$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: /avzRWlkzfTVyF+kF3eASfsuWvoZdDIDhBB13TEYBLQ= Subject key identifier: D4:A5:40:2E:EE:8A:13:6A:37:B6:F3:F6:BA:55:51:DC:B9:43:FF:4A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584BB19262A0C24AD4FA92ECD880 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:62:a0:c2:4a:d4:fa:92:ec:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f71848f3-038e-4b4e-9439-5867b5ac85bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:be:25:df:b3:3f:f7:c7:05:4c:32:64:e8: 0c:b2:38:8f:57:4e:0a:d4:9e:5d:38:da:47:40:2e: ee:37:6a:0f:15:c6:27:96:50:41:2d:4f:82:52:56: e4:45:38:51:0d:b3:2a:fb:d3:4e:46:5c:62:20:63: 04:8b:55:46:81:a4:e8:94:a9:ab:c9:8c:96:fa:f7: 28:aa:38:06:2c:7c:97:29:1f:8c:ef:f5:74:a8:d8: 81:32:54:28:4f:fe:7c:49:d5:ca:88:6d:4c:d7:01: 78:ac:4c:e1:f7:f1:35:21:b9:c9:d8:da:fd:7c:76: 42:28:91:c3:c0:c7:cd:44:28:a7:fd:db:ee:66:c4: 49:06:d5:06:f9:d5:48:26:f4:90:74:59:44:2d:c1: c6:97:9b:e8:d5:eb:21:db:fa:1f:32:ca:b5:4a:c9: cd:0d:99:ad:95:36:57:29:50:8a:a9:5b:96:1b:2f: 03:99:ae:35:b9:cb:9a:f3:fe:81:cc:78:ee:f3:f2: 4e:14:ab:7a:ae:95:9c:72:9f:7b:ed:aa:88:60:1c: c1:12:1b:35:62:1d:cd:a4:7a:6e:f6:c8:1b:28:42: 1b:34:2a:04:13:40:66:33:b1:5b:8f:24:81:07:60: 95:c8:6e:3b:46:8b:4d:20:fa:17:82:b7:eb:bb:85: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A5:40:2E:EE:8A:13:6A:37:B6:F3:F6:BA:55:51:DC:B9:43:FF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ac:c7:d8:b6:40:0d:2c:91:73:ba:ce:a3:89:47:f7:79:88: e6:17:c5:de:a9:0d:9b:a3:24:a6:37:4a:ad:ef:05:6b:9f:bf: bb:f0:f2:22:52:84:cc:e3:55:10:d4:08:7a:09:14:b0:49:19: 8b:cc:32:b2:27:d2:e7:18:f2:c5:91:04:cf:b0:49:0e:22:a1: a5:7e:6a:f4:26:cb:e3:30:09:16:b0:8a:84:dd:0f:d5:13:17: 3d:d1:6a:e1:d1:97:25:ae:60:bc:d5:c8:3f:5f:7c:b6:39:37: 35:67:f8:7a:06:6d:55:6e:26:85:86:cd:9e:d9:36:3f:3e:e0: 4c:28:bb:a0:27:69:3c:a9:f2:28:da:81:a4:4a:54:59:1a:7c: 24:be:4c:61:b4:02:a5:3b:c7:52:84:3b:f6:cd:50:26:35:2c: ff:62:7b:b5:fc:f1:d7:2d:4d:1f:95:b3:e8:31:20:3a:a7:85: 85:80:86:91:b2:cf:c3:29:98:e2:82:7d:f7:fc:87:08:fe:d1: 40:13:c6:38:a0:ff:34:9b:9e:ca:7e:a0:40:b2:d2:08:10:41: e5:55:36:6e:20:88:7a:1f:2f:e4:98:bf:6f:14:72:6f:8b:66: 8b:e3:e1:da:ff:aa:80:07:d1:a2:d2:25:b1:84:28:73:75:9a: 32:31:38:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmKgwkrU+pLs2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjcxODQ4ZjMtMDM4ZS00YjRlLTk0MzktNTg2N2I1YWM4NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIy+Jd+zP/fHBUwyZOgMsjiPV04K1J5dONpH QC7uN2oPFcYnllBBLU+CUlbkRThRDbMq+9NORlxiIGMEi1VGgaTolKmryYyW+vco qjgGLHyXKR+M7/V0qNiBMlQoT/58SdXKiG1M1wF4rEzh9/E1IbnJ2Nr9fHZCKJHD wMfNRCin/dvuZsRJBtUG+dVIJvSQdFlELcHGl5vo1esh2/ofMsq1SsnNDZmtlTZX KVCKqVuWGy8Dma41ucua8/6BzHju8/JOFKt6rpWccp977aqIYBzBEhs1Yh3NpHpu 9sgbKEIbNCoEE0BmM7FbjySBB2CVyG47RotNIPoXgrfru4X5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSlQC7uihNqN7bz9rpVUdy5Q/9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWsx9i2QA0skXO6zqOJR/d5iOYXxd6pDZujJKY3Sq3vBWufv7vw8iJS hMzjVRDUCHoJFLBJGYvMMrIn0ucY8sWRBM+wSQ4ioaV+avQmy+MwCRawioTdD9UT Fz3RauHRlyWuYLzVyD9ffLY5NzVn+HoGbVVuJoWGzZ7ZNj8+4Ewou6AnaTyp8ija gaRKVFkafCS+TGG0AqU7x1KEO/bNUCY1LP9ie7X88dctTR+Vs+gxIDqnhYWAhpGy z8MpmOKCfff8hwj+0UATxjig/zSbnsp+oECy0ggQQeVVNm4giHofL+SYv28Ucm+L Zovj4dr/qoAH0aLSJbGEKHN1mjIxOEE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:53 2025 by rpki-client