$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: DEPmu/1esq3jz4njCLcRbes/hNoLLpo4pNPVN+F6zwo= Subject key identifier: D4:7A:8F:74:DA:F9:19:68:E6:8A:1B:75:AE:8C:A6:61:02:9F:0E:76 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584BA667A96BA331FA9DD458F800 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a9:6b:a3:31:fa:9d:d4:58:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=487f8a49-d943-43e8-927a-a5a55f543a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:f7:30:49:38:a8:fe:5e:e6:87:90:a2:99: 95:58:42:39:94:62:4b:aa:59:05:0d:85:5d:dd:b0: b5:7c:30:cb:7b:72:09:99:90:69:27:25:27:c8:e2: 1a:6a:5a:d8:75:67:d5:4b:6f:2b:e0:a1:d1:5f:9d: 3d:d7:86:26:d8:48:7d:ac:06:b4:72:15:4b:63:9b: 94:0d:d0:75:2e:7b:ac:37:26:c7:78:6b:72:9a:10: 32:4f:86:af:6c:49:78:87:45:03:50:4b:ae:dd:f2: 92:fc:19:1d:9a:3c:1c:73:5f:3a:3d:1f:c1:2d:ee: b3:7e:e4:a8:87:3b:23:2e:fe:bb:f9:84:6e:a9:e6: d4:73:f9:10:29:e8:fd:e6:6e:ce:a1:02:84:dd:73: 0b:d9:3b:ac:60:3b:14:f8:66:86:52:ad:59:32:33: 86:20:b0:8e:5c:94:61:89:97:49:56:23:9f:b6:1e: 09:62:c6:60:5b:0c:7b:5e:e2:1e:6f:21:50:5b:57: 97:6f:67:1e:6b:b4:26:85:12:36:0f:7f:03:68:c0: a0:15:5d:a9:f7:0d:39:a9:3f:76:29:4c:87:8c:dc: 46:35:a0:25:15:a1:4b:73:3a:29:6c:79:40:08:87: b6:49:88:54:62:1a:0c:b8:77:a5:45:4b:7b:d2:05: f9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:8F:74:DA:F9:19:68:E6:8A:1B:75:AE:8C:A6:61:02:9F:0E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c1:b7:b5:80:d9:7c:98:c5:d1:0d:3a:f7:d5:17:92:73:fc: 5b:4b:06:06:17:37:79:d3:05:cf:b6:28:c0:40:09:bb:50:c6: 21:ea:60:9a:c1:27:e8:9f:94:aa:e7:c1:2d:ea:7c:2e:a5:5e: 71:dd:cb:d2:42:05:4e:1b:0d:3c:dd:e8:c8:18:61:65:8f:3b: b3:be:c3:da:d2:f5:49:c3:59:70:a6:8d:d0:46:41:df:db:80: fb:d4:f2:dd:59:fa:5b:83:e1:6a:fa:35:75:c5:75:f1:9d:d6: 9e:f0:c3:84:8c:a2:18:6a:cc:e7:d8:f9:cd:aa:98:a4:f7:07: e4:ea:58:5b:9b:7f:29:6e:bf:79:e9:c1:96:d6:2e:4f:4d:95: 36:d9:90:17:da:f5:05:72:dc:ac:b1:68:1a:8d:f4:80:51:3a: ce:38:bd:a0:83:44:18:44:87:a2:82:76:bd:44:e4:1d:f6:be: 89:2e:93:ca:19:31:6a:6b:be:98:fe:42:04:9d:79:fd:67:d1: cd:63:13:42:ee:e1:39:9f:4a:69:25:fd:99:fc:06:2c:18:2c: 1e:1f:0d:76:b7:54:b0:6d:9e:55:0d:f7:37:c2:d0:88:1a:bb: 89:30:8e:3d:2a:c6:1c:d2:7c:2f:9f:01:54:5b:18:b4:93:fc: 53:bb:6e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6lrozH6ndRY+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NDg3ZjhhNDktZDk0My00M2U4LTkyN2EtYTVhNTVmNTQzYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFT3MEk4qP5e5oeQopmVWEI5lGJLqlkFDYVd 3bC1fDDLe3IJmZBpJyUnyOIaalrYdWfVS28r4KHRX50914Ym2Eh9rAa0chVLY5uU DdB1LnusNybHeGtymhAyT4avbEl4h0UDUEuu3fKS/Bkdmjwcc186PR/BLe6zfuSo hzsjLv67+YRuqebUc/kQKej95m7OoQKE3XML2TusYDsU+GaGUq1ZMjOGILCOXJRh iZdJViOfth4JYsZgWwx7XuIebyFQW1eXb2cea7QmhRI2D38DaMCgFV2p9w05qT92 KUyHjNxGNaAlFaFLczopbHlACIe2SYhUYhoMuHelRUt70gX5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR6j3Ta+Rlo5oobda6MpmECnw52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Bt7WA2XyYxdENOvfVF5Jz/FtLBgYXN3nTBc+2KMBACbtQxiHqYJrB J+iflKrnwS3qfC6lXnHdy9JCBU4bDTzd6MgYYWWPO7O+w9rS9UnDWXCmjdBGQd/b gPvU8t1Z+luD4Wr6NXXFdfGd1p7ww4SMohhqzOfY+c2qmKT3B+TqWFubfyluv3np wZbWLk9NlTbZkBfa9QVy3KyxaBqN9IBROs44vaCDRBhEh6KCdr1E5B32vokuk8oZ MWprvpj+QgSdef1n0c1jE0Lu4TmfSmkl/Zn8BiwYLB4fDXa3VLBtnlUN9zfC0Iga u4kwjj0qxhzSfC+fAVRbGLST/FO7btU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:07:55 2025 by rpki-client