$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa File: 7970207c-cff5-3b13-b007-d6300f998d3d.roa (raw, json) Hash identifier: jHEh2jXb4CYndUZY4yvNK5sChFMhNXSTnxj82xIVXqk= Subject key identifier: 33:11:E2:E2:A8:E9:D0:49:25:86:D5:90:FA:77:E3:4B:E5:D5:10:DA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849350EA19159C190E606071E80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 54994 IP address blocks: 138.113.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a1:91:59:c1:90:e6:06:07:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f5835c62-42b3-47d0-91a3-d490057528d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:b0:88:82:2e:2d:c5:ca:f7:9d:64:f4:8c: 71:ae:f4:38:e6:b3:5c:5f:3b:d6:da:e6:6a:c2:79: 93:62:10:b6:0b:b0:52:40:b2:5e:a3:a2:42:e9:e4: 6c:9f:9b:0f:eb:6c:a3:c1:1c:3f:16:ce:69:6e:ef: 14:57:4c:1e:0c:fc:ab:b9:7b:02:6e:27:ca:81:6a: ab:6e:1e:a8:e5:b9:b4:9d:ad:df:ea:6b:61:f4:a4: 72:b5:b9:7b:c3:77:06:60:d5:29:54:db:20:d6:9c: dc:43:ab:ae:1c:8e:d2:d8:1e:88:8f:88:c0:12:f2: ef:8b:b8:b6:09:07:5a:67:f1:ad:d4:a6:36:db:d3: 9b:34:13:ba:85:45:ce:0a:c0:2e:39:af:4d:e4:ee: 5b:23:79:9f:0c:65:9d:97:dc:3a:e8:67:5d:ad:18: 66:0e:c7:64:49:02:79:b2:79:57:ef:71:56:d3:87: 90:84:7e:06:d5:65:d6:38:6c:eb:4c:96:96:63:ab: 98:3a:fa:e5:aa:99:76:0f:e1:4d:e3:e6:26:f8:54: 81:88:60:e3:09:75:b4:e6:4c:41:0c:e8:dd:a3:dd: 21:25:19:92:41:b9:f1:6c:d5:e9:0b:eb:e8:fa:29: e0:ea:36:bc:cd:f2:8a:59:aa:03:67:1b:a8:05:ca: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:11:E2:E2:A8:E9:D0:49:25:86:D5:90:FA:77:E3:4B:E5:D5:10:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b5:75:f6:cc:8f:ff:e3:a3:7f:94:5c:2c:05:1d:6b:59:e4: 59:bc:45:9f:aa:29:aa:b2:96:0b:ee:33:38:05:87:58:c9:0b: 10:56:ec:11:8c:e4:f0:30:35:f6:91:b4:e7:47:85:e9:20:92: e4:36:d2:c4:fd:27:3d:76:c5:2b:a2:e6:95:03:ad:10:46:87: e3:21:2b:fe:2c:a8:e1:3f:8e:ae:15:6c:35:89:db:bd:6f:09: 26:a8:18:da:e3:be:c6:b5:c5:fa:05:59:46:24:09:39:21:3f: b0:9c:07:a5:08:02:97:ce:83:be:39:1d:c6:49:56:4f:1a:9f: 7e:2b:28:65:50:11:a3:9c:4f:32:63:5d:90:ff:94:94:0a:76: 28:cd:cc:d9:9e:62:83:4c:1c:d7:c6:a7:cd:c3:88:4d:3b:3c: cb:81:0a:01:c3:3b:15:c4:bf:32:c4:b2:fc:92:89:c1:7e:d5: f4:d1:6a:5c:28:67:f0:24:1a:e4:82:0d:4e:49:0f:58:8b:72: 43:58:95:10:e4:49:bc:24:8d:fb:7c:05:dc:75:c7:7f:09:a3: 9d:1a:45:88:b9:fa:bb:83:77:73:a3:6c:e1:c6:00:f8:00:cd: 3a:7a:b9:96:7e:ce:f2:f6:d9:ce:00:32:db:0b:a7:3c:25:9f: cf:d0:ab:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqGRWcGQ5gYHHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjU4MzVjNjItNDJiMy00N2QwLTkxYTMtZDQ5MDA1NzUyOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4awiIIuLcXK951k9IxxrvQ45rNcXzvW2uZq wnmTYhC2C7BSQLJeo6JC6eRsn5sP62yjwRw/Fs5pbu8UV0weDPyruXsCbifKgWqr bh6o5bm0na3f6mth9KRytbl7w3cGYNUpVNsg1pzcQ6uuHI7S2B6Ij4jAEvLvi7i2 CQdaZ/Gt1KY229ObNBO6hUXOCsAuOa9N5O5bI3mfDGWdl9w66GddrRhmDsdkSQJ5 snlX73FW04eQhH4G1WXWOGzrTJaWY6uYOvrlqpl2D+FN4+Ym+FSBiGDjCXW05kxB DOjdo90hJRmSQbnxbNXpC+vo+ing6ja8zfKKWaoDZxuoBcqX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMR4uKo6dBJJYbVkPp340vl1RDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzk3MDIwN2MtY2ZmNS0z YjEzLWIwMDctZDYzMDBmOTk4ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC1dfbMj//jo3+UXCwFHWtZ5Fm8RZ+qKaqylgvuMzgFh1jJCxBW7BGM 5PAwNfaRtOdHhekgkuQ20sT9Jz12xSui5pUDrRBGh+MhK/4sqOE/jq4VbDWJ271v CSaoGNrjvsa1xfoFWUYkCTkhP7CcB6UIApfOg745HcZJVk8an34rKGVQEaOcTzJj XZD/lJQKdijNzNmeYoNMHNfGp83DiE07PMuBCgHDOxXEvzLEsvySicF+1fTRalwo Z/AkGuSCDU5JD1iLckNYlRDkSbwkjft8Bdx1x38Jo50aRYi5+ruDd3OjbOHGAPgA zTp6uZZ+zvL22c4AMtsLpzwln8/Qq/A= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:41 2025 by rpki-client