$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: 1q1nXlPWipJGrwcofiuzCpo+aUE/3J0L377S/XmraVU= Subject key identifier: AC:5C:D4:88:8D:29:59:0C:B4:2F:12:82:F1:3D:8E:7A:13:01:A1:52 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EF44CB38676BDB67D8EFCFA00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b3:86:76:bd:b6:7d:8e:fc:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=ae16a2ef-f9f4-4966-a1a2-3cc6c726d19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:55:9c:ea:b5:59:5e:be:cf:f0:e4:bd:2e: 53:38:c0:1c:23:02:37:84:57:b3:db:46:9a:7d:0f: ff:ef:a9:4b:6b:1e:07:01:d1:83:5d:26:47:18:5a: 9f:90:4c:ef:47:b8:25:23:fa:8f:7f:42:55:55:9c: 0c:c2:6f:47:e2:a3:7b:81:87:1b:e5:85:30:6c:41: 1c:ac:b3:f1:0c:e0:30:89:f7:50:5d:57:a7:57:89: d5:e3:c6:3b:d7:d0:0f:c1:cd:f7:23:a3:e4:01:b2: 3c:75:7f:c2:f9:28:97:e9:25:0f:65:80:59:db:fc: 19:97:c1:61:55:a7:34:3b:77:32:1c:ab:e4:81:3c: 2a:44:cd:5e:de:1e:c7:d4:d2:3d:b0:cf:ab:f7:5b: a0:bb:91:72:5f:a7:68:94:31:62:44:0f:c0:49:9a: 22:96:08:2d:c4:ae:01:af:83:c9:74:f7:8c:71:34: ef:76:77:99:1a:4f:bc:9e:ae:be:54:36:f8:e3:92: 7b:74:2f:d0:a2:55:85:40:74:fb:7e:00:e7:64:8e: 5e:c8:11:f7:fd:3b:27:53:06:ca:aa:90:10:f6:8f: 15:40:33:d7:4b:64:c1:ca:6a:92:58:8a:0b:91:64: df:44:3c:ea:42:fc:24:38:d2:7e:4f:91:0a:b6:e8: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:D4:88:8D:29:59:0C:B4:2F:12:82:F1:3D:8E:7A:13:01:A1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:22:59:38:1e:0e:99:c3:6f:61:e6:20:94:9b:93:9a:8b:69: 94:2c:b0:a8:e3:79:9f:8f:45:9b:74:7d:86:4e:8b:d1:fe:1e: 3e:22:e5:12:70:91:85:2f:01:5e:dd:8a:21:fe:be:ef:59:66: f9:94:79:4c:4c:78:2f:89:40:54:4d:d2:b8:37:f4:95:2f:54: 69:0e:0c:f8:11:8d:a6:20:98:4c:78:95:10:93:05:79:8e:7b: 0a:18:b9:62:d7:87:67:11:06:03:6b:c9:57:3f:3a:b6:45:97: b8:52:0b:f5:f3:f8:e1:96:b9:0f:67:60:6c:c8:06:c3:ba:ef: e8:e5:9e:b6:40:e7:27:fa:65:a3:3f:1d:1f:a6:11:17:43:6f: 53:0a:ba:be:22:a4:a2:29:7d:42:85:d6:3c:8f:e2:9b:8d:a9: fd:12:ac:4b:da:95:9a:ff:85:7e:09:e7:ed:33:b8:b1:10:f1: e6:48:73:46:5e:a8:b1:3b:86:a1:88:69:0d:4c:4f:85:eb:e6: 20:73:99:47:96:f8:4e:f3:a0:91:03:a9:17:fa:b1:47:27:ce: be:c0:15:d6:4c:7a:19:ea:ab:99:68:7c:75:cd:89:96:68:6a: 02:42:49:11:cb:9d:78:74:52:1b:f4:63:9c:af:a9:77:a0:56: ee:45:c0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLOGdr22fY78+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWUxNmEyZWYtZjlmNC00OTY2LWExYTItM2NjNmM3MjZkMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaxVnOq1WV6+z/DkvS5TOMAcIwI3hFez20aa fQ//76lLax4HAdGDXSZHGFqfkEzvR7glI/qPf0JVVZwMwm9H4qN7gYcb5YUwbEEc rLPxDOAwifdQXVenV4nV48Y719APwc33I6PkAbI8dX/C+SiX6SUPZYBZ2/wZl8Fh Vac0O3cyHKvkgTwqRM1e3h7H1NI9sM+r91ugu5FyX6dolDFiRA/ASZoilggtxK4B r4PJdPeMcTTvdneZGk+8nq6+VDb445J7dC/QolWFQHT7fgDnZI5eyBH3/TsnUwbK qpAQ9o8VQDPXS2TBymqSWIoLkWTfRDzqQvwkONJ+T5EKtuj/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxc1IiNKVkMtC8SgvE9jnoTAaFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYiWTgeDpnDb2HmIJSbk5qLaZQssKjjeZ+PRZt0fYZOi9H+Hj4i5RJw kYUvAV7diiH+vu9ZZvmUeUxMeC+JQFRN0rg39JUvVGkODPgRjaYgmEx4lRCTBXmO ewoYuWLXh2cRBgNryVc/OrZFl7hSC/Xz+OGWuQ9nYGzIBsO67+jlnrZA5yf6ZaM/ HR+mERdDb1MKur4ipKIpfUKF1jyP4puNqf0SrEvalZr/hX4J5+0zuLEQ8eZIc0Ze qLE7hqGIaQ1MT4Xr5iBzmUeW+E7zoJEDqRf6sUcnzr7AFdZMehnqq5lofHXNiZZo agJCSRHLnXh0Uhv0Y5yvqXegVu5FwGo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:18:41 2026 by rpki-client