$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa File: e9a2c883-433a-3010-903a-e1899d8a61d5.roa (raw, json) Hash identifier: gpRVjHQiidsEZHcFaSk5XXsbHdumi8U85mIxJwisq4U= Subject key identifier: B1:0B:A9:92:3F:D0:84:B7:20:CD:AE:77:7E:2E:85:BB:E9:F2:BD:47 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848D210E65CA0372C1D68FA8E00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 48737 IP address blocks: 138.113.254.0/24 maxlen: 24 138.113.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e6:5c:a0:37:2c:1d:68:fa:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3ed4bcd3-cc47-4f73-a2ab-52d52d5c4c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:cf:91:59:42:46:80:c2:45:48:54:27:c6: a3:88:91:ba:32:94:55:fb:37:07:cc:11:ea:f3:c5: 9e:af:6b:89:6c:bf:71:3d:52:94:c9:94:2c:5a:77: b9:94:cb:e7:06:b1:f2:18:9c:e7:bf:e1:21:6e:8c: 1b:23:b3:cb:db:8c:33:d6:76:e7:d6:25:8d:bb:e2: bb:7e:fc:e1:5c:07:45:f9:5c:10:04:18:49:82:7e: fe:f6:8d:54:b4:0a:6f:06:76:db:c9:21:77:52:62: e8:2a:ca:b2:9f:d8:24:e7:7d:a7:b6:fe:68:dc:ff: 5e:a4:ea:4c:a4:cf:fb:7d:aa:a7:ba:6f:0b:41:0d: db:92:4b:ac:a9:38:cc:9e:c0:21:53:b9:19:71:23: 2e:4a:07:1d:3c:a9:17:bd:d8:32:98:3e:a1:37:88: 17:6a:fc:17:32:a0:be:d8:8e:5b:ef:93:6e:bb:5f: c9:6c:f2:d7:b4:0d:2f:c7:42:8d:28:70:43:b1:29: d1:c1:d1:f2:28:69:2c:68:03:a2:b3:e5:91:8e:fa: a3:cd:6b:e3:a3:72:74:a6:ec:ad:cf:49:c7:eb:9e: cd:27:d8:5c:11:ed:11:68:39:bb:01:39:6e:b4:f4: 03:fb:4e:72:7b:ef:84:d0:82:b5:5d:8b:b8:71:87: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0B:A9:92:3F:D0:84:B7:20:CD:AE:77:7E:2E:85:BB:E9:F2:BD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c8:07:cd:77:17:32:3e:5e:3d:ff:d2:8a:99:36:55:7b:b1: fe:69:7a:25:8f:10:29:f4:f2:2d:08:de:c4:13:ca:36:17:34: 96:bb:7d:eb:8e:be:f1:21:85:76:98:28:ea:2b:cf:b4:30:e4: 5d:b5:f1:f6:f2:a6:85:c5:43:25:2a:16:c9:d0:94:25:65:d3: 9d:b6:5a:1f:09:e2:1e:48:59:f4:ff:08:f5:da:d5:e0:e9:ef: cc:32:33:2a:57:5d:14:a3:d7:3d:99:96:15:09:85:c3:f4:f7: d8:6b:20:bf:df:86:1f:f0:6d:04:3b:a7:11:45:4a:83:43:4e: c6:59:7f:5c:c1:3f:d8:7b:a3:74:8d:76:f9:23:fa:8e:59:b3: b1:14:5a:4d:bc:c4:00:02:37:7c:2f:6f:3c:cd:e3:33:fb:df: e8:b0:6f:9d:bc:89:23:37:2c:ed:da:57:1f:8e:3b:b0:78:0b: ed:0f:13:54:70:63:9e:23:db:10:33:24:0a:58:00:58:c3:81: 5d:f5:c0:08:cb:57:90:7e:96:81:a9:48:39:eb:1e:2d:e0:d7: 61:34:92:cc:46:4c:f1:1e:8a:d9:5f:6c:f0:cb:f7:04:97:f5: 35:e8:a8:f6:e7:c4:60:d8:ad:44:8b:db:a9:3d:b6:93:76:3d: ec:6d:82:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOZcoDcsHWj6jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2VkNGJjZDMtY2M0Ny00ZjczLWEyYWItNTJkNTJkNWM0Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzPkVlCRoDCRUhUJ8ajiJG6MpRV+zcHzBHq 88Wer2uJbL9xPVKUyZQsWne5lMvnBrHyGJznv+EhbowbI7PL24wz1nbn1iWNu+K7 fvzhXAdF+VwQBBhJgn7+9o1UtApvBnbbySF3UmLoKsqyn9gk532ntv5o3P9epOpM pM/7faqnum8LQQ3bkkusqTjMnsAhU7kZcSMuSgcdPKkXvdgymD6hN4gXavwXMqC+ 2I5b75Nuu1/JbPLXtA0vx0KNKHBDsSnRwdHyKGksaAOis+WRjvqjzWvjo3J0puyt z0nH657NJ9hcEe0RaDm7ATlutPQD+05ye++E0IK1XYu4cYcKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLELqZI/0IS3IM2ud34uhbvp8r1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTlhMmM4ODMtNDMzYS0z MDEwLTkwM2EtZTE4OTlkOGE2MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBinH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLIB813FzI+Xj3/0oqZNlV7sf5peiWPECn08i0I3sQTyjYXNJa7feuO vvEhhXaYKOorz7Qw5F218fbypoXFQyUqFsnQlCVl0522Wh8J4h5IWfT/CPXa1eDp 78wyMypXXRSj1z2ZlhUJhcP099hrIL/fhh/wbQQ7pxFFSoNDTsZZf1zBP9h7o3SN dvkj+o5Zs7EUWk28xAACN3wvbzzN4zP73+iwb528iSM3LO3aVx+OO7B4C+0PE1Rw Y54j2xAzJApYAFjDgV31wAjLV5B+loGpSDnrHi3g12E0ksxGTPEeitlfbPDL9wSX 9TXoqPbnxGDYrUSL26k9tpN2Pextgg4= -----END CERTIFICATE-----Generated at Wed Apr 9 08:09:49 2025 by rpki-client