$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa File: 53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa (raw, json) Hash identifier: 8iLFhxK5Yo809gZ9oqNCAHb5rFoGFdkYU8ckNJUOWy4= Subject key identifier: CB:5C:26:1A:89:05:F2:D3:88:7F:99:EB:F9:59:F0:D1:B1:33:F7:CB Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584910E17ED017CFFF9463374BB0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 54994 IP address blocks: 138.113.15.0/24 maxlen: 24 138.113.74.0/24 maxlen: 24 138.113.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7e:d0:17:cf:ff:94:63:37:4b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=741bef95-7d6d-4480-9031-cf93aeaee898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:98:0a:69:b4:2b:62:33:ad:28:8f:65:66: 27:03:40:62:aa:d8:2e:eb:10:f9:73:f0:b6:f5:a3: df:10:c2:d7:ca:6d:9d:a1:3f:bc:9a:f3:ce:ba:98: 67:bf:36:11:02:56:df:ab:25:e9:61:56:0f:fb:46: 5c:3b:92:5c:dd:f8:d6:cc:15:c9:31:25:7a:3b:01: e5:95:df:54:1d:e1:14:b1:75:67:50:7d:35:f1:2c: 0a:c0:4c:ae:ef:6d:cf:fb:9c:e9:ce:ea:e4:87:e0: 54:57:9e:73:22:32:14:86:fa:66:16:08:99:26:83: 43:59:86:40:af:65:db:17:ed:44:22:7f:36:8a:bb: 21:c3:c7:66:e2:95:cc:42:dd:0c:a6:0f:ec:74:1c: f8:6c:18:d7:82:e3:73:82:b9:e0:0f:38:42:8a:38: 8f:9a:8f:8d:68:bf:44:21:68:80:eb:de:a0:23:8c: c3:40:e9:eb:a2:92:99:0f:41:b5:e9:52:64:0e:d2: 58:93:22:8d:76:1f:8f:17:60:a8:da:0d:72:f2:f2: 82:98:70:c9:d4:de:b6:2f:61:31:2a:f8:ba:ad:57: d1:44:70:e4:5c:32:58:d4:df:e3:a9:59:fc:db:6b: 5d:6f:49:13:aa:b1:89:2d:51:eb:ca:16:1d:ba:14: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5C:26:1A:89:05:F2:D3:88:7F:99:EB:F9:59:F0:D1:B1:33:F7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.15.0/24 138.113.74.0/24 138.113.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7a:9c:02:e8:26:4a:9f:a0:9c:05:ce:5e:53:c5:2a:99:3a: 55:4a:cc:bb:45:73:7b:f3:17:ca:ed:f5:da:9e:63:35:04:13: 1e:3c:10:47:fd:a3:b2:71:aa:e2:f1:c4:65:be:e0:21:0b:80: b8:03:87:24:a5:1f:89:1c:2b:f1:01:22:74:31:e7:4f:3b:2a: ba:20:aa:83:60:63:02:ec:01:68:c6:7b:11:dd:a0:51:a4:fb: ab:39:f2:a2:2f:c0:20:f7:3a:a5:c5:79:21:50:65:a2:ad:9a: 23:36:c7:7c:94:5d:79:03:89:fc:c0:22:65:8a:c5:be:6d:00: 92:e8:8e:44:b6:1d:c2:53:a3:50:8b:ae:21:1b:05:4d:90:98: 53:d5:bc:7c:0d:48:8c:f2:97:a4:61:d4:1b:f6:f4:80:39:6d: ec:d8:95:e0:35:ea:f7:5c:bf:c2:7c:6d:5c:c3:4f:b8:d3:b2: a7:9b:8f:f4:c0:ad:e9:77:73:89:21:49:36:fe:de:69:65:ac: 0f:82:c9:7b:c9:3f:54:42:65:cc:9f:59:9d:6c:93:1a:17:01: 46:ae:ec:0c:28:5c:a4:57:88:05:41:e5:1d:47:af:2b:d2:6d: ae:16:2f:26:f4:1a:b5:f5:08:53:72:67:c1:d5:50:c7:c4:95: 4e:41:67:c9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkQ4X7QF8//lGM3S7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NzQxYmVmOTUtN2Q2ZC00NDgwLTkwMzEtY2Y5M2FlYWVlODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+qYCmm0K2IzrSiPZWYnA0Biqtgu6xD5c/C2 9aPfEMLXym2doT+8mvPOuphnvzYRAlbfqyXpYVYP+0ZcO5Jc3fjWzBXJMSV6OwHl ld9UHeEUsXVnUH018SwKwEyu723P+5zpzurkh+BUV55zIjIUhvpmFgiZJoNDWYZA r2XbF+1EIn82irshw8dm4pXMQt0Mpg/sdBz4bBjXguNzgrngDzhCijiPmo+NaL9E IWiA696gI4zDQOnropKZD0G16VJkDtJYkyKNdh+PF2Co2g1y8vKCmHDJ1N62L2Ex Kvi6rVfRRHDkXDJY1N/jqVn822tdb0kTqrGJLVHryhYduhSwOwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMtcJhqJBfLTiH+Z6/lZ8NGxM/fLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNTNhNzRmYjMtOGIzZC0z ZmZhLTllNmUtMGZkN2RkYjE0NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAinEPAwQA inFKAwQAinFWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIF6nALoJkqfoJwFzl5TxSqZOlVKzLtFc3vzF8rt 9dqeYzUEEx48EEf9o7JxquLxxGW+4CELgLgDhySlH4kcK/EBInQx5087KrogqoNg YwLsAWjGexHdoFGk+6s58qIvwCD3OqXFeSFQZaKtmiM2x3yUXXkDifzAImWKxb5t AJLojkS2HcJTo1CLriEbBU2QmFPVvHwNSIzyl6Rh1Bv29IA5bezYleA16vdcv8J8 bVzDT7jTsqebj/TArel3c4khSTb+3mllrA+CyXvJP1RCZcyfWZ1skxoXAUau7Awo XKRXiAVB5R1HryvSba4WLyb0GrX1CFNyZ8HVUMfElU5BZ8k= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:54 2025 by rpki-client