$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa File: fad7cd94-3e4e-3057-99e9-06d40e467d37.roa (raw, json) Hash identifier: xOb4icB5MWCbfEXg0HiY9FwMQvbz8KFs6YUZXVZwd4s= Subject key identifier: CC:74:69:78:F5:3E:2A:E1:3F:66:2E:31:06:6B:80:63:B4:22:C3:AD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AE032127BE77C3C98C10CE5E0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 54994 IP address blocks: 138.113.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:12:7b:e7:7c:3c:98:c1:0c:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=bc6eb052-9671-4eef-913a-4a9b1eaf1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:dc:85:a5:85:28:f5:6b:c5:31:0a:a8:b7: a8:88:92:9f:7a:ef:d7:39:79:a4:da:a6:99:99:bc: 26:2c:e9:8f:43:26:78:93:e0:1b:a1:24:80:12:26: 9e:88:f4:0c:4c:45:53:32:79:d6:5d:33:45:08:9c: e2:60:33:1f:9b:d2:15:74:2b:0f:f8:af:87:e8:bc: 53:e3:7c:5b:5a:81:b6:0f:75:73:15:4d:38:5e:d6: ec:bb:ae:84:3e:27:27:e7:e9:9c:f7:f1:9a:f9:1e: dc:3a:de:52:49:f7:ab:46:db:27:5c:b0:49:2a:ce: 93:03:9f:6d:d6:09:27:09:73:65:74:0b:48:1d:63: 95:a7:36:87:94:6d:8e:42:5b:e2:be:28:9c:35:a9: fd:bb:38:13:0a:2c:ed:c5:14:9b:eb:c4:20:f9:43: d0:91:2a:f1:04:05:45:6d:7e:b3:d6:70:50:fe:14: 36:c8:a3:29:30:e0:be:aa:8c:15:eb:80:17:99:58: 3b:13:af:13:2d:78:68:6f:e9:06:77:07:50:6e:a6: 61:90:03:ae:b5:28:ca:d9:1b:56:4a:d2:50:0d:6c: 56:78:12:ea:9c:3f:fc:80:3a:df:27:7c:6b:10:0b: 0d:1f:22:8f:46:33:3e:98:78:83:cc:1e:04:ab:2c: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:74:69:78:F5:3E:2A:E1:3F:66:2E:31:06:6B:80:63:B4:22:C3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:02:e5:0d:8f:d9:8f:27:b5:fb:dd:af:8a:e5:81:50:03:fb: 36:bc:02:e9:42:1f:b7:79:78:0f:4f:98:6e:e4:00:3a:07:6c: ab:76:4e:c6:8c:70:fc:74:b8:63:e7:25:c7:27:58:5c:4e:76: 3a:78:7c:f2:0f:78:4a:d1:0d:01:86:f1:19:c0:d6:28:e6:8e: 19:6f:b1:4c:39:a4:c3:23:67:02:da:05:56:ed:e7:1b:85:ae: 98:50:6a:fe:6d:de:cd:e0:b7:9d:cd:49:d7:21:80:59:3c:43: 97:28:1b:9a:02:ab:1a:d7:ce:e5:d3:42:4d:59:d8:64:60:e8: 82:19:31:7d:57:f9:2f:ba:b8:59:89:37:76:35:b9:7d:89:83: 8c:f4:ac:c4:d3:24:3b:a2:bd:a2:c1:96:30:39:55:60:52:de: e1:5a:51:56:1a:ad:d6:eb:02:88:5d:97:16:6b:58:de:d4:61: 8f:73:3f:15:01:32:cd:83:53:01:90:10:d6:46:b4:8e:9d:13: b0:8e:5a:87:78:2e:71:84:2d:5b:59:e5:63:04:1d:a8:b9:d8: 28:4b:06:39:76:b3:65:63:63:ec:35:9f:80:b3:1c:cd:eb:c1: d6:c8:7e:75:9e:ae:82:fa:03:7a:48:f5:e1:1b:2f:f0:9b:ba: 4a:42:79:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMhJ753w8mMEM5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YmM2ZWIwNTItOTY3MS00ZWVmLTkxM2EtNGE5YjFlYWYxY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/vchaWFKPVrxTEKqLeoiJKfeu/XOXmk2qaZ mbwmLOmPQyZ4k+AboSSAEiaeiPQMTEVTMnnWXTNFCJziYDMfm9IVdCsP+K+H6LxT 43xbWoG2D3VzFU04Xtbsu66EPicn5+mc9/Ga+R7cOt5SSferRtsnXLBJKs6TA59t 1gknCXNldAtIHWOVpzaHlG2OQlviviicNan9uzgTCiztxRSb68Qg+UPQkSrxBAVF bX6z1nBQ/hQ2yKMpMOC+qowV64AXmVg7E68TLXhob+kGdwdQbqZhkAOutSjK2RtW StJQDWxWeBLqnD/8gDrfJ3xrEAsNHyKPRjM+mHiDzB4EqywqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx0aXj1PirhP2YuMQZrgGO0IsOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZmFkN2NkOTQtM2U0ZS0z MDU3LTk5ZTktMDZkNDBlNDY3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsC5Q2P2Y8ntfvdr4rlgVAD+za8AulCH7d5eA9PmG7kADoHbKt2TsaM cPx0uGPnJccnWFxOdjp4fPIPeErRDQGG8RnA1ijmjhlvsUw5pMMjZwLaBVbt5xuF rphQav5t3s3gt53NSdchgFk8Q5coG5oCqxrXzuXTQk1Z2GRg6IIZMX1X+S+6uFmJ N3Y1uX2Jg4z0rMTTJDuivaLBljA5VWBS3uFaUVYardbrAohdlxZrWN7UYY9zPxUB Ms2DUwGQENZGtI6dE7COWod4LnGELVtZ5WMEHai52ChLBjl2s2VjY+w1n4CzHM3r wdbIfnWeroL6A3pI9eEbL/CbukpCeV0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:56:09 2025 by rpki-client