$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa File: 53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa (raw, json) Hash identifier: i9iJxsDnjBBI/Dv/XM0pFYr+rd5qK8LDP20m2KIZXJM= Subject key identifier: 83:2E:F6:9C:5F:FF:97:56:36:F8:48:5C:6F:5D:5D:70:BA:C7:65:67 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584BB19262767E397E1426131480 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 54994 IP address blocks: 138.113.15.0/24 maxlen: 24 138.113.74.0/24 maxlen: 24 138.113.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:62:76:7e:39:7e:14:26:13:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3c20a2ba-a005-4088-93c9-6707a3d822a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:bb:dc:24:6e:37:dd:60:12:85:a4:35:d2: 55:18:ba:42:7d:4b:4d:83:1e:a7:90:90:22:fa:48: 44:ab:27:14:72:66:7f:4b:94:e9:ad:34:41:21:2a: d9:e9:6c:3e:3f:a9:8f:bd:d0:0e:63:75:3a:c8:62: 24:d8:3f:e5:5e:ea:69:89:1a:a3:e3:be:d0:2b:5c: 2e:50:7f:d3:66:a9:47:9e:91:b1:88:23:11:4f:f7: a0:d4:c7:1f:86:86:32:f6:74:e8:35:5d:55:dc:fd: 4b:c9:5c:36:45:b9:e5:df:61:44:ab:5e:e6:7d:40: 3c:0f:75:1f:f3:d6:82:98:c4:0a:57:44:d4:c7:b8: da:6e:5d:e3:e5:0e:ae:c2:47:18:6c:40:ea:95:23: 5c:54:49:61:76:9e:51:b0:e2:bb:cd:21:4a:5f:19: fc:e3:e7:6b:3a:f3:65:b8:07:cd:ec:7c:21:ce:51: fa:d3:1c:a3:1c:6a:58:e9:c2:d4:22:e9:2c:d0:89: e1:c9:95:ca:58:34:60:5d:f5:b4:d5:51:fd:6b:ac: 69:c7:07:47:f1:ae:c9:4c:ae:21:39:e2:a0:97:39: 93:7a:20:61:af:27:91:38:ec:28:64:09:b7:c4:70: 7c:87:11:ac:9f:e2:41:dc:e0:79:46:d1:62:ac:fc: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2E:F6:9C:5F:FF:97:56:36:F8:48:5C:6F:5D:5D:70:BA:C7:65:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.15.0/24 138.113.74.0/24 138.113.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:87:9d:78:c3:d4:22:be:ed:1b:db:7b:d5:06:de:e7:90: 72:62:59:8c:bc:88:79:f3:65:c5:e2:65:26:b7:db:24:92:90: fd:cc:1d:50:52:1e:6b:12:fe:14:92:e7:9d:ad:3d:57:de:ca: 5b:1e:4e:0a:e8:d9:23:a9:af:99:60:4b:df:22:45:b0:b1:be: d8:18:ea:8e:07:19:07:c7:40:b9:32:2f:bd:ab:de:92:9c:4c: d2:55:8a:1e:b9:40:94:92:55:5b:02:a5:fe:49:cd:e6:2c:1f: 97:3b:01:8f:fa:30:c9:3e:ff:28:a0:db:9a:e6:2d:e4:0a:1c: 33:f3:bc:4a:d7:77:62:1e:85:6d:60:ed:95:04:0d:ee:89:69: 7b:3c:b5:91:2e:40:5d:50:25:11:5d:01:0d:52:8e:8f:29:67: 3e:1d:c2:e8:87:bd:ec:51:3f:15:52:e1:9f:fe:37:ff:c8:0f: d5:a9:cb:70:66:9e:70:9c:b6:1b:3c:ff:8b:ee:9d:c5:27:6f: 46:df:cf:2b:ab:b1:64:92:6a:9b:1f:af:5c:eb:c5:da:54:25: 1f:00:18:65:d8:3a:36:2c:2a:8a:2a:eb:81:38:57:1b:e2:7c: 60:3c:74:e6:db:67:99:95:82:18:ae:8c:d2:f7:63:99:0e:f1: 91:96:8b:a1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuxkmJ2fjl+FCYTFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk M2MyMGEyYmEtYTAwNS00MDg4LTkzYzktNjcwN2EzZDgyMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySq73CRuN91gEoWkNdJVGLpCfUtNgx6nkJAi +khEqycUcmZ/S5TprTRBISrZ6Ww+P6mPvdAOY3U6yGIk2D/lXuppiRqj477QK1wu UH/TZqlHnpGxiCMRT/eg1McfhoYy9nToNV1V3P1LyVw2Rbnl32FEq17mfUA8D3Uf 89aCmMQKV0TUx7jabl3j5Q6uwkcYbEDqlSNcVElhdp5RsOK7zSFKXxn84+drOvNl uAfN7HwhzlH60xyjHGpY6cLUIuks0InhyZXKWDRgXfW01VH9a6xpxwdH8a7JTK4h OeKglzmTeiBhryeROOwoZAm3xHB8hxGsn+JB3OB5RtFirPy+jwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIMu9pxf/5dWNvhIXG9dXXC6x2VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNTNhNzRmYjMtOGIzZC0z ZmZhLTllNmUtMGZkN2RkYjE0NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAinEPAwQA inFKAwQAinFWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGPPh514w9Qivu0b23vVBt7nkHJiWYy8iHnzZcXi ZSa32ySSkP3MHVBSHmsS/hSS552tPVfeylseTgro2SOpr5lgS98iRbCxvtgY6o4H GQfHQLkyL72r3pKcTNJVih65QJSSVVsCpf5JzeYsH5c7AY/6MMk+/yig25rmLeQK HDPzvErXd2IehW1g7ZUEDe6JaXs8tZEuQF1QJRFdAQ1Sjo8pZz4dwuiHvexRPxVS 4Z/+N//ID9Wpy3BmnnCcths8/4vuncUnb0bfzyursWSSapsfr1zrxdpUJR8AGGXY OjYsKooq64E4VxvifGA8dObbZ5mVghiujNL3Y5kO8ZGWi6E= -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:07 2025 by rpki-client