$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: w8BLzx7MEII8YHJE3oSDq3PbhEGAZEt3JUEgwfayJSM= Subject key identifier: EE:C4:2B:EC:5B:39:4E:D7:2B:98:74:0A:6E:E1:9E:06:CF:C7:78:AF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848D7A651865A54804D0CB04B70 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:51:86:5a:54:80:4d:0c:b0:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=3250f40b-80c1-4b95-8a66-2e46cf63309f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:d6:1f:df:94:ef:d1:30:11:a9:ba:c6:3b: 4e:d4:ba:c7:27:c4:2d:bc:07:82:ac:ab:24:20:84: b9:19:33:97:54:f4:af:f9:7c:1a:1c:a7:6b:00:f4: b7:71:c2:9b:57:76:fa:5b:f2:71:f5:4d:18:a4:e4: 1c:ca:0a:6d:a9:89:86:46:6f:87:b3:fb:fc:95:59: e1:75:d2:03:68:85:9d:73:16:71:17:a4:a0:1a:b7: cd:34:8e:70:5d:a6:e8:0c:13:cd:d4:e5:de:a2:27: d2:d8:71:46:b7:c1:60:35:66:cd:df:0d:50:99:d9: 3e:75:66:38:5d:61:5a:48:96:33:2f:e0:dd:c5:a0: bf:8e:15:f8:21:9d:50:4f:05:92:16:83:6a:b8:7c: 95:1c:bc:8c:f5:ac:da:2c:90:a7:4f:9d:a5:cc:99: 88:23:5f:89:72:c3:9b:d6:96:20:91:e0:ad:91:6c: 08:17:0d:25:6b:15:69:00:de:98:3a:20:84:c2:f5: 50:82:00:73:23:55:d7:4c:28:33:dd:05:e3:fc:38: 52:7f:aa:ea:57:75:e2:94:39:16:2c:a7:ad:96:7b: d7:1c:fa:87:5c:bf:a8:25:99:dd:95:0b:a9:38:c3: a0:f7:e8:a2:1b:c8:bc:09:b5:fe:ce:37:ce:8a:7b: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:2B:EC:5B:39:4E:D7:2B:98:74:0A:6E:E1:9E:06:CF:C7:78:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5a:8b:38:6a:0f:19:c3:83:27:28:92:74:a5:ef:66:f6:af: 7d:46:f7:89:7d:19:ca:2f:ae:c6:52:d8:45:e6:38:43:f9:86: bb:81:0e:ea:29:5f:cb:3d:56:ac:0e:14:65:e2:30:6b:18:5b: 1e:23:3a:7a:75:fd:5e:ac:4b:32:fc:a5:2b:35:bd:18:17:2f: a5:b0:d6:82:70:8b:c0:30:2d:e5:35:ec:9a:f5:6e:e4:e9:bb: b7:fb:55:60:a3:77:42:4b:48:9b:3b:13:76:9c:0b:8f:05:eb: f4:23:6f:26:25:ff:b1:3b:95:88:43:bd:41:00:87:70:a6:8c: 4d:7d:ee:11:13:de:8f:3b:b5:e4:ce:36:37:dd:8c:92:7c:f9: 3f:91:72:8a:7c:1a:30:ab:b5:17:97:f9:71:af:fd:a9:45:27: d5:bc:ce:10:a3:8a:b3:95:8c:5f:bc:96:6b:69:33:77:05:eb: 8e:83:1a:7c:18:2b:14:57:13:36:02:7a:b2:69:f2:e5:a7:e1: 30:04:e9:8f:c3:95:40:95:40:e2:4f:ef:a2:a7:a2:fa:6e:23: aa:23:87:c9:ea:12:b8:43:da:e1:b8:94:71:6f:f3:be:4f:28: 7a:9d:89:4b:2a:a5:1c:60:8b:3b:c2:75:9e:ba:c8:a3:d7:66: 2b:b6:f5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplGGWlSATQywS3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MzI1MGY0MGItODBjMS00Yjk1LThhNjYtMmU0NmNmNjMzMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/rWH9+U79EwEam6xjtO1LrHJ8QtvAeCrKsk IIS5GTOXVPSv+XwaHKdrAPS3ccKbV3b6W/Jx9U0YpOQcygptqYmGRm+Hs/v8lVnh ddIDaIWdcxZxF6SgGrfNNI5wXaboDBPN1OXeoifS2HFGt8FgNWbN3w1Qmdk+dWY4 XWFaSJYzL+DdxaC/jhX4IZ1QTwWSFoNquHyVHLyM9azaLJCnT52lzJmII1+JcsOb 1pYgkeCtkWwIFw0laxVpAN6YOiCEwvVQggBzI1XXTCgz3QXj/DhSf6rqV3XilDkW LKetlnvXHPqHXL+oJZndlQupOMOg9+iiG8i8CbX+zjfOins4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7EK+xbOU7XK5h0Cm7hngbPx3ivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBaizhqDxnDgycoknSl72b2r31G94l9GcovrsZS2EXmOEP5hruBDuop X8s9VqwOFGXiMGsYWx4jOnp1/V6sSzL8pSs1vRgXL6Ww1oJwi8AwLeU17Jr1buTp u7f7VWCjd0JLSJs7E3acC48F6/QjbyYl/7E7lYhDvUEAh3CmjE197hET3o87teTO NjfdjJJ8+T+Rcop8GjCrtReX+XGv/alFJ9W8zhCjirOVjF+8lmtpM3cF646DGnwY KxRXEzYCerJp8uWn4TAE6Y/DlUCVQOJP76KnovpuI6ojh8nqErhD2uG4lHFv875P KHqdiUsqpRxgizvCdZ66yKPXZiu29YA= -----END CERTIFICATE-----Generated at Sun Feb 16 21:08:30 2025 by rpki-client