$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa File: 7970207c-cff5-3b13-b007-d6300f998d3d.roa (raw, json) Hash identifier: BJHfUKvUULHPzz3sBygSH9xAn3bsXI3ZrA1C6sc5c8c= Subject key identifier: 80:46:F7:A2:74:6B:37:12:02:DC:B9:BE:08:C5:DB:61:10:7B:06:8B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A14657C8237543CFE7C3FFE80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 54994 IP address blocks: 138.113.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7c:82:37:54:3c:fe:7c:3f:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=bc818276-1902-4410-95b6-b8fd8c04fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:0c:a1:6b:63:80:d1:16:22:d1:91:af:c7: 54:c9:36:83:31:c3:05:a0:16:29:20:bc:32:20:09: 40:41:f0:b6:f9:22:64:db:20:1f:61:14:fa:fb:ab: db:7c:ea:68:c2:6c:c4:52:98:75:8e:2f:c6:53:7f: 53:ef:2b:e9:af:ef:ed:71:fa:a6:a1:6d:9c:32:87: a2:cb:48:9b:8c:1b:7b:e5:d2:31:72:6a:87:f3:03: 12:1c:dc:50:2c:8b:4c:bc:9e:29:23:96:ab:31:0a: a4:d4:45:e5:9b:ed:38:b3:e6:f5:f2:55:65:cc:78: c2:5b:90:ff:93:8d:a0:ee:36:17:7b:7a:e5:d0:8e: b4:69:d6:c9:72:6d:e5:cb:98:d9:b3:6f:68:4b:16: a2:0a:99:68:6c:ab:50:f4:d5:0e:5b:61:05:2d:6f: 78:19:19:83:c0:ff:2b:76:4a:e6:d9:a8:89:cf:e4: a3:69:62:ea:1e:cf:35:4d:52:14:9d:5e:71:d3:e7: bd:18:1a:68:db:24:fa:3d:52:37:48:71:aa:55:e9: 59:e7:86:07:07:6b:89:5f:81:53:98:72:a8:1f:9a: 15:f5:6c:5d:79:9d:7b:9a:ab:3c:5d:1e:76:e9:1c: 1b:80:11:a2:a5:a3:ee:53:31:83:b4:46:ba:e0:42: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:46:F7:A2:74:6B:37:12:02:DC:B9:BE:08:C5:DB:61:10:7B:06:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4a:bc:1e:8e:64:42:1b:d9:fa:c2:d9:01:7f:10:13:37:24: bc:4d:8d:5a:11:3e:a2:ac:fd:47:57:e3:33:2e:0e:e9:0c:43: d7:3e:2b:07:04:32:d5:da:e2:9a:0d:b9:90:78:0a:06:44:8e: 99:7a:7c:dc:5c:8e:c3:01:d4:7b:f5:ee:f7:eb:cc:4a:fa:77: 02:c6:88:4a:85:b9:d2:02:7e:ef:6d:54:32:36:1e:d8:cd:17: ec:69:67:38:e5:07:2a:ba:10:20:46:48:28:8d:0e:8a:05:e3: 49:05:7f:68:ab:1e:df:55:2b:96:4b:e9:10:4c:f3:54:a4:26: 83:c6:82:8c:56:ea:c3:8b:c6:5c:09:de:18:2b:11:5a:1e:dd: d1:8d:46:df:5e:c0:15:03:80:2e:f9:6f:2a:a7:b0:25:41:d0: d2:83:6a:c0:fe:c8:af:05:77:73:9f:7e:64:e5:30:03:6b:63: c1:d1:37:15:94:b1:ae:71:b5:49:ea:8c:97:a8:7e:cd:f4:a3: 33:d0:19:f8:de:88:f9:f5:68:9a:6f:91:15:e4:47:8a:8f:05: 8c:b1:d8:31:56:f4:61:49:76:42:8d:56:56:9d:58:15:8e:79: f2:a9:67:6a:68:6a:71:19:7a:d2:cb:14:de:ca:f2:71:ad:40: f4:45:3e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXyCN1Q8/nw//oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YmM4MTgyNzYtMTkwMi00NDEwLTk1YjYtYjhmZDhjMDRmYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpEMoWtjgNEWItGRr8dUyTaDMcMFoBYpILwy IAlAQfC2+SJk2yAfYRT6+6vbfOpowmzEUph1ji/GU39T7yvpr+/tcfqmoW2cMoei y0ibjBt75dIxcmqH8wMSHNxQLItMvJ4pI5arMQqk1EXlm+04s+b18lVlzHjCW5D/ k42g7jYXe3rl0I60adbJcm3ly5jZs29oSxaiCplobKtQ9NUOW2EFLW94GRmDwP8r dkrm2aiJz+SjaWLqHs81TVIUnV5x0+e9GBpo2yT6PVI3SHGqVelZ54YHB2uJX4FT mHKoH5oV9WxdeZ17mqs8XR526RwbgBGipaPuUzGDtEa64EIFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBG96J0azcSAty5vgjF22EQewaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzk3MDIwN2MtY2ZmNS0z YjEzLWIwMDctZDYzMDBmOTk4ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhKvB6OZEIb2frC2QF/EBM3JLxNjVoRPqKs/UdX4zMuDukMQ9c+KwcE MtXa4poNuZB4CgZEjpl6fNxcjsMB1Hv17vfrzEr6dwLGiEqFudICfu9tVDI2HtjN F+xpZzjlByq6ECBGSCiNDooF40kFf2irHt9VK5ZL6RBM81SkJoPGgoxW6sOLxlwJ 3hgrEVoe3dGNRt9ewBUDgC75byqnsCVB0NKDasD+yK8Fd3OffmTlMANrY8HRNxWU sa5xtUnqjJeofs30ozPQGfjeiPn1aJpvkRXkR4qPBYyx2DFW9GFJdkKNVladWBWO efKpZ2poanEZetLLFN7K8nGtQPRFPg0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:51:24 2025 by rpki-client