$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa File: 919695ea-4fb8-3d6b-a522-e72feddea0c8.roa (raw, json) Hash identifier: hZcNtJ0KTX6rtafo9xZtJW7LEbKuAQPoM/qCxfHH9EQ= Subject key identifier: E3:0E:00:70:49:DD:62:35:1E:D0:44:B8:FB:04:BE:6B:37:90:11:90 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AE89131E21DE4DB026B3171C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 54994 IP address blocks: 138.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:31:e2:1d:e4:db:02:6b:31:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=e1c30083-d034-4331-9d5e-7e963a4e09e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:0b:bb:04:2a:88:ba:9e:f9:87:ae:69:61: 48:f1:ec:76:cb:3d:4c:88:ec:e3:2c:aa:c5:f8:1a: df:f4:12:3c:9b:d2:c6:88:e1:f8:db:ec:79:69:b3: 85:61:5f:5d:4e:ce:b3:52:99:b8:15:dd:32:a2:4e: b9:11:1b:ca:19:03:0c:8a:39:02:9c:b0:d8:b5:bc: 54:6b:46:ad:02:fa:72:83:86:7e:ce:c1:28:72:22: 48:ed:17:7e:5d:1c:61:09:bd:71:b0:bd:49:08:43: 8c:9a:b5:b0:8c:f8:63:b7:1f:ac:62:39:51:b7:28: ff:d1:23:40:6e:74:9b:53:35:1c:e6:dc:9b:c6:89: ca:b9:1e:c2:02:df:8f:c5:d0:14:60:12:e8:b1:d3: 9e:7c:f5:d4:e0:26:1e:dd:de:f1:88:5d:54:a0:71: 4a:ed:37:c3:57:d3:5a:e1:d5:f9:f1:a0:ae:8f:6d: 32:6d:cb:c7:38:83:a7:85:53:7b:b9:29:67:c9:1a: 12:db:85:41:ce:a2:30:aa:bb:96:6b:7a:0e:b1:7c: ed:57:bf:1d:95:56:b4:f0:05:84:a1:b0:57:2e:98: 8b:e8:f2:bd:7f:cf:d5:46:63:6b:d8:ca:e7:dc:da: 06:de:e8:cc:f7:78:57:5c:9e:d8:ac:8d:de:ff:4d: d2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:00:70:49:DD:62:35:1E:D0:44:B8:FB:04:BE:6B:37:90:11:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:eb:f6:d4:05:79:2c:a3:8c:c5:be:6d:5e:31:76:25:e1:ef: 3c:63:5d:ac:a1:5e:c5:83:44:7a:8d:32:42:34:44:13:7a:2e: c8:f8:cb:58:91:c7:80:74:15:8e:74:28:2b:6f:6d:b2:26:42: 30:2b:41:43:9d:74:de:09:6a:72:19:4a:e0:b6:44:79:1e:93: db:43:f6:bd:ad:c8:25:54:8f:22:6a:8c:e9:67:1d:83:51:f0: 0b:6a:12:c0:ea:33:d8:7e:ae:83:0c:33:a2:ee:4b:30:6d:5c: b9:cf:ae:4e:f9:84:29:72:6f:71:56:ed:63:bc:49:f3:95:8d: 65:3e:71:f6:06:9a:e8:e1:b8:1f:b3:ad:6f:03:9b:5a:16:97: 8a:9a:87:95:7b:d7:29:ff:55:4c:9c:79:e9:9e:8f:03:45:54: 0f:4c:28:5d:e9:ed:b0:28:15:9d:82:82:ee:c6:6e:03:4c:42: ed:5a:dc:d8:a8:61:ea:79:8a:b9:ee:74:2a:e7:bc:42:43:64: 97:71:be:29:96:65:03:ab:72:15:cc:c0:4d:59:93:a8:d4:3a: cc:5e:82:39:ec:f8:dc:be:20:6b:b2:a9:d2:b4:15:28:50:7b: 0a:b3:28:a9:8f:44:26:c5:01:dd:99:d9:3b:f5:3e:db:b3:3b: 03:40:94:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTHiHeTbAmsxccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTFjMzAwODMtZDAzNC00MzMxLTlkNWUtN2U5NjNhNGUwOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzsLuwQqiLqe+YeuaWFI8ex2yz1MiOzjLKrF +Brf9BI8m9LGiOH42+x5abOFYV9dTs6zUpm4Fd0yok65ERvKGQMMijkCnLDYtbxU a0atAvpyg4Z+zsEociJI7Rd+XRxhCb1xsL1JCEOMmrWwjPhjtx+sYjlRtyj/0SNA bnSbUzUc5tybxonKuR7CAt+PxdAUYBLosdOefPXU4CYe3d7xiF1UoHFK7TfDV9Na 4dX58aCuj20ybcvHOIOnhVN7uSlnyRoS24VBzqIwqruWa3oOsXztV78dlVa08AWE obBXLpiL6PK9f8/VRmNr2Mrn3NoG3ujM93hXXJ7YrI3e/03SlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMOAHBJ3WI1HtBEuPsEvms3kBGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTE5Njk1ZWEtNGZiOC0z ZDZiLWE1MjItZTcyZmVkZGVhMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrr9tQFeSyjjMW+bV4xdiXh7zxjXayhXsWDRHqNMkI0RBN6Lsj4y1iR x4B0FY50KCtvbbImQjArQUOddN4JanIZSuC2RHkek9tD9r2tyCVUjyJqjOlnHYNR 8AtqEsDqM9h+roMMM6LuSzBtXLnPrk75hClyb3FW7WO8SfOVjWU+cfYGmujhuB+z rW8Dm1oWl4qah5V71yn/VUyceemejwNFVA9MKF3p7bAoFZ2Cgu7GbgNMQu1a3Nio Yep5irnudCrnvEJDZJdxvimWZQOrchXMwE1Zk6jUOsxegjns+Ny+IGuyqdK0FShQ ewqzKKmPRCbFAd2Z2Tv1PtuzOwNAlBI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:07 2025 by rpki-client