$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa File: f5643093-be3f-3931-b854-e93e480f3970.roa (raw, json) Hash identifier: bdnk5k9BOMvLvkqMAdEWAMAl7Ejj0m7BgCeyV25q+80= Subject key identifier: 6E:2A:84:58:11:01:4E:52:93:E2:18:B5:A3:14:93:15:5C:71:03:80 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849A94BEE5670506A7AE3262200 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa Signing time: Sun 27 Apr 2025 04:18:26 +0000 ROA not before: Sun 27 Apr 2025 04:18:26 +0000 ROA not after: Sat 26 Jul 2025 04:18:26 +0000 asID: 54994 IP address blocks: 138.113.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:4b:ee:56:70:50:6a:7a:e3:26:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 27 04:18:26 2025 GMT Not After : Jul 26 04:18:26 2025 GMT Subject: CN=45b28f03-c6b7-487c-8e75-3f3c0089b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:3f:79:fb:1f:c4:62:cb:75:fb:fc:49:91: 43:0a:aa:ad:73:12:a6:7e:f5:04:8c:d9:bd:84:67: 84:4a:ff:a2:a5:9e:61:7f:2a:12:c2:40:11:42:c0: cd:8f:ba:c4:9b:f9:9d:56:af:0f:3c:fe:fe:72:33: 08:27:26:a7:3e:c6:7a:57:fb:5c:3e:a4:27:af:0b: 6c:79:2d:4a:c7:e5:40:71:b3:34:0f:28:18:80:c5: 29:49:1d:5c:59:47:13:d3:69:0d:30:09:d9:7b:8f: b8:7b:7a:46:f1:b4:9d:65:13:1a:aa:99:cf:26:9a: ff:3b:74:db:20:47:6d:7f:ea:5d:2e:88:ff:66:14: 21:6a:87:53:6c:50:00:89:62:e1:1f:25:95:b0:77: ce:c2:3a:8d:e2:0b:ac:41:4a:e6:09:75:1f:df:42: b3:aa:3a:30:95:ca:1b:cb:7c:21:56:1d:5c:d5:b5: 43:8f:64:40:95:38:de:55:ce:14:c4:ab:12:7c:ea: 81:8c:53:fa:0a:60:dc:a0:cc:0c:70:b7:35:9e:14: 9a:65:dd:e9:82:16:9f:67:25:11:a0:68:25:f4:15: e5:d1:4d:25:ca:39:87:70:3c:e1:36:70:5f:06:03: 11:49:35:dd:61:91:e5:07:83:2c:2f:1d:a0:ea:71: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:84:58:11:01:4E:52:93:E2:18:B5:A3:14:93:15:5C:71:03:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:82:24:25:2e:fb:5a:29:d8:98:a1:fe:0c:b4:5f:85:5d: ce:b9:ea:d6:16:50:7b:86:7d:74:07:90:58:48:38:d8:e3:33: 59:7f:d2:df:51:a8:bc:5e:58:f7:ca:29:1b:91:fd:eb:7d:2c: 87:0c:41:f0:e1:89:fc:3f:0d:43:64:e9:80:d5:d7:d7:5d:02: e3:b1:c9:88:8b:f8:2b:88:f6:09:88:b1:31:cb:c4:6d:58:af: f2:c4:fb:88:1c:29:5b:00:ff:1a:93:59:af:69:d0:8e:17:65: 5b:be:0b:75:7d:9d:a4:ea:73:b1:ce:14:3f:1e:70:e4:79:69: 8a:a2:05:7f:35:9b:8e:49:0c:31:eb:ae:2c:5d:b7:37:a9:14: 72:8e:c7:87:8e:ff:da:70:57:09:41:62:95:ea:63:33:42:71: 5c:0e:14:97:44:30:b5:cf:c1:a6:ee:18:c5:74:1c:10:21:e3: 03:56:fa:39:f6:95:34:23:7e:ce:da:41:48:97:37:35:29:5e: 14:ee:cc:f2:41:ad:f8:45:7c:3c:0b:94:4a:5f:2a:2d:9f:e1: 9c:1f:57:ec:f6:6a:7f:d3:d5:0c:d4:2a:0c:65:3a:50:22:30: bb:fe:a2:df:bc:9f:eb:45:47:46:a2:ab:d6:f3:3e:ee:4f:fb: 2b:86:b5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmpS+5WcFBqeuMmIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDQyNzA0MTgyNloXDTI1MDcyNjA0MTgyNlowLzEtMCsGA1UEAxMk NDViMjhmMDMtYzZiNy00ODdjLThlNzUtM2YzYzAwODliODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZY/efsfxGLLdfv8SZFDCqqtcxKmfvUEjNm9 hGeESv+ipZ5hfyoSwkARQsDNj7rEm/mdVq8PPP7+cjMIJyanPsZ6V/tcPqQnrwts eS1Kx+VAcbM0DygYgMUpSR1cWUcT02kNMAnZe4+4e3pG8bSdZRMaqpnPJpr/O3Tb IEdtf+pdLoj/ZhQhaodTbFAAiWLhHyWVsHfOwjqN4gusQUrmCXUf30Kzqjowlcob y3whVh1c1bVDj2RAlTjeVc4UxKsSfOqBjFP6CmDcoMwMcLc1nhSaZd3pghafZyUR oGgl9BXl0U0lyjmHcDzhNnBfBgMRSTXdYZHlB4MsLx2g6nH7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4qhFgRAU5Sk+IYtaMUkxVccQOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjU2NDMwOTMtYmUzZi0z OTMxLWI4NTQtZTkzZTQ4MGYzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM8giQlLvtaKdiYof4MtF+FXc656tYWUHuGfXQHkFhIONjjM1l/0t9R qLxeWPfKKRuR/et9LIcMQfDhifw/DUNk6YDV19ddAuOxyYiL+CuI9gmIsTHLxG1Y r/LE+4gcKVsA/xqTWa9p0I4XZVu+C3V9naTqc7HOFD8ecOR5aYqiBX81m45JDDHr rixdtzepFHKOx4eO/9pwVwlBYpXqYzNCcVwOFJdEMLXPwabuGMV0HBAh4wNW+jn2 lTQjfs7aQUiXNzUpXhTuzPJBrfhFfDwLlEpfKi2f4ZwfV+z2an/T1QzUKgxlOlAi MLv+ot+8n+tFR0aiq9bzPu5P+yuGtTk= -----END CERTIFICATE-----Generated at Sat May 10 10:25:35 2025 by rpki-client