b:e5:0c:c2:f6:b0:4b:72:e8:a8:3c:0a:b3:c8:89: 6f:87:06:ad:93:d8:c2:65:10:14:fd:c9:45:fb:a2: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:6E:F9:A0:FD:94:50:F6:38:B2:DD:58:D9:00:81:2D:6F:8E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:29:04:d2:ef:40:b0:0d:58:7a:32:09:3b:3a:3b:ce:a2:c2: 03:59:63:1d:c2:18:fa:dc:bc:7d:c0:66:4f:74:e4:06:f9:4e: 88:a7:d4:37:1b:98:9c:b1:b6:10:1b:3a:27:c4:04:ed:2d:99: be:d7:29:9d:69:dd:b9:96:cc:af:09:83:be:1a:5c:cf:2e:29: 92:e5:d5:f4:ec:3e:39:e2:90:1a:91:24:67:4f:c6:57:ef:8c: 65:4a:7e:b0:1d:7b:a0:f0:b5:58:65:e2:6c:9f:c2:0c:9a:ce: 36:31:10:8d:d0:f6:05:11:c6:bc:f9:51:3b:58:33:83:08:61: c2:34:5b:67:b2:3d:e7:17:3b:9e:65:48:fd:a0:28:39:fe:56: 6f:14:e9:75:19:5a:db:b0:08:a3:f1:24:08:68:54:92:9b:c0: d9:94:08:0c:f9:c9:fb:f6:a0:27:a5:b9:1d:1f:af:c1:f7:8b: 60:a8:5d:60:e5:05:e2:a7:b0:59:9f:3a:d9:26:3b:dc:e9:dd: 78:9a:1f:3a:b9:29:a1:09:24:07:3e:cb:9b:9e:1c:52:d7:1f: a4:44:c5:52:ee:91:d0:0b:cd:e8:48:c4:58:f7:1f:87:d1:d5: d4:66:1c:53:92:c9:4f:7b:24:ac:aa:f6:ed:f4:37:e4:40:73: 7d:2d:3c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/zU5w1c+VEzyy1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyODAzNTgzN1oXDTI1MDgyNjAzNTgzN1owLzEtMCsGA1UEAxMk YWQ4MmYzNDktNWNkZS00MzQ5LTg5MDAtMzE4MjQ1OGQ4Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8UqxgznC+6XnYMZs8PRShx7tz/xzvuSf+N eYqoax70EkgNFyLWPmbsqsSbUdAEdyi98jMUJpTGqp9tfCfaxPQljfcAY/TSaNPu mPEiiNU/K2oIaLNKxouOrWJOpvO9f/g3t9HWIuph+sIkXK9M9A1s8tDKoXIe8Lbj ysO2+gdYI6IhxvVWHbbGJcs71WKgGe5QtJVsfybiTFpJ0FHvN2pZI75vq9VDQHgv ouv0ii0yHyxjbrKF1YXSviSI5ExAIiww5zlAR32K8j8H8UFz+wTk/yHslYrqM081 c6FHXtl75QzC9rBLcuioPAqzyIlvhwatk9jCZRAU/clF+6Ku+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4rbvmg/ZRQ9jiy3VjZAIEtb475MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzIwYmEyZTItMjlhNS0z MTBhLWFlMTUtNWE1NDk4Mzc0NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4pBNLvQLANWHoyCTs6O86iwgNZYx3CGPrcvH3AZk905Ab5Toin1Dcb mJyxthAbOifEBO0tmb7XKZ1p3bmWzK8Jg74aXM8uKZLl1fTsPjnikBqRJGdPxlfv jGVKfrAde6DwtVhl4myfwgyazjYxEI3Q9gURxrz5UTtYM4MIYcI0W2eyPecXO55l SP2gKDn+Vm8U6XUZWtuwCKPxJAhoVJKbwNmUCAz5yfv2oCeluR0fr8H3i2CoXWDl BeKnsFmfOtkmO9zp3XiaHzq5KaEJJAc+y5ueHFLXH6RExVLukdALzehIxFj3H4fR 1dRmHFOSyU97JKyq9u30N+RAc30tPMM= -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:00 2025 by rpki-client