$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa File: 87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json) Hash identifier: 3SGJ4SIAo6ByF7xbXWdfJ9b9AGvJOc6sED7hnzq0TNE= Subject key identifier: 5D:F6:D3:6A:0D:35:9E:73:73:2D:C7:33:09:D4:6A:8B:D7:5D:EB:F6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584BAD6252E7998A0F363BC2DE00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 54994 IP address blocks: 138.113.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:52:e7:99:8a:0f:36:3b:c2:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=948a46f5-3ba8-45ee-abff-c2bdc0ddab2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:83:a4:14:44:42:9d:c4:3e:c8:30:3d:4a: a8:72:50:98:23:99:dd:42:4f:cd:63:7b:e2:d9:b4: e9:c6:a0:c9:bb:d5:bf:c1:d8:6d:f0:d9:00:a5:82: 2b:5c:75:fa:eb:71:22:9c:48:08:18:59:1a:53:36: 05:80:f9:2c:4f:d4:11:49:48:fe:13:33:1a:1f:da: 5e:02:eb:4a:6f:36:eb:99:47:54:d0:79:82:85:e5: 25:39:82:b6:0e:8a:cb:29:13:fe:85:e1:df:db:84: 82:7c:18:cb:0d:d0:19:05:63:81:3b:d0:e7:20:f6: 0c:c9:ce:7f:43:c6:cb:cd:17:3a:b6:a9:45:02:ee: d6:34:b0:9e:c9:e2:fe:08:ec:8d:4a:43:48:5d:3f: 32:0e:5d:03:e1:a1:c7:6b:8f:c7:93:04:6e:5f:fb: b7:1b:01:cd:54:19:df:28:4f:ed:0a:97:a6:82:20: 09:51:9d:9d:7b:67:a8:ff:49:16:35:1b:97:5c:2d: 49:8a:e0:a8:0b:bc:e6:36:ff:47:0d:99:b8:73:95: 49:d4:03:d7:8e:c3:86:9b:98:88:66:08:94:57:91: 0c:82:66:b1:57:ba:d6:06:6f:70:e1:2e:f0:a3:96: 11:97:dd:46:b8:47:df:fc:c5:56:e4:91:46:2f:a1: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:D3:6A:0D:35:9E:73:73:2D:C7:33:09:D4:6A:8B:D7:5D:EB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d0:0c:55:77:e4:bb:33:3d:b0:a5:28:05:d5:99:42:e6:14: f7:94:ba:77:03:04:1e:ac:1a:27:55:c3:d1:2f:97:9d:7e:4f: 70:54:74:86:01:a0:64:c4:be:8e:68:86:e0:ac:33:0d:06:65: 66:dd:6e:2f:ed:24:72:dd:38:a7:91:4a:41:20:c4:db:4d:62: 17:bf:6c:f4:02:66:98:e6:bf:03:cf:63:39:de:a5:ac:d1:88: b0:37:cf:f5:9e:fb:dc:20:39:27:d7:e6:37:ad:b5:42:bf:28: cf:52:d0:e5:a0:8c:21:70:2f:13:32:cd:f2:34:e9:49:07:e7: 53:a6:67:3f:4d:19:17:64:9b:22:9f:bc:51:15:b8:1b:6d:fd: 23:b3:0d:a7:04:10:43:66:0a:8d:b2:36:85:29:4a:87:b0:9f: 33:ba:02:31:d4:91:c5:05:49:a7:2f:82:cf:33:84:55:59:af: 3c:0c:19:8d:02:d4:62:85:0c:bf:1e:13:5f:08:c3:e7:0b:c2: df:13:7e:b6:c0:b5:d0:0e:de:62:b5:5b:85:12:80:85:12:fa: 15:a7:6b:53:85:9c:e4:c2:36:fc:7a:81:a0:d7:3d:91:63:86: d0:35:2e:5b:c5:ea:28:53:b2:8c:69:67:f9:e5:b5:3a:4a:2d: b8:86:d2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlLnmYoPNjvC3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTQ4YTQ2ZjUtM2JhOC00NWVlLWFiZmYtYzJiZGMwZGRhYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCGDpBREQp3EPsgwPUqoclCYI5ndQk/NY3vi 2bTpxqDJu9W/wdht8NkApYIrXHX663EinEgIGFkaUzYFgPksT9QRSUj+EzMaH9pe AutKbzbrmUdU0HmCheUlOYK2DorLKRP+heHf24SCfBjLDdAZBWOBO9DnIPYMyc5/ Q8bLzRc6tqlFAu7WNLCeyeL+COyNSkNIXT8yDl0D4aHHa4/HkwRuX/u3GwHNVBnf KE/tCpemgiAJUZ2de2eo/0kWNRuXXC1JiuCoC7zmNv9HDZm4c5VJ1APXjsOGm5iI ZgiUV5EMgmaxV7rWBm9w4S7wo5YRl91GuEff/MVW5JFGL6HbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3202oNNZ5zcy3HMwnUaovXXev2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODc5MjFiMjYtM2U0ZC0z YmY1LWI4MmQtOTI2OTIzYzBmNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArQDFV35LszPbClKAXVmULmFPeUuncDBB6sGidVw9Evl51+T3BUdIYB oGTEvo5ohuCsMw0GZWbdbi/tJHLdOKeRSkEgxNtNYhe/bPQCZpjmvwPPYznepazR iLA3z/We+9wgOSfX5jettUK/KM9S0OWgjCFwLxMyzfI06UkH51OmZz9NGRdkmyKf vFEVuBtt/SOzDacEEENmCo2yNoUpSoewnzO6AjHUkcUFSacvgs8zhFVZrzwMGY0C 1GKFDL8eE18Iw+cLwt8TfrbAtdAO3mK1W4USgIUS+hWna1OFnOTCNvx6gaDXPZFj htA1LlvF6ihTsoxpZ/nltTpKLbiG0oQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:48:02 2025 by rpki-client