$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: FLTu5rDViAM+XWQjwvg5RXid+Ec57RgBXDyAFuCdN/U= Subject key identifier: D5:3E:60:0C:7B:53:DB:82:56:68:91:6D:64:98:BF:4A:F8:A0:1D:E3 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584910E17EF249B8C3D44DBAE400 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7e:f2:49:b8:c3:d4:4d:ba:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=79e3f3e1-d493-41f0-a0fa-4659475f8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:b9:a9:10:ec:91:c0:2b:53:64:bb:df:09: 45:f9:ba:a6:cb:7a:41:75:a6:75:9f:c9:a5:01:6e: 81:20:71:89:2d:88:20:eb:61:ed:92:e7:96:7b:38: 1e:7e:86:25:30:83:ec:88:f6:b3:4a:54:e4:e4:46: 15:8b:b4:41:5e:af:80:e5:cb:24:9c:dc:76:e0:99: cf:7d:45:f3:e4:46:22:39:54:3b:86:1f:4a:37:ae: 31:95:23:33:aa:5e:8f:f1:ad:92:c8:70:11:ca:44: 86:ce:0f:14:25:ba:a6:ea:92:dd:63:63:df:a6:b1: 7b:14:72:10:c0:7b:7d:39:2b:a6:d3:73:92:53:08: 5a:47:97:8a:fe:43:f3:e7:78:b2:58:50:16:3e:a5: 76:e1:6f:32:17:ce:37:be:33:92:f6:59:51:1a:7d: 52:ee:13:50:be:46:04:0e:23:2c:fe:cc:25:70:e4: 84:7d:4b:75:3e:fe:c2:8c:da:92:5a:d1:0d:90:6e: 6c:d6:fa:21:c0:8d:6c:6d:d4:e0:df:7a:26:21:a8: 84:90:3c:23:3d:c2:1e:0e:07:91:cf:5c:4e:ac:df: 23:14:7f:5e:bb:8b:4c:75:95:96:01:e8:5d:c5:97: 18:2c:59:ba:5a:59:05:a4:df:3a:2b:49:41:98:d4: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:60:0C:7B:53:DB:82:56:68:91:6D:64:98:BF:4A:F8:A0:1D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:64:88:12:8c:af:96:4a:de:ec:b2:48:09:5e:01:55:e9:70: c5:78:33:b5:33:6d:bc:3d:4f:09:e0:d6:4e:c5:27:be:2f:b7: 5b:7f:e0:a7:ca:1c:aa:bd:2e:d6:47:e1:6f:ed:32:18:9e:93: 61:b1:ac:9e:3d:31:df:7e:13:d9:65:30:c1:fb:ec:fd:62:fa: dc:7f:b9:3e:ca:db:c5:3e:4b:d5:a1:12:b7:d9:9a:0d:16:54: 5e:a9:92:5a:e2:2f:20:22:80:fb:df:a6:c1:5b:9b:b4:56:ee: a8:37:39:ab:72:6a:ac:f2:9a:de:77:89:c7:97:c9:c2:1e:81: 70:84:01:00:85:0d:71:70:a3:d5:65:59:4a:d2:f4:86:7c:19: 68:2c:e2:c1:cd:9e:8a:ad:31:c0:7a:a3:a7:f1:a9:fd:46:94: a5:9f:2a:63:98:38:13:82:2a:c4:d4:fa:49:f8:a1:13:c8:1e: 5f:dd:f3:12:43:7b:9b:ad:c1:f1:d9:48:a0:e7:11:85:39:56: ba:fb:53:09:7b:9d:34:0d:e3:32:21:dc:2f:7c:0e:90:e2:86: 58:3b:b0:4f:97:97:04:2c:5e:24:e8:7d:19:1d:e0:62:b0:e3: 60:47:56:cf:59:d0:b8:f3:6e:1c:20:40:99:42:11:f1:99:46: 5d:8b:5d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4X7ySbjD1E265AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NzllM2YzZTEtZDQ5My00MWYwLWEwZmEtNDY1OTQ3NWY4ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM65qRDskcArU2S73wlF+bqmy3pBdaZ1n8ml AW6BIHGJLYgg62HtkueWezgefoYlMIPsiPazSlTk5EYVi7RBXq+A5csknNx24JnP fUXz5EYiOVQ7hh9KN64xlSMzql6P8a2SyHARykSGzg8UJbqm6pLdY2PfprF7FHIQ wHt9OSum03OSUwhaR5eK/kPz53iyWFAWPqV24W8yF843vjOS9llRGn1S7hNQvkYE DiMs/swlcOSEfUt1Pv7CjNqSWtENkG5s1vohwI1sbdTg33omIaiEkDwjPcIeDgeR z1xOrN8jFH9eu4tMdZWWAehdxZcYLFm6WlkFpN86K0lBmNRNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU+YAx7U9uCVmiRbWSYv0r4oB3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtkiBKMr5ZK3uyySAleAVXpcMV4M7Uzbbw9Twng1k7FJ74vt1t/4KfK HKq9LtZH4W/tMhiek2GxrJ49Md9+E9llMMH77P1i+tx/uT7K28U+S9WhErfZmg0W VF6pklriLyAigPvfpsFbm7RW7qg3Oatyaqzymt53iceXycIegXCEAQCFDXFwo9Vl WUrS9IZ8GWgs4sHNnoqtMcB6o6fxqf1GlKWfKmOYOBOCKsTU+kn4oRPIHl/d8xJD e5utwfHZSKDnEYU5Vrr7Uwl7nTQN4zIh3C98DpDihlg7sE+XlwQsXiTofRkd4GKw 42BHVs9Z0LjzbhwgQJlCEfGZRl2LXWE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:19 2025 by rpki-client