$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa File: cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa (raw, json) Hash identifier: g+X86pml4m0BxPVuqA/F0mSZjZucaISgTLJKQsMirxE= Subject key identifier: 50:C8:9F:95:4D:10:8F:72:FC:06:3A:EF:D8:DC:6A:67:0A:57:F7:40 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849FFCD1418E8D56149A500C380 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa Signing time: Wed 28 May 2025 03:58:10 +0000 ROA not before: Wed 28 May 2025 03:58:10 +0000 ROA not after: Tue 26 Aug 2025 03:58:10 +0000 asID: 54994 IP address blocks: 138.113.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:cd:14:18:e8:d5:61:49:a5:00:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 28 03:58:10 2025 GMT Not After : Aug 26 03:58:10 2025 GMT Subject: CN=31fd7726-0ee6-4a14-8162-878d06e31795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:25:35:46:08:9f:ea:c8:48:d7:99:a6:37: 3d:32:ee:36:3f:11:a0:0c:08:d1:92:3f:30:4e:4e: 1a:cc:fb:89:c2:13:bf:56:ef:f0:c6:24:b6:a5:5a: 8f:bb:63:8f:c5:16:a3:cb:66:bb:62:7b:46:33:a3: 90:51:b1:e0:fb:2a:5b:e8:40:89:ff:18:d8:cb:b3: 13:da:a6:0a:00:8b:75:f1:12:76:f1:08:81:00:55: 3e:4d:f7:5c:10:68:76:8b:1d:bd:cd:a8:d2:6a:d6: ee:e4:c9:1f:4e:a2:2a:d0:19:53:c1:3a:df:2c:a1: e2:34:9d:7b:92:52:c6:2a:98:31:fe:87:35:58:d0: c3:8d:10:18:1e:1a:52:7f:35:2d:86:f6:50:8c:6f: 14:db:e4:db:56:92:a2:12:c5:d5:10:27:be:10:97: 31:e2:64:d0:09:21:1e:3c:f8:ba:28:3f:76:5d:60: fa:3c:68:b2:e9:1c:fe:df:51:21:95:31:6c:63:26: 8c:e4:59:af:95:e2:bb:8d:d2:59:f2:7f:73:2a:34: 99:78:ca:18:0e:ce:78:6e:e2:f5:c6:5b:04:c2:df: 86:8d:73:39:dd:5c:cb:77:38:7f:f2:a1:0f:78:6e: 78:0f:53:8d:08:ce:00:4d:dc:b4:55:a5:a8:b6:fd: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C8:9F:95:4D:10:8F:72:FC:06:3A:EF:D8:DC:6A:67:0A:57:F7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cd:ea:27:5f:f8:9e:73:e3:a0:03:66:46:54:0c:d0:ab:12: 62:6f:24:5c:61:71:bb:01:3c:7e:c5:7e:e6:d2:17:d6:9b:1f: 31:6e:de:de:08:48:33:d0:52:a2:21:55:1b:50:ff:06:d6:0d: 5f:00:c2:95:47:7a:05:e7:af:d2:21:74:3b:c2:70:2a:cc:fd: db:d9:c0:32:f2:22:4a:e5:aa:eb:de:5c:61:71:de:9c:29:de: 9f:09:ba:49:a5:42:b2:83:cf:fc:16:8a:3e:01:a8:07:8f:cf: 73:1a:6f:b2:96:3f:9d:ca:75:fc:cb:32:23:37:e3:c9:69:b5: 15:27:e3:fc:51:e3:bf:94:fe:95:5b:02:82:f5:49:db:d2:12: ce:c7:89:b4:29:56:e8:71:1b:6f:17:d9:c1:d8:5a:61:9d:7f: 7d:4a:2f:71:c9:3b:62:8a:5c:76:a0:c9:97:6a:23:0a:5a:be: 9c:24:61:26:5c:95:92:90:47:c8:3e:1a:91:28:6e:64:e9:64: ec:8a:19:96:0b:8d:ed:63:61:e9:6f:6c:68:93:f3:bb:a2:75: 62:04:50:f3:42:fb:4f:c1:12:67:a7:c4:5d:0c:64:f4:b9:8d: 06:c1:80:42:60:6d:84:4b:da:51:bc:04:24:fe:97:8f:7c:01: 9a:20:03:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/zRQY6NVhSaUAw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyODAzNTgxMFoXDTI1MDgyNjAzNTgxMFowLzEtMCsGA1UEAxMk MzFmZDc3MjYtMGVlNi00YTE0LTgxNjItODc4ZDA2ZTMxNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM0lNUYIn+rISNeZpjc9Mu42PxGgDAjRkj8w Tk4azPuJwhO/Vu/wxiS2pVqPu2OPxRajy2a7YntGM6OQUbHg+ypb6ECJ/xjYy7MT 2qYKAIt18RJ28QiBAFU+TfdcEGh2ix29zajSatbu5MkfTqIq0BlTwTrfLKHiNJ17 klLGKpgx/oc1WNDDjRAYHhpSfzUthvZQjG8U2+TbVpKiEsXVECe+EJcx4mTQCSEe PPi6KD92XWD6PGiy6Rz+31EhlTFsYyaM5FmvleK7jdJZ8n9zKjSZeMoYDs54buL1 xlsEwt+GjXM53VzLdzh/8qEPeG54D1ONCM4ATdy0VaWotv28UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDIn5VNEI9y/AY679jcamcKV/dAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvY2ZlNTZkZGUtNjhjZC0z NzVjLThhNTctMzNhM2NlZWI4MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADN6idf+J5z46ADZkZUDNCrEmJvJFxhcbsBPH7FfubSF9abHzFu3t4I SDPQUqIhVRtQ/wbWDV8AwpVHegXnr9IhdDvCcCrM/dvZwDLyIkrlquveXGFx3pwp 3p8JukmlQrKDz/wWij4BqAePz3Mab7KWP53KdfzLMiM348lptRUn4/xR47+U/pVb AoL1SdvSEs7HibQpVuhxG28X2cHYWmGdf31KL3HJO2KKXHagyZdqIwpavpwkYSZc lZKQR8g+GpEobmTpZOyKGZYLje1jYelvbGiT87uidWIEUPNC+0/BEmenxF0MZPS5 jQbBgEJgbYRL2lG8BCT+l498AZogA3k= -----END CERTIFICATE-----Generated at Fri Jun 6 16:30:16 2025 by rpki-client