$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: Gtgz1WCD4Ic2sItSPFuJSgTYZcmpG/C2D97Oc1Clrs0= Subject key identifier: D3:C8:CC:14:9F:00:CA:23:5A:0C:DF:7C:19:A2:A8:9F:87:16:85:08 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D71A50E07CA0FC3CB82364580 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0e:07:ca:0f:c3:cb:82:36:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=289779ff-a8a6-4d1a-882f-5501b8357dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2e:0e:0d:9b:8d:76:5b:f7:eb:99:21:08:22: 4a:4d:e5:79:28:15:84:20:54:97:8a:9d:65:bb:7e: 95:f2:b5:49:24:80:26:1b:cb:1b:e5:df:79:51:1e: f0:89:fb:44:9b:2d:5c:50:f6:48:3a:ac:42:41:b5: 93:70:6e:91:25:47:fe:08:ba:2f:f8:f3:98:69:88: 8b:07:ea:20:59:dd:04:34:d1:5c:ae:27:2b:4b:90: 39:b5:d1:d1:88:aa:74:3a:19:31:fd:0c:bd:3e:85: e1:12:93:5b:0c:6b:be:05:b7:11:d3:1c:f0:32:4c: 80:c1:4d:14:31:93:a4:92:09:a9:2a:e3:14:91:05: a3:b1:53:2d:7f:cd:ab:e5:3b:41:4d:84:bb:ed:ef: b4:80:c3:f7:3b:31:96:e5:d6:ee:da:f0:53:77:4e: 31:95:ea:31:19:18:87:b2:43:86:40:27:1f:2e:4b: d0:34:a6:ff:ea:44:d5:db:30:d0:8f:34:b6:ca:f5: c3:5c:91:45:69:8f:c5:ef:4f:f6:d3:b9:57:c4:dd: 65:cd:6e:47:2b:c8:44:5d:4b:ca:05:88:04:22:c1: 0a:ee:4a:2d:b2:6e:c9:89:41:10:33:33:9e:34:a9: f0:20:80:f4:ef:23:65:5a:6e:70:a6:d2:7a:6c:0c: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:CC:14:9F:00:CA:23:5A:0C:DF:7C:19:A2:A8:9F:87:16:85:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9a:00:7d:24:ef:7b:ca:eb:b1:b7:62:0e:34:d0:01:61:eb: 1b:d0:f9:d2:ae:ec:06:a9:3f:66:71:40:9f:4b:80:36:4f:40: 7c:83:80:7e:84:b5:fa:70:f4:65:2d:dc:b5:33:8b:d8:8d:b7: 89:fc:8e:a3:e1:6a:8b:3c:17:c7:52:6b:7f:e6:0b:2b:f4:c8: fb:10:46:7b:db:d4:75:bb:42:15:69:93:da:d2:e4:e6:05:f9: 6f:13:54:71:6f:61:61:20:e2:35:ab:a8:4b:92:d5:cb:e3:27: 3e:da:41:74:a6:ce:b3:87:3b:6d:7b:cf:7c:3d:e7:c5:c4:23: 41:c4:3a:71:da:c9:db:67:03:0f:aa:6c:aa:01:d1:18:1d:42: 9a:1c:ae:a7:ad:23:b4:ef:d6:7b:91:1e:3c:d6:31:44:b0:9d: c0:10:7e:4b:83:c3:ac:3c:bd:e0:b1:d6:dd:55:a2:66:7e:b5: ef:5d:f4:3d:6a:04:98:24:96:06:3f:e1:9d:9d:19:fd:94:e7: 3a:14:8c:45:d9:e8:d8:6a:81:d9:4d:50:20:50:e3:f6:a2:6a: 3c:0b:c9:8f:ec:ca:a3:a9:90:7d:93:c2:25:6f:9d:70:14:21: 4e:c2:0e:0e:fa:31:c7:e8:7f:84:4c:b3:f9:33:69:d9:12:ef: 25:60:de:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ4Hyg/Dy4I2RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Mjg5Nzc5ZmYtYThhNi00ZDFhLTg4MmYtNTUwMWI4MzU3ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS4ODZuNdlv365khCCJKTeV5KBWEIFSXip1l u36V8rVJJIAmG8sb5d95UR7wiftEmy1cUPZIOqxCQbWTcG6RJUf+CLov+POYaYiL B+ogWd0ENNFcricrS5A5tdHRiKp0Ohkx/Qy9PoXhEpNbDGu+BbcR0xzwMkyAwU0U MZOkkgmpKuMUkQWjsVMtf82r5TtBTYS77e+0gMP3OzGW5dbu2vBTd04xleoxGRiH skOGQCcfLkvQNKb/6kTV2zDQjzS2yvXDXJFFaY/F70/207lXxN1lzW5HK8hEXUvK BYgEIsEK7kotsm7JiUEQMzOeNKnwIID07yNlWm5wptJ6bAwRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPIzBSfAMojWgzffBmiqJ+HFoUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCaAH0k73vK67G3Yg400AFh6xvQ+dKu7AapP2ZxQJ9LgDZPQHyDgH6E tfpw9GUt3LUzi9iNt4n8jqPhaos8F8dSa3/mCyv0yPsQRnvb1HW7QhVpk9rS5OYF +W8TVHFvYWEg4jWrqEuS1cvjJz7aQXSmzrOHO217z3w958XEI0HEOnHaydtnAw+q bKoB0RgdQpocrqetI7Tv1nuRHjzWMUSwncAQfkuDw6w8veCx1t1VomZ+te9d9D1q BJgklgY/4Z2dGf2U5zoUjEXZ6NhqgdlNUCBQ4/aiajwLyY/syqOpkH2TwiVvnXAU IU7CDg76Mcfof4RMs/kzadkS7yVg3hg= -----END CERTIFICATE-----Generated at Fri Apr 17 11:07:55 2026 by rpki-client