$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa File: e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json) Hash identifier: 4RpoYkImTka+ZBP0xe+BCuN2ujXwrPS+mIZfBNc5rjE= Subject key identifier: 93:7B:BE:D1:5F:3C:7C:7F:54:3A:B8:7A:38:4F:07:9A:BA:B6:49:19 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AE89131F3FC27445FA8E67EF0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 54994 IP address blocks: 138.113.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:31:f3:fc:27:44:5f:a8:e6:7e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=c39029f1-655d-4a98-9b11-a4b89aa6e444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:09:c1:01:e3:0b:a5:d5:a5:f3:96:00:9d:78: a7:6f:34:60:54:d6:2f:81:0d:94:fc:86:d7:f9:ea: 76:d9:e0:88:a7:59:49:4b:3e:33:17:47:f8:49:c5: e0:4a:16:2c:db:94:cf:e9:93:99:79:bf:14:5f:71: 87:94:d2:30:80:88:5f:0b:da:69:90:e1:a2:06:9e: f4:ab:ea:25:89:9e:38:91:04:4d:78:58:2f:a6:55: 60:a6:5f:bc:47:8a:f1:34:3a:66:ec:38:0c:34:9c: 51:e1:f0:ac:ba:85:bc:4f:85:bd:cb:c3:3c:8f:1e: 2e:4d:0c:a4:24:c7:c4:5c:91:c6:2b:62:3f:bd:bf: c3:a0:ca:7c:94:4b:8a:65:ee:af:9f:ae:cf:a7:3b: f2:4b:b1:47:cd:53:95:67:7c:25:d5:01:08:6d:bf: 34:e9:f8:db:28:53:69:26:4f:a8:83:c2:73:f9:fc: bd:bb:73:7f:75:64:bf:47:23:b9:b1:59:dd:6e:64: ca:cf:36:83:ad:ff:a4:e1:ba:af:7f:4b:49:1a:7c: 5c:09:04:66:04:9b:95:bc:f8:c5:8c:7d:4d:c3:58: d7:63:0a:06:ba:f4:58:24:af:22:30:b7:db:3a:2b: fe:0b:9c:8b:50:ef:61:fe:4c:47:31:f6:29:8e:e8: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7B:BE:D1:5F:3C:7C:7F:54:3A:B8:7A:38:4F:07:9A:BA:B6:49:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a3:5e:02:dc:5f:cf:f1:0c:e0:74:f9:08:d5:91:d5:1e:66: 27:91:f4:1b:cd:29:08:5c:ce:6d:67:d9:3a:92:0f:93:8b:2e: 7b:a5:97:84:74:11:16:19:ca:29:43:97:3a:7b:29:5c:5c:a3: 77:30:05:24:b0:45:03:19:49:47:0f:b3:81:21:ae:73:f4:cc: 6c:0d:db:69:65:78:d8:b3:8b:c2:53:6e:9b:56:4d:f6:3d:46: fe:f0:36:bb:64:6d:92:3b:4c:98:b1:d1:3e:aa:eb:e2:ba:18: ea:75:73:87:d3:a0:c1:22:4a:4a:d6:c5:c7:dd:85:a2:b7:2f: d6:cc:86:10:e1:ce:4b:15:2b:6b:fe:59:47:3c:04:3c:0f:c2: 2e:bc:a0:13:1e:c4:de:09:42:a7:76:04:2c:b2:5f:68:45:dd: 74:a1:bd:7d:a0:26:fa:61:f2:0a:2e:18:76:3b:66:99:e4:6f: 0a:ea:c6:c8:b3:96:f0:8e:bc:cb:51:7b:59:55:3c:41:29:af: 7a:89:73:65:d6:bc:db:a0:89:6e:38:da:b0:19:ad:67:50:90: 1d:3a:5c:c6:70:63:cb:fc:78:bb:4f:cb:36:b5:cb:bb:00:48: 48:76:d2:91:89:0a:c4:a4:08:56:fe:69:7d:d1:ed:a4:8f:3b: ff:37:91:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTHz/CdEX6jmfvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YzM5MDI5ZjEtNjU1ZC00YTk4LTliMTEtYTRiODlhYTZlNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQnBAeMLpdWl85YAnXinbzRgVNYvgQ2U/IbX +ep22eCIp1lJSz4zF0f4ScXgShYs25TP6ZOZeb8UX3GHlNIwgIhfC9ppkOGiBp70 q+oliZ44kQRNeFgvplVgpl+8R4rxNDpm7DgMNJxR4fCsuoW8T4W9y8M8jx4uTQyk JMfEXJHGK2I/vb/DoMp8lEuKZe6vn67PpzvyS7FHzVOVZ3wl1QEIbb806fjbKFNp Jk+og8Jz+fy9u3N/dWS/RyO5sVndbmTKzzaDrf+k4bqvf0tJGnxcCQRmBJuVvPjF jH1Nw1jXYwoGuvRYJK8iMLfbOiv+C5yLUO9h/kxHMfYpjuiL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJN7vtFfPHx/VDq4ejhPB5q6tkkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTg1ZmEyMmMtYjdkNi0z ZmE3LTk5MjktZDFjMjQyMTYyOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABajXgLcX8/xDOB0+QjVkdUeZieR9BvNKQhczm1n2TqSD5OLLnull4R0 ERYZyilDlzp7KVxco3cwBSSwRQMZSUcPs4EhrnP0zGwN22lleNizi8JTbptWTfY9 Rv7wNrtkbZI7TJix0T6q6+K6GOp1c4fToMEiSkrWxcfdhaK3L9bMhhDhzksVK2v+ WUc8BDwPwi68oBMexN4JQqd2BCyyX2hF3XShvX2gJvph8gouGHY7Zpnkbwrqxsiz lvCOvMtRe1lVPEEpr3qJc2XWvNugiW442rAZrWdQkB06XMZwY8v8eLtPyza1y7sA SEh20pGJCsSkCFb+aX3R7aSPO/83kXk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:33:35 2025 by rpki-client