$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: 6o1cvQYj07vJ8siUEgrs4gvExXbvjf3Ewwv6sUMZuyA= Subject key identifier: E7:D8:CB:97:78:90:FA:95:03:4B:2B:23:53:73:C4:74:C0:87:19:19 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AD0D643790BF0051A84CA9080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:43:79:0b:f0:05:1a:84:ca:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=04763bb7-e699-4852-a7ce-355d3f615181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:f4:2b:04:49:32:1f:6e:04:d5:bf:da:20: 25:04:94:a7:91:8d:7d:7b:41:0a:86:f2:14:3f:cc: ed:af:d2:cb:cf:c4:e4:ce:04:30:2b:73:58:c8:dc: 42:b8:33:ae:5a:37:b3:ea:a9:7c:99:3c:49:27:31: 2c:7e:5e:38:f8:31:f3:1b:db:12:bf:2a:34:f5:14: 5c:de:dd:3a:82:7d:9a:18:78:5c:0a:23:77:5b:31: b4:c7:9a:05:6d:11:0e:f7:a7:7e:f0:e8:ec:17:59: 64:f4:9b:66:08:c7:54:a1:28:34:18:69:9b:1d:c1: ef:9a:16:f2:ff:14:18:68:d3:a1:0c:2f:13:41:b2: 79:41:dc:7f:95:d7:83:f8:00:8e:b1:47:5f:c2:92: 18:ac:ad:cb:24:c8:ff:88:4e:0b:b4:47:e0:37:ac: bf:d2:86:98:14:b6:8a:6f:4e:29:47:94:94:74:40: f0:c7:54:58:43:05:ee:1c:af:ea:27:4a:65:15:df: 7e:6a:f5:7a:21:27:69:2e:c2:55:3d:46:31:e2:f1: 1d:57:22:ac:7f:e7:44:8f:18:98:44:10:78:11:5a: 4d:80:fa:b3:16:e9:53:67:40:79:3c:4e:ef:86:d1: 79:0b:04:24:81:6c:a2:5f:45:cc:ac:d7:86:d9:23: ad:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:CB:97:78:90:FA:95:03:4B:2B:23:53:73:C4:74:C0:87:19:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:30:37:ee:44:2c:51:61:88:25:4e:53:f9:8d:36:0b:9d:4b: 1b:70:b6:da:91:df:15:b8:8b:25:28:8d:80:be:6a:60:7a:ae: 68:f5:96:ee:57:1f:95:74:e5:07:64:59:8a:01:da:76:c8:53: af:e2:1e:bb:e0:cc:b1:e1:72:da:2e:d0:7e:f2:2b:ed:1e:9e: 25:71:b5:fb:e6:00:62:2a:28:0c:87:79:f1:26:ae:04:1e:cd: e7:e4:86:0c:3d:4f:f0:06:5f:03:8b:51:eb:c3:d2:47:43:c6: c8:48:64:82:61:a9:63:d3:10:bd:fd:e9:a9:51:89:41:e8:9c: b7:2d:fc:ee:19:f3:fe:ad:09:d6:3c:cf:21:d5:4f:ce:ce:05: 3d:84:6e:74:be:b3:94:41:c9:76:93:c6:7f:a7:0f:85:81:33: 75:f8:60:5a:2e:26:a5:87:43:1f:3c:4f:bc:9c:05:43:81:6a: bf:03:e0:95:af:b0:5e:02:a7:04:17:91:7d:61:49:f1:e7:99: af:72:fb:16:68:88:4a:cf:ba:a7:b7:ce:df:f1:6a:a7:37:1e: b6:a3:2a:85:f1:a2:7b:6e:e9:b3:c7:68:ca:62:eb:d1:56:6d: d3:1b:58:85:46:80:7a:7f:92:17:29:05:0f:d1:0a:18:ce:39: 01:6e:ac:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kN5C/AFGoTKkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MDQ3NjNiYjctZTY5OS00ODUyLWE3Y2UtMzU1ZDNmNjE1MTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzz0KwRJMh9uBNW/2iAlBJSnkY19e0EKhvIU P8ztr9LLz8TkzgQwK3NYyNxCuDOuWjez6ql8mTxJJzEsfl44+DHzG9sSvyo09RRc 3t06gn2aGHhcCiN3WzG0x5oFbREO96d+8OjsF1lk9JtmCMdUoSg0GGmbHcHvmhby /xQYaNOhDC8TQbJ5Qdx/ldeD+ACOsUdfwpIYrK3LJMj/iE4LtEfgN6y/0oaYFLaK b04pR5SUdEDwx1RYQwXuHK/qJ0plFd9+avV6ISdpLsJVPUYx4vEdVyKsf+dEjxiY RBB4EVpNgPqzFulTZ0B5PE7vhtF5CwQkgWyiX0XMrNeG2SOtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfYy5d4kPqVA0srI1NzxHTAhxkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIwN+5ELFFhiCVOU/mNNgudSxtwttqR3xW4iyUojYC+amB6rmj1lu5X H5V05QdkWYoB2nbIU6/iHrvgzLHhctou0H7yK+0eniVxtfvmAGIqKAyHefEmrgQe zefkhgw9T/AGXwOLUevD0kdDxshIZIJhqWPTEL396alRiUHonLct/O4Z8/6tCdY8 zyHVT87OBT2EbnS+s5RByXaTxn+nD4WBM3X4YFouJqWHQx88T7ycBUOBar8D4JWv sF4CpwQXkX1hSfHnma9y+xZoiErPuqe3zt/xaqc3HrajKoXxontu6bPHaMpi69FW bdMbWIVGgHp/khcpBQ/RChjOOQFurKA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:54:41 2025 by rpki-client