$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa File: 87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json) Hash identifier: kBt+bGhgG2uk/CnwcvymyULfEYI88e0sMmh/rEljZec= Subject key identifier: 2B:95:D5:1E:DE:BC:9D:59:FE:15:ED:3B:2E:D5:2F:2A:40:51:25:86 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F432858490CB1714ABE7D0F74E9846680 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 54994 IP address blocks: 138.113.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:71:4a:be:7d:0f:74:e9:84:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=b1f9efb7-1c5c-4537-987a-bd5d3a218940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:0f:00:51:56:30:cc:0f:50:95:e1:7c:09: e7:a8:4a:ac:2a:8b:b6:52:bf:a6:41:b8:3e:14:70: c0:2e:da:3e:74:18:37:8a:45:31:8a:19:6e:12:d8: 48:22:b2:5e:4d:06:7c:18:22:a8:e2:72:94:75:5c: ee:af:d6:5b:c2:28:8d:d3:3e:dc:1b:63:92:d0:42: d1:36:5c:41:7f:af:0c:a4:8a:0d:da:fa:f1:94:0d: 65:6c:e5:c7:a1:4d:ce:c9:60:2e:9e:39:fb:fd:d9: b7:2e:c5:32:02:7c:fb:32:f6:98:a4:80:ed:5f:c0: b5:00:9e:dc:b5:69:c3:f8:6c:fa:bc:a0:72:51:5b: cb:37:7e:0a:9a:b3:d9:a0:20:2a:ef:6a:47:8d:22: 5f:6c:9a:9b:85:6e:56:be:e5:2f:40:58:4c:dd:2e: cb:b9:b1:e9:21:b2:a2:df:be:0b:ab:ae:47:57:0c: 51:f7:3f:4c:84:c9:b6:ef:d4:1c:88:fe:78:b6:58: 09:6a:be:52:e4:16:15:dc:0d:ad:e9:b1:15:49:20: f1:b3:32:72:9a:51:3a:ef:f1:a3:68:34:5a:ae:00: 8c:5c:26:99:df:bf:dd:4f:c8:79:33:af:3e:49:48: e1:76:e9:12:67:03:a5:8a:8b:5e:95:ca:fc:c0:7e: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:D5:1E:DE:BC:9D:59:FE:15:ED:3B:2E:D5:2F:2A:40:51:25:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:64:e5:42:02:e0:36:eb:6c:4d:23:db:9a:dd:cb:c5:f9:4a: 46:2e:eb:de:34:99:53:bb:7f:6b:93:5e:16:9d:ac:d5:95:f1: 83:94:ce:58:13:31:96:4c:50:c0:3f:a2:36:53:16:fe:74:31: fd:bf:ca:fb:12:23:49:73:e8:ff:8b:b9:86:e1:7b:5b:d1:39: a5:6d:84:d2:db:4f:23:e0:7b:a7:30:90:88:5a:8a:2d:27:72: 8b:ad:d8:f0:f1:20:ed:0c:f3:ea:83:ea:a4:f3:66:ad:45:72: fc:bc:d4:8e:1b:40:93:bc:78:05:3d:79:3a:d1:e0:a4:72:9b: f6:cf:0d:6c:66:49:b1:77:9d:32:e3:08:37:69:8e:c3:d2:db: 6d:6b:35:62:92:6b:f4:0a:27:c6:4b:a3:44:a5:d3:9d:56:13: f2:6f:7e:6b:30:ff:b2:de:a2:bb:0f:dd:1a:55:3f:f9:40:5c: db:28:c8:3b:52:b4:55:2b:f2:f1:ce:73:08:bd:ee:fb:d8:64: d1:38:65:88:2f:61:a9:4a:c1:a1:33:a6:52:57:73:e1:e0:ef: 07:6c:b7:c0:72:34:33:9e:fb:c8:22:50:85:4e:99:6e:be:45: 31:93:26:9a:cc:c9:00:0d:b0:ee:dd:90:c6:ed:55:12:dc:7d: 53:fe:9f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXFKvn0PdOmEZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YjFmOWVmYjctMWM1Yy00NTM3LTk4N2EtYmQ1ZDNhMjE4OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgPAFFWMMwPUJXhfAnnqEqsKou2Ur+mQbg+ FHDALto+dBg3ikUxihluEthIIrJeTQZ8GCKo4nKUdVzur9ZbwiiN0z7cG2OS0ELR NlxBf68MpIoN2vrxlA1lbOXHoU3OyWAunjn7/dm3LsUyAnz7MvaYpIDtX8C1AJ7c tWnD+Gz6vKByUVvLN34KmrPZoCAq72pHjSJfbJqbhW5WvuUvQFhM3S7LubHpIbKi 374Lq65HVwxR9z9MhMm279QciP54tlgJar5S5BYV3A2t6bEVSSDxszJymlE67/Gj aDRargCMXCaZ37/dT8h5M68+SUjhdukSZwOliotelcr8wH7suQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuV1R7evJ1Z/hXtOy7VLypAUSWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODc5MjFiMjYtM2U0ZC0z YmY1LWI4MmQtOTI2OTIzYzBmNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5k5UIC4DbrbE0j25rdy8X5SkYu6940mVO7f2uTXhadrNWV8YOUzlgT MZZMUMA/ojZTFv50Mf2/yvsSI0lz6P+LuYbhe1vROaVthNLbTyPge6cwkIhaii0n cout2PDxIO0M8+qD6qTzZq1Fcvy81I4bQJO8eAU9eTrR4KRym/bPDWxmSbF3nTLj CDdpjsPS221rNWKSa/QKJ8ZLo0Sl051WE/Jvfmsw/7LeorsP3RpVP/lAXNsoyDtS tFUr8vHOcwi97vvYZNE4ZYgvYalKwaEzplJXc+Hg7wdst8ByNDOe+8giUIVOmW6+ RTGTJprMyQANsO7dkMbtVRLcfVP+n3I= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:22 2025 by rpki-client