$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa File: 19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa (raw, json) Hash identifier: aNFuPLUe0GigJLMZyN9rO+n1w4NgU0M4iDcscVDDwPU= Subject key identifier: B9:55:B0:47:01:84:9B:41:75:F8:44:31:5B:45:A3:A2:5A:51:FD:E6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F432858493ED3D6AF1D38B214C4B01000 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 54994 IP address blocks: 138.113.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d6:af:1d:38:b2:14:c4:b0:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=5274063e-9232-4648-9b46-bb4f43dc35dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:82:7f:a0:d9:11:f9:4a:69:47:18:ae:c1: fe:02:24:49:aa:fd:fe:08:f9:fb:3e:ae:d6:42:5a: 54:6d:2f:9a:de:a0:ee:cb:51:71:ba:41:23:f9:bc: b4:47:f9:2c:0b:7f:8a:17:d3:78:4f:a1:a0:3d:27: a8:75:63:d6:44:e4:42:0b:d5:37:93:75:24:87:f1: 92:b6:2f:5c:d5:c1:61:e9:fc:72:67:09:f0:63:aa: 27:43:92:ef:f9:3f:30:03:25:7c:61:56:9b:82:74: 6f:33:ba:38:5c:07:38:57:d4:59:32:7a:59:65:d9: 37:d3:1a:47:d3:0b:bf:e4:73:cd:67:7b:16:a7:32: 7a:d7:19:64:42:71:32:36:39:5b:a8:f6:be:0c:15: 19:fb:18:e3:5b:6a:ae:79:8b:4f:90:03:34:e0:7a: fc:cf:73:d1:bf:d9:be:46:a1:f7:66:91:23:c0:10: 29:75:f7:0e:4a:1d:33:fc:5c:41:8c:31:09:e4:67: 31:44:19:d3:b8:18:52:86:f8:54:d9:bc:31:b8:24: 6e:d7:67:06:0b:97:2a:c0:76:e5:18:fd:d0:8f:48: 44:1e:43:aa:75:1b:c1:81:d0:7b:d8:e9:84:53:30: 6c:c8:8b:7a:f1:b9:76:1f:dd:19:e9:97:a3:00:fb: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:B0:47:01:84:9B:41:75:F8:44:31:5B:45:A3:A2:5A:51:FD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8b:01:a8:7c:54:00:a1:ed:fa:f6:bf:7f:ea:02:fe:e2:69: ae:30:58:38:01:8c:62:ee:68:e1:35:14:58:14:52:2c:b3:93: 6f:e1:7d:8c:24:08:7d:f4:bd:5a:ae:2f:c9:b7:de:0d:ad:dd: 3d:7e:51:51:a3:4c:7a:74:a9:27:11:3f:a2:8b:b6:cd:6e:a6: fb:94:7d:fb:22:8b:b4:92:f7:95:ad:89:0e:37:88:bd:24:3f: f2:f3:3b:00:5e:cc:df:67:6d:c6:f9:f2:9b:3f:72:c0:bf:85: c8:1b:e9:77:aa:cd:69:2f:b9:04:45:e5:15:5a:71:aa:25:e0: 17:2c:df:d8:ba:57:2b:d2:21:5e:25:60:d6:21:14:cc:01:98: fd:36:c8:61:99:3e:21:b6:de:d3:1b:f0:c3:d1:c4:d8:fe:08: 96:fb:ff:2b:6f:d6:0e:ab:c4:d7:55:d4:f9:56:fd:9a:a0:df: ef:2c:7e:ba:61:8f:b5:89:a2:36:ef:9e:97:4b:bf:b9:16:4a: 5c:ad:d2:cb:5d:c5:d5:65:12:19:ed:74:34:00:83:9d:a8:d2: f7:5d:6b:9b:aa:4a:5a:65:5a:56:cc:e2:91:ab:10:3d:b8:25: 25:ce:c5:20:c6:46:e4:79:1c:cb:39:4b:d0:28:3f:98:89:df: da:5d:61:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09avHTiyFMSwEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NTI3NDA2M2UtOTIzMi00NjQ4LTliNDYtYmI0ZjQzZGMzNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqOCf6DZEflKaUcYrsH+AiRJqv3+CPn7Pq7W QlpUbS+a3qDuy1FxukEj+by0R/ksC3+KF9N4T6GgPSeodWPWRORCC9U3k3Ukh/GS ti9c1cFh6fxyZwnwY6onQ5Lv+T8wAyV8YVabgnRvM7o4XAc4V9RZMnpZZdk30xpH 0wu/5HPNZ3sWpzJ61xlkQnEyNjlbqPa+DBUZ+xjjW2queYtPkAM04Hr8z3PRv9m+ RqH3ZpEjwBApdfcOSh0z/FxBjDEJ5GcxRBnTuBhShvhU2bwxuCRu12cGC5cqwHbl GP3Qj0hEHkOqdRvBgdB72OmEUzBsyIt68bl2H90Z6ZejAPt1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlVsEcBhJtBdfhEMVtFo6JaUf3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTk0NDhlYWEtZTBmOC0z MmQ0LTg1NWYtYmMyZjkwM2M0YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWLAah8VACh7fr2v3/qAv7iaa4wWDgBjGLuaOE1FFgUUiyzk2/hfYwk CH30vVquL8m33g2t3T1+UVGjTHp0qScRP6KLts1upvuUffsii7SS95WtiQ43iL0k P/LzOwBezN9nbcb58ps/csC/hcgb6XeqzWkvuQRF5RVacaol4Bcs39i6VyvSIV4l YNYhFMwBmP02yGGZPiG23tMb8MPRxNj+CJb7/ytv1g6rxNdV1PlW/Zqg3+8sfrph j7WJojbvnpdLv7kWSlyt0stdxdVlEhntdDQAg52o0vdda5uqSlplWlbM4pGrED24 JSXOxSDGRuR5HMs5S9AoP5iJ39pdYRg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:43 2025 by rpki-client