$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: X+j7UOi/XHiUjQad7Frqsxb004f02oCqdfz6COLenTs= Subject key identifier: D1:6B:8A:5A:AB:D9:27:97:1C:8F:93:08:E2:F5:AA:8E:08:F6:5B:DA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F8DD85DFCFC18F2B00347C400 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:5d:fc:fc:18:f2:b0:03:47:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=af6926a2-f646-4fe2-97c8-a733cceb281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:55:57:b0:2f:32:cb:89:07:48:a8:cc:03: c5:96:9e:cb:0c:35:8c:b2:8c:eb:68:17:b2:64:60: 99:7e:15:c3:01:c5:2e:59:96:64:06:bb:72:1f:17: d0:68:f9:a8:62:ef:5f:7a:92:8a:8a:0c:24:6a:4a: e3:0b:c1:a9:17:01:2f:62:ae:16:5f:69:36:09:c3: ef:01:35:a3:47:08:d2:f3:66:66:9f:32:8b:ec:fe: 36:3c:c3:8d:d4:e0:62:69:31:04:66:ef:14:4d:0a: 97:da:e2:e7:0b:e0:36:54:43:e9:4d:1c:d8:21:9e: e2:84:d7:6b:63:ac:ec:30:5d:bf:75:02:1f:4c:f5: 4b:08:3b:e2:40:1c:c6:94:ab:6d:a3:48:6f:be:12: ec:4d:9d:cc:45:c5:26:a3:3c:7b:66:12:4c:53:ab: 8d:5e:9c:88:a4:35:77:9c:e3:0f:d7:45:fa:06:1e: 6a:77:62:1a:e7:91:ae:88:38:30:9f:f1:03:2c:e9: d1:c5:9c:4f:72:c0:55:5c:01:8f:db:c6:17:67:f0: f4:83:6c:59:a1:e6:01:21:31:a8:6e:bc:51:35:74: d0:4b:5e:f1:b4:e5:42:41:64:39:fb:ef:a4:5c:c7: c2:41:a6:a0:78:b0:bb:ee:49:26:ec:ca:01:c4:6b: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:8A:5A:AB:D9:27:97:1C:8F:93:08:E2:F5:AA:8E:08:F6:5B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:58:73:0a:ec:15:7f:47:8d:e1:19:c5:0d:6f:2b:97:bf: 2d:fa:55:e5:b8:83:66:ae:64:59:f7:97:66:b9:35:02:71:1d: 74:f0:9e:60:cc:c2:5d:f0:44:36:44:67:93:1b:08:e0:45:4a: 4e:8d:eb:f5:ca:9a:1b:18:17:b4:8e:ff:a9:a9:74:cc:0a:e4: 20:50:c2:95:df:c1:4e:00:ae:8b:94:08:a2:6d:94:41:64:c1: 0b:3b:52:2f:14:72:ac:1d:ec:44:b3:22:b3:4b:26:39:50:7e: 67:16:3b:11:f3:35:8b:b3:76:e6:9a:3b:c1:37:59:b7:49:f0: ff:ae:e6:bc:08:e8:9c:d3:cb:43:21:c5:33:72:86:62:f7:c8: 37:53:2d:5d:31:89:9e:d1:d7:38:e8:d7:af:a0:35:5d:53:20: 8d:e1:08:96:ed:07:8c:6d:07:ab:a1:5c:4c:20:31:50:ec:e5: f0:16:a4:c4:75:e6:90:ec:c3:b8:e1:87:a3:69:ea:e3:29:fd: 82:c2:e8:5f:59:76:08:a5:73:15:5a:8a:d0:90:4a:23:3d:6d: 58:a8:75:e1:50:dc:fb:c6:41:9a:1b:2a:fd:2b:e1:19:45:e5: 20:08:00:00:b5:d8:3f:96:91:4b:4d:10:80:b1:86:7d:8d:e4: 12:7d:c0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2F38/BjysANHxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk YWY2OTI2YTItZjY0Ni00ZmUyLTk3YzgtYTczM2NjZWIyODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/pVV7AvMsuJB0iozAPFlp7LDDWMsozraBey ZGCZfhXDAcUuWZZkBrtyHxfQaPmoYu9fepKKigwkakrjC8GpFwEvYq4WX2k2CcPv ATWjRwjS82ZmnzKL7P42PMON1OBiaTEEZu8UTQqX2uLnC+A2VEPpTRzYIZ7ihNdr Y6zsMF2/dQIfTPVLCDviQBzGlKtto0hvvhLsTZ3MRcUmozx7ZhJMU6uNXpyIpDV3 nOMP10X6Bh5qd2Ia55GuiDgwn/EDLOnRxZxPcsBVXAGP28YXZ/D0g2xZoeYBITGo brxRNXTQS17xtOVCQWQ5+++kXMfCQaageLC77kkm7MoBxGvGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFrilqr2SeXHI+TCOL1qo4I9lvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPLWHMK7BV/R43hGcUNbyuXvy36VeW4g2auZFn3l2a5NQJxHXTwnmDM wl3wRDZEZ5MbCOBFSk6N6/XKmhsYF7SO/6mpdMwK5CBQwpXfwU4ArouUCKJtlEFk wQs7Ui8Ucqwd7ESzIrNLJjlQfmcWOxHzNYuzduaaO8E3WbdJ8P+u5rwI6JzTy0Mh xTNyhmL3yDdTLV0xiZ7R1zjo16+gNV1TII3hCJbtB4xtB6uhXEwgMVDs5fAWpMR1 5pDsw7jhh6Np6uMp/YLC6F9ZdgilcxVaitCQSiM9bViodeFQ3PvGQZobKv0r4RlF 5SAIAAC12D+WkUtNEICxhn2N5BJ9wHk= -----END CERTIFICATE-----Generated at Mon Oct 19 23:49:31 2026 by rpki-client