$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa File: 7970207c-cff5-3b13-b007-d6300f998d3d.roa (raw, json) Hash identifier: O5dnNocQ/uEvbCl1dkvmqFsycjAJ/mcTOKu/uAqWx6o= Subject key identifier: 5E:28:9B:9A:EA:EC:E8:8C:66:6F:0F:31:91:0D:70:AC:52:A0:27:FF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AF521558F1912F37F577626A0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 54994 IP address blocks: 138.113.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:55:8f:19:12:f3:7f:57:76:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=cfebdb17-b34c-4915-aab3-cfb920c72a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:e4:1c:4e:a8:a4:51:5a:5d:3d:70:c0:c9: 9d:0f:f8:d1:07:be:69:2e:e3:f7:64:2a:09:fa:92: 27:19:7d:95:0e:ae:7f:45:5d:8d:e7:c8:cb:e2:4e: fd:1d:73:1c:e6:08:95:c8:81:9e:dc:ce:e6:5d:d4: e0:6f:07:bd:c9:89:58:40:56:9f:29:26:ef:0d:db: aa:0c:b0:8d:3a:f3:a4:3b:00:35:e0:cd:9e:7c:e8: 6a:e0:a3:f3:03:38:e3:c7:43:39:02:e8:4b:97:8a: 4d:0e:08:a2:16:c4:c8:ef:91:35:09:b0:e7:66:9a: 17:0f:97:62:5c:fe:76:36:65:30:4f:44:ab:65:86: 48:9d:38:29:b9:83:0f:5f:1f:43:28:60:76:bc:cb: 25:15:14:f9:8e:ee:e6:22:a1:97:35:67:17:9c:5f: 85:9a:da:8d:07:0a:42:bf:16:eb:d0:b0:a0:b1:7f: 15:55:ff:c7:33:ba:13:53:70:41:c0:bf:c5:16:83: e4:86:34:8f:31:ca:90:ac:dd:8f:23:ca:98:73:ad: 4d:be:38:22:38:39:50:31:59:de:ee:a4:e3:93:01: 90:78:ea:9b:c2:7a:2e:e1:03:b5:e3:81:4e:ec:3c: 2b:a3:98:1c:b9:1f:e0:68:3f:cd:5f:86:6c:9f:fc: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:9B:9A:EA:EC:E8:8C:66:6F:0F:31:91:0D:70:AC:52:A0:27:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9c:11:68:ab:17:e4:e9:29:10:ba:0a:f6:64:81:61:af:87: c4:e2:ed:d3:30:7f:d4:9d:af:5d:14:31:ed:bf:74:8c:53:5a: 57:47:9b:a8:62:31:2c:39:fe:0f:a0:39:87:a0:e7:06:0d:60: 23:63:0c:c3:9d:1b:e6:d2:22:96:87:2a:59:e1:c2:ad:cc:3d: d4:4b:c5:53:2a:b6:1a:be:2e:c7:96:d8:9d:0b:a5:f8:94:42: 0c:33:73:bc:74:bd:91:11:d0:cf:fb:97:7c:e6:91:37:91:9e: 76:e1:50:e3:36:cf:5a:fa:d0:40:25:98:9f:25:6f:4a:1b:69: e4:af:e8:12:f3:7c:d4:50:f1:a3:36:0a:af:b7:75:44:12:7d: 1c:ad:67:5a:a4:73:28:bf:f3:3a:92:8d:47:00:be:1b:05:8a: 6f:8c:8e:37:4e:7a:0b:f9:2d:5b:3f:49:ff:4c:45:0e:74:d2: 3e:6b:d9:dd:36:bb:e3:37:8a:30:2b:2a:a2:f0:ae:44:09:ba: 9d:ea:b7:82:e4:bb:e0:1a:e2:db:18:c5:c6:9d:82:d1:87:ec: a8:ce:6f:ef:1d:cf:7a:c4:1e:5a:72:ac:82:87:7e:40:e1:6b: 12:81:c6:4a:59:61:16:39:1d:43:70:dc:a0:e6:ab:ca:4e:1d: a8:ec:a6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVWPGRLzf1d2JqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZlYmRiMTctYjM0Yy00OTE1LWFhYjMtY2ZiOTIwYzcyYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QDkHE6opFFaXT1wwMmdD/jRB75pLuP3ZCoJ +pInGX2VDq5/RV2N58jL4k79HXMc5giVyIGe3M7mXdTgbwe9yYlYQFafKSbvDduq DLCNOvOkOwA14M2efOhq4KPzAzjjx0M5AuhLl4pNDgiiFsTI75E1CbDnZpoXD5di XP52NmUwT0SrZYZInTgpuYMPXx9DKGB2vMslFRT5ju7mIqGXNWcXnF+FmtqNBwpC vxbr0LCgsX8VVf/HM7oTU3BBwL/FFoPkhjSPMcqQrN2PI8qYc61NvjgiODlQMVne 7qTjkwGQeOqbwnou4QO144FO7Dwro5gcuR/gaD/NX4Zsn/y61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4om5rq7OiMZm8PMZENcKxSoCf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzk3MDIwN2MtY2ZmNS0z YjEzLWIwMDctZDYzMDBmOTk4ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmcEWirF+TpKRC6CvZkgWGvh8Ti7dMwf9Sdr10UMe2/dIxTWldHm6hi MSw5/g+gOYeg5wYNYCNjDMOdG+bSIpaHKlnhwq3MPdRLxVMqthq+LseW2J0LpfiU Qgwzc7x0vZER0M/7l3zmkTeRnnbhUOM2z1r60EAlmJ8lb0obaeSv6BLzfNRQ8aM2 Cq+3dUQSfRytZ1qkcyi/8zqSjUcAvhsFim+MjjdOegv5LVs/Sf9MRQ500j5r2d02 u+M3ijArKqLwrkQJup3qt4Lku+Aa4tsYxcadgtGH7KjOb+8dz3rEHlpyrIKHfkDh axKBxkpZYRY5HUNw3KDmq8pOHajsplo= -----END CERTIFICATE-----Generated at Sat Sep 6 01:21:53 2025 by rpki-client