$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa File: bea768c2-af77-37bd-8d5b-cd5161a35234.roa (raw, json) Hash identifier: jl8lsRarnxE13qcF2iq43Dr1QKxaqnXAzw2LEdF6gik= Subject key identifier: BA:3F:91:30:79:67:8C:6A:47:DB:20:32:4A:AC:E7:04:79:3D:D2:8A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D75D51C36DE4449A88D38F380 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 54994 IP address blocks: 138.113.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:1c:36:de:44:49:a8:8d:38:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=ea05c32c-cde7-4bc3-b903-dbc1131f2cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:ce:73:d3:9e:14:ba:02:2c:04:91:c5:61: b8:f4:08:66:17:28:dd:78:f8:be:f5:c9:92:79:2c: 2a:ac:e2:d5:be:1f:8e:35:46:c8:07:fa:5c:9e:25: a1:b3:78:fb:c6:81:a2:8f:39:84:7d:dd:04:3f:fc: 85:a3:5d:10:b1:6e:8b:7d:65:35:cc:19:bc:60:89: b4:60:b1:4d:fe:71:26:c3:c5:14:d9:66:c0:46:8e: 08:51:d2:aa:fd:80:a4:5a:b6:ca:9e:e1:08:93:2a: 8f:6c:a4:80:f8:74:9a:a3:08:f1:e7:55:e1:e1:e8: 7f:46:78:24:f8:f5:09:44:11:2b:c6:bd:d2:bb:84: 7a:c7:18:12:4c:ac:61:2a:3b:2d:f1:28:06:ce:4b: ec:7a:d4:aa:e9:dd:25:74:e0:2d:69:54:ef:15:a4: 84:3a:f8:53:30:5e:08:11:e1:87:11:cc:48:85:be: 23:5f:08:dc:fc:3b:69:9d:0a:47:f1:24:d4:86:d1: b2:72:01:29:53:3b:cc:41:7e:4a:dc:bf:78:db:89: 8d:e6:09:72:b2:b8:f7:6c:09:ad:66:ec:2f:f3:15: 25:9f:f0:d1:d4:89:86:89:11:d9:b9:11:55:65:54: 07:3e:ec:0d:23:14:40:2b:36:91:cb:f8:1a:13:d1: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3F:91:30:79:67:8C:6A:47:DB:20:32:4A:AC:E7:04:79:3D:D2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:80:c1:4f:b2:1b:05:78:a3:f6:b2:cd:ca:c4:e9:62:a1:15: 71:0d:1e:e7:46:3b:a9:62:61:4a:21:29:d7:a8:2b:35:bc:25: 3c:7e:04:c5:48:bf:a2:e9:c9:c2:b1:72:b0:91:ba:51:d7:82: 44:82:7f:f3:a3:66:1e:2d:c8:86:27:56:25:de:07:b8:9e:7f: f1:82:48:57:82:12:a3:f2:d9:26:1e:c6:d7:a9:a4:a7:18:f9: 1d:f6:d2:c1:16:04:3c:35:fd:9b:36:9c:ea:a7:30:ce:2c:60: 3b:ec:16:c2:28:00:d9:74:dd:d6:0f:a6:83:43:23:15:ff:9a: a6:df:84:2f:34:bf:9e:25:b4:42:19:37:3a:e1:5f:4a:e7:66: 5b:19:9d:a4:54:c9:51:79:21:60:e9:ec:b3:59:3d:c4:c0:67: 15:6c:81:e5:a7:8d:0b:7a:22:49:fa:51:01:ae:04:dd:61:44: 94:df:93:83:91:ae:cc:cf:6e:1c:f6:73:3e:de:1c:2c:de:5a: ec:b8:78:22:6e:da:2e:32:66:b6:cf:2a:08:78:09:70:45:37: b1:42:89:91:8e:44:a6:1f:6a:04:9f:dc:ae:cc:e0:06:c5:6a: 3d:35:f9:34:f8:bf:ac:3f:11:21:ce:67:39:42:7d:e7:b8:42: bd:16:47:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111Rw23kRJqI0484AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZWEwNWMzMmMtY2RlNy00YmMzLWI5MDMtZGJjMTEzMWYyY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6HOc9OeFLoCLASRxWG49AhmFyjdePi+9cmS eSwqrOLVvh+ONUbIB/pcniWhs3j7xoGijzmEfd0EP/yFo10QsW6LfWU1zBm8YIm0 YLFN/nEmw8UU2WbARo4IUdKq/YCkWrbKnuEIkyqPbKSA+HSaowjx51Xh4eh/Rngk +PUJRBErxr3Su4R6xxgSTKxhKjst8SgGzkvsetSq6d0ldOAtaVTvFaSEOvhTMF4I EeGHEcxIhb4jXwjc/DtpnQpH8STUhtGycgEpUzvMQX5K3L9424mN5glysrj3bAmt Zuwv8xUln/DR1ImGiRHZuRFVZVQHPuwNIxRAKzaRy/gaE9EksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo/kTB5Z4xqR9sgMkqs5wR5PdKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYmVhNzY4YzItYWY3Ny0z N2JkLThkNWItY2Q1MTYxYTM1MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmAwU+yGwV4o/ayzcrE6WKhFXENHudGO6liYUohKdeoKzW8JTx+BMVI v6LpycKxcrCRulHXgkSCf/OjZh4tyIYnViXeB7ief/GCSFeCEqPy2SYexteppKcY +R320sEWBDw1/Zs2nOqnMM4sYDvsFsIoANl03dYPpoNDIxX/mqbfhC80v54ltEIZ NzrhX0rnZlsZnaRUyVF5IWDp7LNZPcTAZxVsgeWnjQt6Ikn6UQGuBN1hRJTfk4OR rszPbhz2cz7eHCzeWuy4eCJu2i4yZrbPKgh4CXBFN7FCiZGORKYfagSf3K7M4AbF aj01+TT4v6w/ESHOZzlCfee4Qr0WR6E= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:05 2026 by rpki-client