$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa File: 27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa (raw, json) Hash identifier: CyjXSa9bnUuSaFEY5aQEwGKU/uP4oa5etJVSTgoxW+E= Subject key identifier: 43:AA:7C:A7:D6:7E:F8:51:18:AB:F2:DD:07:41:70:DD:60:73:60:5A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848F22C5F35B4FB5708D9B7B980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 54994 IP address blocks: 138.113.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5f:35:b4:fb:57:08:d9:b7:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=277f31ee-39e8-4a33-a8b6-bb76c211ca3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:1d:9b:c9:c8:aa:9e:0e:e4:1d:8a:18:40: 09:37:4d:27:c8:8f:45:83:b8:38:2a:72:2f:47:cb: c3:2e:a0:ea:fd:bc:6a:e3:a6:70:8b:d3:b6:f6:4f: 5b:f7:ac:dc:ea:f5:91:ec:0a:d3:07:12:fe:1d:42: f4:f7:b1:37:c3:bb:74:cb:e3:76:bd:02:fa:15:51: d8:35:60:85:46:75:b3:32:20:8f:e3:81:c2:6f:a6: 3f:f4:98:0e:90:c0:0a:4a:8a:bf:fa:74:2d:62:f9: 3b:bf:11:2b:50:f5:08:1e:a1:16:f0:1d:22:f7:f7: de:7c:87:4e:79:bb:d7:92:1d:59:47:08:35:e8:1b: b8:bd:ee:8c:af:ac:83:ef:c8:54:20:18:39:50:62: 14:69:65:f8:ba:62:98:52:20:e7:5f:14:13:2d:90: 5c:74:19:4a:07:7f:54:a2:4a:4d:19:12:85:56:0d: 07:3b:8e:07:12:22:b4:96:78:6c:a3:38:4d:ba:9d: 4e:46:bd:f3:bf:9b:11:65:2c:1f:8f:9e:ae:3c:01: 7c:d4:22:b9:0c:07:24:43:c6:4e:b2:1e:30:14:e9: 95:89:76:88:97:7d:d3:85:13:e0:e6:49:fe:b7:0f: 28:bd:a8:c6:4a:8d:af:d9:46:39:66:51:e6:57:74: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:7C:A7:D6:7E:F8:51:18:AB:F2:DD:07:41:70:DD:60:73:60:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:29:0a:82:b2:67:5b:c2:e7:6e:dc:fc:fb:10:9b:36:40:9e: ea:be:af:0e:a0:f1:97:05:0f:21:41:36:72:39:6d:7b:39:ab: a0:8b:e1:93:8b:93:97:3b:55:a9:b0:ec:71:a8:b4:72:6e:cc: 7a:0d:78:43:e0:1a:87:41:3c:44:dd:b2:7b:c3:9f:2d:7d:5a: 3a:65:56:8f:c8:d6:1f:0a:27:4c:b6:5e:31:14:7b:92:bc:80: eb:cb:db:29:65:1b:9b:87:aa:b4:a6:de:47:10:b6:4a:55:21: 52:e7:20:b9:0a:7d:c1:78:24:83:0b:d3:75:14:53:6e:19:ef: 7a:fa:aa:a0:83:3d:63:61:99:ad:56:7e:2c:e3:c7:8e:47:0d: 4b:95:43:65:50:13:3f:8a:86:2c:a3:b5:5b:d0:c2:50:92:b6: b4:16:5c:59:cf:b7:07:5c:0e:86:06:78:28:1f:0c:69:1d:6e: d4:63:4b:3c:1a:69:cd:51:d5:1c:30:74:9d:38:be:63:46:3c: 48:1a:fb:53:6d:92:58:2b:c6:c9:08:88:a0:d4:00:75:79:11: 8a:0c:e4:fe:18:6a:90:0d:c7:bb:3c:d7:3b:8a:85:dc:2d:21: d5:ab:e9:22:60:b2:fb:cf:aa:ae:33:a1:b3:6e:65:93:a8:63: 23:d5:b3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF81tPtXCNm3uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc3ZjMxZWUtMzllOC00YTMzLWE4YjYtYmI3NmMyMTFjYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU8dm8nIqp4O5B2KGEAJN00nyI9Fg7g4KnIv R8vDLqDq/bxq46Zwi9O29k9b96zc6vWR7ArTBxL+HUL097E3w7t0y+N2vQL6FVHY NWCFRnWzMiCP44HCb6Y/9JgOkMAKSoq/+nQtYvk7vxErUPUIHqEW8B0i9/fefIdO ebvXkh1ZRwg16Bu4ve6Mr6yD78hUIBg5UGIUaWX4umKYUiDnXxQTLZBcdBlKB39U okpNGRKFVg0HO44HEiK0lnhsozhNup1ORr3zv5sRZSwfj56uPAF81CK5DAckQ8ZO sh4wFOmViXaIl33ThRPg5kn+tw8ovajGSo2v2UY5ZlHmV3QGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOqfKfWfvhRGKvy3QdBcN1gc2BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjc2NDljN2MtZDIyYS0z OWQwLWE1ZDYtYzNkYzE4YmMxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcpCoKyZ1vC527c/PsQmzZAnuq+rw6g8ZcFDyFBNnI5bXs5q6CL4ZOL k5c7Vamw7HGotHJuzHoNeEPgGodBPETdsnvDny19WjplVo/I1h8KJ0y2XjEUe5K8 gOvL2yllG5uHqrSm3kcQtkpVIVLnILkKfcF4JIML03UUU24Z73r6qqCDPWNhma1W fizjx45HDUuVQ2VQEz+KhiyjtVvQwlCStrQWXFnPtwdcDoYGeCgfDGkdbtRjSzwa ac1R1RwwdJ04vmNGPEga+1NtklgrxskIiKDUAHV5EYoM5P4YapANx7s81zuKhdwt IdWr6SJgsvvPqq4zobNuZZOoYyPVsz8= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:05 2025 by rpki-client