$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa File: 87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json) Hash identifier: oBEsDc/LKlzkdaxXvdR766VWLMI9eb9SYxLENXrpMx8= Subject key identifier: B2:2B:1A:10:9D:CC:8A:65:BD:B2:59:FC:2F:D4:A7:0E:83:FA:7F:1A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584ACCA6589DDDC6C35FB6780880 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 54994 IP address blocks: 138.113.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:58:9d:dd:c6:c3:5f:b6:78:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=bf73ff94-b398-4254-859f-b055b7c308c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:d1:43:8e:33:ab:7a:89:62:97:f7:92:db: 57:19:4a:04:ef:54:51:6d:01:20:2c:91:ad:9d:57: c1:7a:df:11:82:6b:7d:55:60:5a:d9:24:e8:b3:f1: 6c:f6:1b:db:e3:b8:ba:7b:41:e5:21:f5:45:83:01: 74:ed:8d:af:3d:79:44:50:2c:e8:e9:45:7e:fc:18: 0d:f6:69:32:d7:04:57:a2:40:d0:cb:13:f0:64:44: d7:8d:9b:83:b4:1e:f2:3e:c2:e6:0b:cd:bb:d0:b5: f7:87:71:e2:ed:df:b4:d2:13:4a:23:c4:10:51:2c: 3a:ad:95:21:65:bd:b1:b0:4b:6b:e5:a6:44:79:2a: 06:74:73:e9:6a:27:dd:64:2e:f9:1a:b5:13:a1:b0: 49:29:82:5d:0e:5d:bc:c6:03:cc:40:32:6e:e6:3b: 69:1c:dd:2d:0d:50:96:ed:f8:da:9d:37:55:c9:d4: 6b:f3:32:78:ee:2c:43:a5:dd:b1:82:fd:c8:c0:87: dd:9a:d3:b3:2b:49:9d:8f:f9:f2:0e:5f:b4:0d:13: 5c:7f:cd:bb:35:46:1e:14:b6:e9:d7:7c:d7:e1:97: 7d:de:a4:ad:af:86:84:3d:de:67:c8:24:cb:b9:66: 2d:5d:85:10:dc:f5:04:c4:ae:04:1f:a6:8e:72:a9: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:1A:10:9D:CC:8A:65:BD:B2:59:FC:2F:D4:A7:0E:83:FA:7F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:60:fd:7e:e8:7d:52:6b:71:ef:61:9c:e6:f4:65:34:88: 72:bd:2f:6d:a7:14:07:5f:ec:19:10:1d:f1:68:c0:7d:ac:c3: ce:87:03:49:b5:b0:f5:84:c6:fa:79:8f:2c:e1:ce:09:c3:54: 34:4f:bc:32:e5:4a:76:ed:24:4e:a6:08:60:72:c1:9f:71:62: 1e:3c:e9:71:49:e0:d8:27:88:35:5e:72:b5:44:c3:f1:60:89: 86:e6:f5:93:bd:ab:0a:ba:21:f7:22:43:60:06:04:e0:28:0d: 7e:bb:f8:19:f4:52:50:d0:aa:09:6e:4f:17:3f:11:7c:fc:70: 93:5c:4e:bd:f6:6f:8c:c9:65:a2:62:8d:b9:e7:16:80:c7:bf: 49:ad:5c:86:d0:ac:42:ba:7a:62:c0:78:ac:9e:6a:e1:94:17: f8:17:23:3b:8b:c7:e1:29:f4:7e:73:12:9a:7d:b7:61:6b:d5: dd:0c:7e:ef:b8:4a:82:75:1f:11:54:d8:c4:25:70:9d:11:51: 74:42:52:3c:91:a3:d2:07:5a:97:3e:d7:6c:d0:b4:7e:5a:c8: b2:e8:44:bc:b3:83:6b:5b:d0:b8:70:f1:43:7b:b6:2e:ce:d9: 0d:d1:66:f2:90:9f:c3:1d:4d:82:69:af:38:29:45:2a:92:7c: 11:df:bd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplid3cbDX7Z4CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmY3M2ZmOTQtYjM5OC00MjU0LTg1OWYtYjA1NWI3YzMwOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6XRQ44zq3qJYpf3kttXGUoE71RRbQEgLJGt nVfBet8Rgmt9VWBa2STos/Fs9hvb47i6e0HlIfVFgwF07Y2vPXlEUCzo6UV+/BgN 9mky1wRXokDQyxPwZETXjZuDtB7yPsLmC8270LX3h3Hi7d+00hNKI8QQUSw6rZUh Zb2xsEtr5aZEeSoGdHPpaifdZC75GrUTobBJKYJdDl28xgPMQDJu5jtpHN0tDVCW 7fjanTdVydRr8zJ47ixDpd2xgv3IwIfdmtOzK0mdj/nyDl+0DRNcf827NUYeFLbp 13zX4Zd93qStr4aEPd5nyCTLuWYtXYUQ3PUExK4EH6aOcqm8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIrGhCdzIplvbJZ/C/Upw6D+n8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODc5MjFiMjYtM2U0ZC0z YmY1LWI4MmQtOTI2OTIzYzBmNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ3YP1+6H1Sa3HvYZzm9GU0iHK9L22nFAdf7BkQHfFowH2sw86HA0m1 sPWExvp5jyzhzgnDVDRPvDLlSnbtJE6mCGBywZ9xYh486XFJ4NgniDVecrVEw/Fg iYbm9ZO9qwq6IfciQ2AGBOAoDX67+Bn0UlDQqgluTxc/EXz8cJNcTr32b4zJZaJi jbnnFoDHv0mtXIbQrEK6emLAeKyeauGUF/gXIzuLx+Ep9H5zEpp9t2Fr1d0Mfu+4 SoJ1HxFU2MQlcJ0RUXRCUjyRo9IHWpc+12zQtH5ayLLoRLyzg2tb0Lhw8UN7ti7O 2Q3RZvKQn8MdTYJprzgpRSqSfBHfvUY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:54 2025 by rpki-client