$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa File: 9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa (raw, json) Hash identifier: j7ApAt5pkT/gNv6GvwNM/qM+GupqdZEDHExq3MDjY5E= Subject key identifier: AF:1E:2D:DE:37:1E:EB:65:C9:E8:DB:DA:1F:23:06:09:8C:89:59:F0 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AD0D6451FE298992115501080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 54994 IP address blocks: 138.113.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:45:1f:e2:98:99:21:15:50:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=6bcf852a-b060-40fc-b0ed-10e63368535a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:0a:c8:39:35:9e:ef:8f:ac:8a:a9:be:0f: 1f:44:d4:ea:02:45:25:f6:08:7e:2d:87:3e:bb:2d: be:8f:50:3d:1e:20:36:cc:df:86:22:d7:c9:e8:d8: d0:dc:de:2f:b4:f4:22:90:dc:bb:60:76:bd:c8:c5: bb:56:44:77:6b:c0:b0:0d:bd:ee:91:78:94:db:2c: be:46:74:9c:6a:d3:90:77:0f:d8:55:92:a4:2c:74: be:82:d3:8b:85:57:92:48:5e:04:fc:1d:d3:9b:64: c1:1c:1a:8e:31:6b:fc:ef:5b:ea:5c:33:50:35:c5: 9f:c1:f0:a2:35:4e:02:0c:3c:b6:00:f2:71:fc:ef: d8:cd:26:d7:4c:a3:9c:32:37:f5:e2:60:d0:f6:c3: 2a:06:d6:6a:60:71:49:d5:31:fd:90:e8:39:9a:77: 65:11:a1:d7:b0:8e:7d:06:36:3b:86:4a:9f:06:71: c7:fe:6e:e0:6d:1c:1b:5c:de:16:ac:06:c5:63:f7: 93:48:d4:7c:6d:09:63:31:c7:be:e9:53:82:5b:cf: 5f:bd:29:99:33:78:4d:32:2f:27:78:c8:0a:e4:e5: 2a:3c:9e:86:5c:81:6f:21:c3:d3:51:36:78:7b:7c: 2b:fa:84:91:47:d1:2e:f1:16:ec:7f:34:3d:de:09: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:2D:DE:37:1E:EB:65:C9:E8:DB:DA:1F:23:06:09:8C:89:59:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7a:ad:2b:fa:fa:ff:99:d4:c7:79:69:0c:ac:71:a0:fc:88: 0c:2d:75:a0:ea:9d:ee:e5:06:4a:8e:a3:1a:6c:0a:5c:1a:b1: ac:80:1f:9b:2e:6b:7c:e6:9c:bb:45:c9:c7:68:d2:a7:a2:80: d3:d8:d5:2c:f8:11:7f:ba:96:c8:7f:14:19:9b:18:70:2c:95: 05:d3:0c:40:06:d2:2e:4d:d9:30:5d:7c:2b:b8:17:8f:f4:35: 40:dc:c0:41:39:88:35:77:fa:43:75:a2:12:8a:a9:2b:97:01: ad:a2:62:cf:10:08:0e:f4:4c:68:01:91:87:a2:37:6a:72:9d: 7a:16:4b:0a:7d:2d:f1:81:ab:26:85:a3:ad:08:fe:aa:be:54: 23:f1:95:fc:a1:e4:6d:4f:94:32:10:af:94:79:46:2c:a8:f4: 33:d1:1d:48:22:c9:f0:cc:10:d1:ef:7d:e6:72:51:ee:ea:56: cc:54:33:1e:b2:97:4c:aa:18:24:16:ef:cb:ec:73:e7:45:90: 3a:e8:a3:18:78:d4:98:e8:e1:6b:d2:e1:7e:8e:6c:60:af:47: 19:71:3e:42:d3:f0:0e:6d:b9:0d:91:9e:ce:fe:ff:e1:8e:ee: 08:69:ce:ff:3f:dd:49:66:62:35:5a:7e:f2:0e:cf:52:d3:56: ff:a0:95:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kUf4piZIRVQEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NmJjZjg1MmEtYjA2MC00MGZjLWIwZWQtMTBlNjMzNjg1MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQKyDk1nu+PrIqpvg8fRNTqAkUl9gh+LYc+ uy2+j1A9HiA2zN+GItfJ6NjQ3N4vtPQikNy7YHa9yMW7VkR3a8CwDb3ukXiU2yy+ RnScatOQdw/YVZKkLHS+gtOLhVeSSF4E/B3Tm2TBHBqOMWv871vqXDNQNcWfwfCi NU4CDDy2APJx/O/YzSbXTKOcMjf14mDQ9sMqBtZqYHFJ1TH9kOg5mndlEaHXsI59 BjY7hkqfBnHH/m7gbRwbXN4WrAbFY/eTSNR8bQljMce+6VOCW89fvSmZM3hNMi8n eMgK5OUqPJ6GXIFvIcPTUTZ4e3wr+oSRR9Eu8RbsfzQ93glAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8eLd43Hutlyejb2h8jBgmMiVnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOWJkZGQ5OTctZWIyMS0z ZTVmLWIyOWMtN2VkYTlmYzA5YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG96rSv6+v+Z1Md5aQyscaD8iAwtdaDqne7lBkqOoxpsClwasayAH5su a3zmnLtFycdo0qeigNPY1Sz4EX+6lsh/FBmbGHAslQXTDEAG0i5N2TBdfCu4F4/0 NUDcwEE5iDV3+kN1ohKKqSuXAa2iYs8QCA70TGgBkYeiN2pynXoWSwp9LfGBqyaF o60I/qq+VCPxlfyh5G1PlDIQr5R5Riyo9DPRHUgiyfDMENHvfeZyUe7qVsxUMx6y l0yqGCQW78vsc+dFkDrooxh41Jjo4WvS4X6ObGCvRxlxPkLT8A5tuQ2Rns7+/+GO 7ghpzv8/3UlmYjVafvIOz1LTVv+glQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:10:10 2025 by rpki-client