$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa File: 34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa (raw, json) Hash identifier: wpMtdno8Lrx+XBj9MznAdOJDcKD5tT9g8NZvRitilkE= Subject key identifier: 66:7C:4D:AD:79:54:41:A2:9D:B2:FF:9B:E5:F6:FE:1A:26:E6:17:FC Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584A6DBB4957B7E87A8D49DF8780 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 54994 IP address blocks: 138.113.11.0/24 maxlen: 24 138.113.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:49:57:b7:e8:7a:8d:49:df:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=c7ecebf1-d0cc-49c4-9b7d-52cb36ca1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:20:43:96:79:ea:b7:2c:1b:fb:d3:04:70: e2:84:7b:bd:2c:eb:84:23:50:83:15:f2:06:0f:50: ca:40:99:db:c6:62:6b:bd:75:86:e1:ce:5e:58:d2: 01:f5:a9:e4:08:08:47:e6:8e:ea:50:b8:ba:81:31: 0c:c6:49:4e:1c:45:ce:ed:04:3c:ab:22:c5:65:fb: ae:a8:26:8c:00:ee:8e:a1:f8:d6:76:f8:f6:64:29: d6:d2:f8:1c:9b:3a:11:39:0e:77:93:ad:d3:c6:e4: e9:2e:0c:5d:68:93:cd:b1:c5:fc:01:49:56:00:72: 36:da:5e:a4:e9:e4:a2:38:58:b5:a7:da:21:9e:61: dd:43:4c:cc:62:a1:36:36:aa:21:61:a7:20:d0:d8: ba:2b:86:b1:71:e0:5a:81:90:1f:c4:59:32:39:73: 52:a1:eb:99:bb:19:3a:00:94:d1:24:b4:a8:fc:8c: 64:55:09:21:a6:2f:7a:42:4e:7a:f3:47:81:33:42: a3:c9:64:31:c8:50:be:89:56:d5:d4:d0:75:7e:5f: 01:29:bf:f9:0c:31:f7:83:f5:b8:ec:04:f8:e1:4b: 9c:4e:e9:a2:e0:cd:a5:b8:17:a8:44:66:8e:62:59: 82:f8:fe:17:d1:ef:2d:47:f0:0c:96:3d:6f:52:9d: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:4D:AD:79:54:41:A2:9D:B2:FF:9B:E5:F6:FE:1A:26:E6:17:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.11.0/24 138.113.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b6:58:55:9d:b3:a4:e7:69:e3:9f:6e:b7:a1:8a:32:48:20: 7d:16:94:9a:bb:94:96:2c:fa:de:98:c2:63:33:bb:0a:e2:91: 36:2a:14:fd:3b:38:36:ae:86:26:b6:fa:b2:32:86:1d:7e:6e: dc:70:ff:1a:97:8d:27:b2:4f:2e:e2:69:9d:29:f5:89:71:58: 11:c3:7a:81:91:13:f1:ad:73:30:40:cf:3c:d4:be:55:ca:e3: b3:f8:9c:67:10:a4:3c:f2:26:8c:7d:b0:c3:fe:bf:4b:49:69: 65:28:5d:2f:52:6f:9a:62:81:c3:20:c6:e0:0c:61:ed:ea:31: 9f:7b:43:63:3d:7d:5f:73:a8:3f:0a:95:63:27:52:e5:36:53: 9b:19:84:7a:31:b9:9c:41:93:75:87:dd:1a:0d:7d:14:48:dc: f0:c9:ea:e1:4a:96:90:ce:46:16:37:cc:30:25:5a:55:e4:98: 72:d2:f5:58:1f:35:9f:90:b6:59:1f:5f:e7:7b:58:76:9a:e9: a0:2b:76:bb:a3:5e:c4:3d:2e:7c:ec:f0:80:b8:d0:f3:25:20: fd:fd:f2:f1:e6:2d:7c:19:59:c7:9f:0c:1a:20:ec:e0:fc:11: 71:40:17:17:3e:ad:3c:06:43:08:ca:9a:52:3e:05:49:28:0b: e5:04:3e:16 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEptu0lXt+h6jUnfh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk YzdlY2ViZjEtZDBjYy00OWM0LTliN2QtNTJjYjM2Y2ExYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8gQ5Z56rcsG/vTBHDihHu9LOuEI1CDFfIG D1DKQJnbxmJrvXWG4c5eWNIB9ankCAhH5o7qULi6gTEMxklOHEXO7QQ8qyLFZfuu qCaMAO6OofjWdvj2ZCnW0vgcmzoROQ53k63TxuTpLgxdaJPNscX8AUlWAHI22l6k 6eSiOFi1p9ohnmHdQ0zMYqE2NqohYacg0Ni6K4axceBagZAfxFkyOXNSoeuZuxk6 AJTRJLSo/IxkVQkhpi96Qk5680eBM0KjyWQxyFC+iVbV1NB1fl8BKb/5DDH3g/W4 7AT44UucTumi4M2luBeoRGaOYlmC+P4X0e8tR/AMlj1vUp2FUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGZ8Ta15VEGinbL/m+X2/hom5hf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzQ5MDZlOWMtYzJiZS0z NWUxLWI2YjctNDBlMDFkNGI0ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinELAwQA inERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHC2WFWds6TnaeOfbrehijJIIH0WlJq7lJYs+t6YwmMzuwri kTYqFP07ODauhia2+rIyhh1+btxw/xqXjSeyTy7iaZ0p9YlxWBHDeoGRE/GtczBA zzzUvlXK47P4nGcQpDzyJox9sMP+v0tJaWUoXS9Sb5pigcMgxuAMYe3qMZ97Q2M9 fV9zqD8KlWMnUuU2U5sZhHoxuZxBk3WH3RoNfRRI3PDJ6uFKlpDORhY3zDAlWlXk mHLS9VgfNZ+QtlkfX+d7WHaa6aArdrujXsQ9Lnzs8IC40PMlIP398vHmLXwZWcef DBog7OD8EXFAFxc+rTwGQwjKmlI+BUkoC+UEPhY= -----END CERTIFICATE-----Generated at Fri Jul 11 04:36:27 2025 by rpki-client