$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa File: cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa (raw, json) Hash identifier: S1k4VccAh5XSdA225EI4pXN0dS7XY5GRFCSwiaDadOc= Subject key identifier: 0E:AE:4C:A2:26:5B:F9:4E:16:9F:26:F9:D3:F1:25:15:5B:A9:34:A9 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D8100A9ABDA05946938CDC080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 54994 IP address blocks: 138.113.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:a9:ab:da:05:94:69:38:cd:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=941a77f0-8fb0-4104-81f1-7fcfc98e03cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:b6:c5:7e:26:a0:bf:16:c7:e3:fe:58:b5: cc:be:f2:84:e7:e7:df:fc:71:49:cc:3c:e9:50:c7: a7:76:7d:47:64:d1:0a:d7:a6:86:fd:ce:8f:36:b4: f6:5f:e1:55:0b:1a:c8:ac:04:3d:31:41:e8:5f:2b: e6:be:14:16:46:fa:22:12:64:04:b3:75:14:3b:a9: f0:4c:fd:c8:af:20:ac:a3:60:14:96:d5:e8:e7:09: 16:d5:54:45:a8:d4:8a:3f:08:24:b0:0e:84:f9:ad: 4b:e7:c3:72:6b:9e:a1:4e:c3:3a:4a:93:fe:d3:04: 0e:30:94:fb:62:bf:7a:b1:9b:1c:a1:89:7a:3d:03: b6:65:a0:27:55:d3:89:2e:38:5a:1b:8f:2c:2d:45: 1e:38:d4:42:34:6a:6f:01:ba:a6:3a:8d:f1:6f:b3: ff:8c:c6:86:8e:fd:08:98:0a:f6:2a:49:86:c2:b1: c5:97:98:f1:81:88:94:9a:dc:83:0c:af:6e:ae:9c: f1:36:5e:8d:20:cc:26:85:60:91:1f:d8:11:8e:63: 22:b5:69:a3:fa:fd:ce:79:db:2f:0a:84:1a:4d:aa: e0:dc:25:da:8d:d0:d8:37:13:c3:24:97:32:d2:e0: 52:e1:af:a5:13:e6:22:55:5e:c0:38:05:81:83:e4: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:4C:A2:26:5B:F9:4E:16:9F:26:F9:D3:F1:25:15:5B:A9:34:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:61:35:42:f1:a2:d0:52:9d:1b:0d:7a:19:17:2a:88:e2:ab: 9d:fa:0b:86:77:08:f2:27:64:2e:ca:9e:01:a7:7d:d5:99:8c: 81:54:ce:ff:26:e4:ea:fd:20:3b:b6:40:63:f5:7a:4b:4b:a2: 43:b1:d7:cd:5e:75:2b:fc:21:16:1a:89:a7:4e:6b:b4:64:fa: f1:b6:0a:cf:44:9c:fb:fe:1e:bf:4f:5a:df:0d:14:14:8d:8c: f1:11:d7:7e:97:99:ea:c4:a1:03:34:69:bb:70:b1:b6:91:23: 31:e5:8b:d9:fa:4f:69:6f:0e:25:3f:a3:3b:2b:19:fb:ed:40: 9f:14:ee:d2:77:cd:7d:89:1f:7c:5b:12:05:03:77:32:84:cf: b0:15:51:92:94:00:2f:4a:45:11:76:1e:c9:55:c2:59:70:26: 3a:46:47:97:38:e0:f2:61:6f:9b:f2:95:e6:c6:d8:99:38:15: ad:c6:ee:10:ba:8a:0c:47:a3:83:a0:7f:0a:fd:96:1f:b5:ad: ae:d5:4b:7e:eb:a9:76:54:e1:41:f4:90:cc:c3:00:29:13:e7: fc:98:18:2d:1b:05:d3:1e:05:53:f2:13:67:4e:95:a0:7b:9b: bf:0c:6a:b5:33:de:ef:32:5d:34:46:c1:82:eb:09:6e:54:e5: 3a:fb:81:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAKmr2gWUaTjNwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OTQxYTc3ZjAtOGZiMC00MTA0LTgxZjEtN2ZjZmM5OGUwM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfC2xX4moL8Wx+P+WLXMvvKE5+ff/HFJzDzp UMendn1HZNEK16aG/c6PNrT2X+FVCxrIrAQ9MUHoXyvmvhQWRvoiEmQEs3UUO6nw TP3IryCso2AUltXo5wkW1VRFqNSKPwgksA6E+a1L58Nya56hTsM6SpP+0wQOMJT7 Yr96sZscoYl6PQO2ZaAnVdOJLjhaG48sLUUeONRCNGpvAbqmOo3xb7P/jMaGjv0I mAr2KkmGwrHFl5jxgYiUmtyDDK9urpzxNl6NIMwmhWCRH9gRjmMitWmj+v3Oedsv CoQaTarg3CXajdDYNxPDJJcy0uBS4a+lE+YiVV7AOAWBg+TCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6uTKImW/lOFp8m+dPxJRVbqTSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvY2ZlNTZkZGUtNjhjZC0z NzVjLThhNTctMzNhM2NlZWI4MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGthNULxotBSnRsNehkXKojiq536C4Z3CPInZC7KngGnfdWZjIFUzv8m 5Or9IDu2QGP1ektLokOx181edSv8IRYaiadOa7Rk+vG2Cs9EnPv+Hr9PWt8NFBSN jPER136XmerEoQM0abtwsbaRIzHli9n6T2lvDiU/ozsrGfvtQJ8U7tJ3zX2JH3xb EgUDdzKEz7AVUZKUAC9KRRF2HslVwllwJjpGR5c44PJhb5vylebG2Jk4Fa3G7hC6 igxHo4Ogfwr9lh+1ra7VS37rqXZU4UH0kMzDACkT5/yYGC0bBdMeBVPyE2dOlaB7 m78MarUz3u8yXTRGwYLrCW5U5Tr7ge4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:23 2026 by rpki-client