$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3d1bf549-3cdf-3ef6-b292-77b36c380629.roa File: 3d1bf549-3cdf-3ef6-b292-77b36c380629.roa (raw, json) Hash identifier: tIz6IMubQVAh7c5DIJ81KxVoPEcf/fKiawZhAtxEe3U= Subject key identifier: 64:0F:81:57:93:3D:9B:90:FD:BC:4C:A3:31:5E:4E:0F:98:27:28:30 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D8695811B94A5EC9E9A471980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3d1bf549-3cdf-3ef6-b292-77b36c380629.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 54994 IP address blocks: 138.113.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:81:1b:94:a5:ec:9e:9a:47:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=d8d87b64-ed70-428e-a99c-3778a282bb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:8c:f6:9c:9e:1d:75:bb:fc:40:8a:c6:82: 17:0a:86:c1:62:ee:bc:d3:d0:84:52:33:97:35:d3: 33:0b:43:7b:b0:81:31:91:7d:ea:13:4f:1d:64:a3: d4:42:f0:b5:00:31:6e:ea:a6:7f:e8:fb:4b:ac:35: d2:85:f6:5a:39:bd:15:ff:47:97:cc:cb:9f:5b:2d: da:53:47:13:4f:c5:3f:33:67:6f:cd:e1:2d:1c:b1: ac:6d:16:da:ad:16:5b:98:7a:ad:c5:ff:09:89:c6: 10:82:da:27:a5:31:80:d5:c5:fe:47:90:92:58:f6: 3d:19:2d:47:85:9d:5f:3e:19:9b:9f:1c:0c:64:0c: 9d:b5:e9:bb:b9:e1:bd:e7:92:3e:69:fe:50:5d:a1: 59:b5:12:ee:86:86:ee:b4:4a:b1:88:67:06:00:6c: d0:fb:ee:a6:86:a3:15:10:0e:be:7f:4c:56:9d:57: 1d:8a:97:b6:8c:3a:00:3d:8f:23:7d:c7:6f:43:4d: e8:b1:99:2b:e7:18:d4:10:ba:f5:b9:27:a7:a8:34: 56:0a:38:ac:05:5a:c9:d9:ed:e8:bf:99:b9:79:07: 02:18:ce:58:1c:02:87:fa:55:a4:f3:2c:85:bc:84: fe:18:f2:8e:95:0b:f7:fc:14:48:8b:60:32:a2:81: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0F:81:57:93:3D:9B:90:FD:BC:4C:A3:31:5E:4E:0F:98:27:28:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3d1bf549-3cdf-3ef6-b292-77b36c380629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c6:52:6d:a0:b3:7e:2e:77:1e:54:58:f8:d2:fe:d1:6c:00: 8a:bf:70:f7:67:86:c6:9b:ef:8d:d7:98:bd:ce:25:b9:bd:70: 9e:83:6b:9f:27:b9:21:80:21:18:1d:21:35:c3:d9:80:d4:5d: c1:0a:25:50:5d:b1:2c:4f:53:94:55:28:c5:d7:b5:81:0a:f7: 3a:73:01:44:79:56:6f:4a:79:cf:63:ea:29:2c:3d:d2:64:c4: 5e:f0:34:d0:d4:31:e6:d4:9a:57:58:ff:70:7b:6b:4c:44:22: 82:be:5b:7d:48:93:c7:1a:14:34:95:dd:2f:e4:f1:39:22:ea: 4e:a2:a0:6e:2b:a4:cf:88:43:3e:ea:06:5e:e8:ac:d0:2f:0c: f0:6c:79:cf:f6:bd:ad:62:42:65:58:c3:9b:ee:54:34:45:9e: 7f:c6:72:2f:41:71:82:c4:07:3d:c6:5c:4e:20:fe:68:67:16: b2:fc:57:af:a1:2a:03:59:80:ec:11:01:b6:1c:8a:6f:ff:f1: d9:a1:aa:fd:5f:a3:7e:79:45:a4:ac:a6:9f:5a:ad:64:0a:f9: 84:fb:89:b9:26:5a:19:b8:8f:8e:4a:08:3a:63:87:28:bb:8d: 39:c2:2c:2e:f6:25:dd:17:ba:64:8b:dd:12:77:e8:e4:2a:d9: c7:79:06:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlYEblKXsnppHGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZDhkODdiNjQtZWQ3MC00MjhlLWE5OWMtMzc3OGEyODJiYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iM9pyeHXW7/ECKxoIXCobBYu6809CEUjOX NdMzC0N7sIExkX3qE08dZKPUQvC1ADFu6qZ/6PtLrDXShfZaOb0V/0eXzMufWy3a U0cTT8U/M2dvzeEtHLGsbRbarRZbmHqtxf8JicYQgtonpTGA1cX+R5CSWPY9GS1H hZ1fPhmbnxwMZAydtem7ueG955I+af5QXaFZtRLuhobutEqxiGcGAGzQ++6mhqMV EA6+f0xWnVcdipe2jDoAPY8jfcdvQ03osZkr5xjUELr1uSenqDRWCjisBVrJ2e3o v5m5eQcCGM5YHAKH+lWk8yyFvIT+GPKOlQv3/BRIi2AyooHZ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQPgVeTPZuQ/bxMozFeTg+YJygwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvM2QxYmY1NDktM2NkZi0z ZWY2LWIyOTItNzdiMzZjMzgwNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinE3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjGUm2gs34udx5UWPjS/tFsAIq/cPdnhsab743XmL3OJbm9cJ6Da58n uSGAIRgdITXD2YDUXcEKJVBdsSxPU5RVKMXXtYEK9zpzAUR5Vm9Kec9j6iksPdJk xF7wNNDUMebUmldY/3B7a0xEIoK+W31Ik8caFDSV3S/k8Tki6k6ioG4rpM+IQz7q Bl7orNAvDPBsec/2va1iQmVYw5vuVDRFnn/Gci9BcYLEBz3GXE4g/mhnFrL8V6+h KgNZgOwRAbYcim//8dmhqv1fo355RaSspp9arWQK+YT7ibkmWhm4j45KCDpjhyi7 jTnCLC72Jd0XumSL3RJ36OQq2cd5BpY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:16 2026 by rpki-client