$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa File: 919695ea-4fb8-3d6b-a522-e72feddea0c8.roa (raw, json) Hash identifier: baJVWQvr3xJmP1EQ5E+CK6wLgKWzCC1l6L9TV/D8nRA= Subject key identifier: F2:D8:EA:1C:C1:C4:9E:65:80:B8:87:6A:16:F5:18:EF:87:54:A0:48 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849287E6A32C8A08C8920C10140 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 54994 IP address blocks: 138.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6a:32:c8:a0:8c:89:20:c1:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=1d373e7a-aa87-4b60-9ddb-ceafcda1433c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:e2:4c:03:41:18:eb:74:5f:79:80:ca:f0: 5c:45:f3:46:31:30:04:51:6a:15:e2:e2:50:e3:78: cf:ee:bc:4f:d5:d0:c5:e5:c6:0a:e0:84:44:48:62: 40:63:a4:7b:6c:2a:22:84:96:47:fa:d4:e5:48:c8: 9b:00:10:9f:67:b7:fb:85:e2:07:7d:10:02:2a:d1: fc:24:1e:4c:2e:ee:28:69:9c:d8:ce:f6:de:23:fd: 08:48:a7:7e:33:f7:00:95:29:d9:17:c2:67:23:d5: 1d:7a:bc:6c:cb:7f:ba:1c:2d:cc:90:28:72:ae:4d: 1c:6b:56:8b:e4:99:56:1d:bf:3c:1f:fa:57:34:95: dc:9e:e8:80:49:51:27:b5:bd:8e:ee:9a:db:bb:e6: d0:72:69:69:2b:4e:3e:cf:75:db:09:ec:0b:db:fe: 28:f4:a6:99:cf:48:c6:25:00:e3:80:29:e5:c2:bf: a1:b7:67:ff:bc:42:1d:c6:26:53:bd:e6:5d:1a:79: 69:9e:f4:90:19:02:f4:f4:e5:77:25:c6:f0:5b:68: 3c:91:52:e5:36:6f:e1:72:59:e2:3f:50:6b:07:4f: 85:35:d0:3a:bc:c5:5c:41:15:ca:79:a6:6c:eb:2b: 9b:a9:19:50:47:31:05:5a:9d:a1:74:f5:bf:a4:e1: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D8:EA:1C:C1:C4:9E:65:80:B8:87:6A:16:F5:18:EF:87:54:A0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:16:3d:05:ac:9c:8f:3c:52:dd:0b:b5:f7:ce:18:80:50:15: 50:81:e1:dd:56:c0:36:85:21:71:fa:d9:50:89:46:a9:60:67: a4:5e:1e:13:07:5f:e4:80:b5:8d:0e:f8:97:90:4f:ee:4c:53: b6:6d:74:11:08:76:14:52:d9:27:0f:38:b2:76:39:b6:eb:44: db:bc:6d:10:63:71:45:f1:8e:e7:51:eb:f8:ad:94:92:cf:7a: 04:cf:4c:99:3c:90:6d:42:0a:28:40:6b:57:d5:ca:26:1a:03: 38:45:78:5f:ed:3d:ef:c7:e3:ac:2b:0a:47:9d:cb:6f:29:0f: 98:e5:1a:d4:3e:3b:4a:e0:e7:d8:f0:1b:c0:f5:87:24:fc:93: 0e:ca:3a:4f:4b:18:95:04:07:fb:a2:c2:3c:bf:21:94:49:57: 94:dd:33:54:52:65:75:e9:0b:a8:e8:d0:3a:13:c7:e3:a7:44: 44:bd:ff:7b:0e:11:af:e0:a2:ef:4e:4f:73:ac:66:66:a0:14: b4:1c:6e:78:37:bc:ec:b1:7a:32:34:0c:60:73:07:1b:24:24: 06:79:43:90:0d:bd:15:a2:c2:fd:d4:d4:c5:c3:d0:e0:36:7c: dc:3d:4f:da:cd:05:a8:5e:56:93:5a:f6:09:2c:3e:67:51:91: 06:aa:e0:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmoyyKCMiSDBAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWQzNzNlN2EtYWE4Ny00YjYwLTlkZGItY2VhZmNkYTE0MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLTiTANBGOt0X3mAyvBcRfNGMTAEUWoV4uJQ 43jP7rxP1dDF5cYK4IRESGJAY6R7bCoihJZH+tTlSMibABCfZ7f7heIHfRACKtH8 JB5MLu4oaZzYzvbeI/0ISKd+M/cAlSnZF8JnI9Uderxsy3+6HC3MkChyrk0ca1aL 5JlWHb88H/pXNJXcnuiASVEntb2O7prbu+bQcmlpK04+z3XbCewL2/4o9KaZz0jG JQDjgCnlwr+ht2f/vEIdxiZTveZdGnlpnvSQGQL09OV3JcbwW2g8kVLlNm/hclni P1BrB0+FNdA6vMVcQRXKeaZs6yubqRlQRzEFWp2hdPW/pOHdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLY6hzBxJ5lgLiHahb1GO+HVKBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTE5Njk1ZWEtNGZiOC0z ZDZiLWE1MjItZTcyZmVkZGVhMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYWPQWsnI88Ut0LtffOGIBQFVCB4d1WwDaFIXH62VCJRqlgZ6ReHhMH X+SAtY0O+JeQT+5MU7ZtdBEIdhRS2ScPOLJ2ObbrRNu8bRBjcUXxjudR6/itlJLP egTPTJk8kG1CCihAa1fVyiYaAzhFeF/tPe/H46wrCkedy28pD5jlGtQ+O0rg59jw G8D1hyT8kw7KOk9LGJUEB/uiwjy/IZRJV5TdM1RSZXXpC6jo0DoTx+OnRES9/3sO Ea/gou9OT3OsZmagFLQcbng3vOyxejI0DGBzBxskJAZ5Q5ANvRWiwv3U1MXD0OA2 fNw9T9rNBaheVpNa9gksPmdRkQaq4MA= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:50 2025 by rpki-client