$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa File: 9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa (raw, json) Hash identifier: pq4oJ6ClxK1Bv+5+tdC8Lv4+ASsraJX4WuN8CDYF4J0= Subject key identifier: 8C:94:42:A8:9E:7C:FF:54:91:B9:DA:D5:B2:40:6C:5A:8E:A7:D7:76 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584910E1812AEDF89ABF53900140 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 54994 IP address blocks: 138.113.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:81:2a:ed:f8:9a:bf:53:90:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=2f3013c6-2c16-4d0e-833a-a24aee25c318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:b0:85:6e:e8:e9:d9:d0:37:a0:27:6f:3c: 8c:a8:c3:42:ff:bf:ef:0d:8d:4e:0b:61:b9:a8:dd: 50:7e:ad:b8:1b:04:02:b7:20:cf:6e:75:c3:c8:84: 6c:91:cf:e8:d6:5d:de:55:30:5a:2f:73:ce:c1:1c: 55:0e:24:1e:17:9c:21:01:6c:ee:f0:7f:1c:f9:df: 39:c0:26:f8:fd:a4:37:57:f5:ba:53:97:0f:07:c2: 8b:d9:c8:88:d6:99:00:0d:ff:43:fc:6e:ae:8e:80: ef:a1:8a:c8:04:b1:b0:59:0b:6c:81:4c:40:02:ee: 64:17:8c:35:d5:64:cb:43:60:74:40:b4:32:b6:6f: d6:33:58:d8:e3:68:be:fd:19:de:c0:2b:d0:7a:ed: 20:b4:b9:83:5a:33:1f:6f:7b:a4:fa:2c:47:d8:b5: 18:2f:aa:19:1b:d4:02:83:1a:38:41:53:c5:a1:6e: b0:df:d6:0f:a3:15:ab:46:e8:13:6f:9f:c1:58:c6: 42:5f:77:ee:c4:84:2a:75:c9:c6:d1:0e:05:a8:4b: 21:c1:90:4c:98:57:4d:f4:2c:63:8b:78:c4:95:c4: 98:33:9d:39:40:7a:20:7d:fe:ad:c7:a8:00:73:bd: 30:07:7b:de:e4:a9:e6:4d:04:90:e5:12:dc:69:00: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:42:A8:9E:7C:FF:54:91:B9:DA:D5:B2:40:6C:5A:8E:A7:D7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a9:3c:45:71:39:55:52:62:9d:91:90:21:d1:ea:74:26:4b: 3f:1e:84:80:43:4d:bf:1b:a2:7e:58:c2:31:66:03:b3:20:3e: eb:98:e4:52:12:a5:49:83:e9:9b:51:68:e0:25:79:bf:f9:c9: 63:a6:47:a4:b9:14:49:29:9a:89:15:cb:08:2e:42:4f:81:69: bd:ff:01:62:62:05:59:8b:68:06:e6:d5:6a:e1:7f:32:8b:83: d0:d0:99:fb:b0:65:f3:fc:6f:eb:b0:fd:ec:80:d7:33:23:53: 6c:20:9f:8b:dd:4b:d6:8f:07:0e:70:88:95:20:75:11:2a:a4: 3b:0c:d5:d7:88:ba:7a:31:58:9c:46:bf:01:b6:d1:af:05:0e: 09:43:7e:29:bd:13:70:d1:66:d6:2d:5d:2e:e0:ee:d9:0d:ce: b3:b7:33:b6:57:96:60:7f:53:ad:03:af:dd:e2:b2:18:57:6d: f2:b3:fe:2e:7a:5a:72:7e:c8:93:ff:fb:2b:2d:68:0e:10:2c: c1:85:a6:d9:3f:96:d7:91:66:b7:e4:ab:c5:db:8e:19:5e:00: 05:e0:65:3c:04:52:5f:1e:63:0a:45:fe:9b:e9:04:fa:32:69: f9:c5:6f:c3:81:6f:33:f3:cc:0f:63:38:4f:b0:5c:fe:fd:be: f3:4e:92:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YEq7fiav1OQAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk MmYzMDEzYzYtMmMxNi00ZDBlLTgzM2EtYTI0YWVlMjVjMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzCwhW7o6dnQN6AnbzyMqMNC/7/vDY1OC2G5 qN1Qfq24GwQCtyDPbnXDyIRskc/o1l3eVTBaL3POwRxVDiQeF5whAWzu8H8c+d85 wCb4/aQ3V/W6U5cPB8KL2ciI1pkADf9D/G6ujoDvoYrIBLGwWQtsgUxAAu5kF4w1 1WTLQ2B0QLQytm/WM1jY42i+/RnewCvQeu0gtLmDWjMfb3uk+ixH2LUYL6oZG9QC gxo4QVPFoW6w39YPoxWrRugTb5/BWMZCX3fuxIQqdcnG0Q4FqEshwZBMmFdN9Cxj i3jElcSYM505QHogff6tx6gAc70wB3ve5KnmTQSQ5RLcaQBpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyUQqiefP9Ukbna1bJAbFqOp9d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOWJkZGQ5OTctZWIyMS0z ZTVmLWIyOWMtN2VkYTlmYzA5YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFupPEVxOVVSYp2RkCHR6nQmSz8ehIBDTb8bon5YwjFmA7MgPuuY5FIS pUmD6ZtRaOAleb/5yWOmR6S5FEkpmokVywguQk+Bab3/AWJiBVmLaAbm1WrhfzKL g9DQmfuwZfP8b+uw/eyA1zMjU2wgn4vdS9aPBw5wiJUgdREqpDsM1deIunoxWJxG vwG20a8FDglDfim9E3DRZtYtXS7g7tkNzrO3M7ZXlmB/U60Dr93ishhXbfKz/i56 WnJ+yJP/+ystaA4QLMGFptk/lteRZrfkq8XbjhleAAXgZTwEUl8eYwpF/pvpBPoy afnFb8OBbzPzzA9jOE+wXP79vvNOkuk= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:39 2025 by rpki-client