$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: F3acw+bqGI7dMXsh0HHEXtynxyrtOXNsXYItDFkjeJ0= Subject key identifier: BD:A5:6D:B6:E5:DC:28:E0:D7:C9:49:FF:6C:5C:17:26:6E:33:26:57 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E15E46B7A521EAE44910D6000 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:6b:7a:52:1e:ae:44:91:0d:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=f90cfbb7-7543-4b5c-ad98-bb7981143f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:2e:05:9b:b4:f8:07:24:97:b9:dd:fa:17: 70:84:3f:3d:d0:ce:e3:5c:e5:0f:2b:fe:bb:4a:ff: c4:3d:b9:c2:1d:f1:37:1d:b6:f8:f2:07:b7:f9:0e: 49:48:2f:c2:88:15:f9:d2:1e:36:f5:2a:9d:c5:66: 7b:c3:dc:78:75:dd:93:6f:13:0b:56:7a:5c:16:48: a7:64:2d:04:93:b4:61:c7:d0:47:6d:cf:48:f1:2e: 55:f0:6a:da:a6:ac:e4:98:11:3c:2f:9c:97:ef:9d: 1a:73:70:a5:b0:bd:fb:a4:f8:2e:b4:dc:96:7b:05: 5e:fe:3c:54:a8:bf:e8:75:1f:75:d9:de:28:60:21: 6c:90:0b:74:1e:44:a7:dd:78:f6:43:1a:f7:40:dc: a3:97:be:57:de:2e:0a:75:ec:41:80:d9:e1:c7:e2: 69:e7:f8:87:9a:af:34:b4:0a:7e:b6:b2:b5:36:31: 8f:d8:96:9d:f0:91:02:6a:11:69:fc:02:ba:53:48: f5:a8:64:ce:bf:23:d9:70:e1:08:d2:b9:22:ce:20: 36:69:a7:e3:36:51:a1:b8:53:ee:31:48:1e:d0:a8: 9f:ae:3a:1c:f7:22:95:c4:b9:34:66:c9:a6:0d:d9: c3:87:ba:24:38:46:ab:75:41:fb:fb:bd:c9:d1:f4: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A5:6D:B6:E5:DC:28:E0:D7:C9:49:FF:6C:5C:17:26:6E:33:26:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:76:49:41:d4:bb:d3:8e:e7:96:25:63:88:1a:49:c1:e1:6c: 84:da:5e:40:be:f3:ee:20:c7:fb:e4:47:4c:d5:1d:9d:01:ed: 7a:a1:50:90:75:ee:8d:88:0e:0d:74:96:84:e2:10:a3:89:c4: 30:88:cd:32:8f:c5:aa:dd:02:10:e4:6e:db:37:78:f8:9f:19: 4c:1a:1f:a8:1f:fe:a2:1c:dc:eb:15:77:09:cb:30:97:da:e4: f3:12:5c:ce:31:05:dc:63:a9:81:46:41:ac:3d:47:41:26:15: d4:05:52:b8:96:00:fb:19:a8:49:05:97:da:67:89:32:12:8e: 65:90:c8:52:eb:73:47:36:22:81:0a:54:59:9e:b7:99:29:e9: ba:d8:a3:87:ea:25:5c:a6:4d:76:4a:aa:51:87:32:1e:60:0f: 2e:a1:5c:f5:fd:8c:ca:f0:4d:96:2f:9e:d9:4b:b9:90:0d:4b: 35:4d:90:e9:1d:6c:e1:98:33:45:a3:b1:a8:64:2a:18:00:b8: 8d:03:98:66:a7:7f:09:d8:ef:e1:8c:9b:af:5c:df:12:81:4c: e8:65:fb:58:d4:6f:43:1c:46:1b:d5:f5:54:fc:c8:fe:b2:a3: 94:b4:27:cb:01:a1:c3:17:fa:7c:c3:10:08:fa:f6:b3:e5:d1: 08:cf:51:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5Gt6Uh6uRJENYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk ZjkwY2ZiYjctNzU0My00YjVjLWFkOTgtYmI3OTgxMTQzZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkakuBZu0+Ackl7nd+hdwhD890M7jXOUPK/67 Sv/EPbnCHfE3Hbb48ge3+Q5JSC/CiBX50h429SqdxWZ7w9x4dd2TbxMLVnpcFkin ZC0Ek7Rhx9BHbc9I8S5V8GrapqzkmBE8L5yX750ac3ClsL37pPgutNyWewVe/jxU qL/odR912d4oYCFskAt0HkSn3Xj2Qxr3QNyjl75X3i4KdexBgNnhx+Jp5/iHmq80 tAp+trK1NjGP2Jad8JECahFp/AK6U0j1qGTOvyPZcOEI0rkiziA2aafjNlGhuFPu MUge0Kifrjoc9yKVxLk0ZsmmDdnDh7okOEardUH7+73J0fRjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2lbbbl3Cjg18lJ/2xcFyZuMyZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ2SUHUu9OO55YlY4gaScHhbITaXkC+8+4gx/vkR0zVHZ0B7XqhUJB1 7o2IDg10loTiEKOJxDCIzTKPxardAhDkbts3ePifGUwaH6gf/qIc3OsVdwnLMJfa 5PMSXM4xBdxjqYFGQaw9R0EmFdQFUriWAPsZqEkFl9pniTISjmWQyFLrc0c2IoEK VFmet5kp6brYo4fqJVymTXZKqlGHMh5gDy6hXPX9jMrwTZYvntlLuZANSzVNkOkd bOGYM0WjsahkKhgAuI0DmGanfwnY7+GMm69c3xKBTOhl+1jUb0McRhvV9VT8yP6y o5S0J8sBocMX+nzDEAj69rPl0QjPUfc= -----END CERTIFICATE-----Generated at Sat Jun 13 20:11:45 2026 by rpki-client