$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa File: bea768c2-af77-37bd-8d5b-cd5161a35234.roa (raw, json) Hash identifier: gLPJLqhwLhoOUktlD0RHE8OhzO0gn7bpsgB3evgClCU= Subject key identifier: 32:F4:DB:C2:7F:D3:74:72:D8:C3:0D:D1:49:04:E3:CB:DA:77:72:21 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EF87CB586D097DA424B920300 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 54994 IP address blocks: 138.113.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b5:86:d0:97:da:42:4b:92:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=d4c51141-1d67-4b04-bee6-de2dde76907d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:c2:d3:09:51:85:cf:2d:1d:a1:08:78:04: 6c:78:52:8d:f1:bc:8f:6d:96:9e:d5:e9:4f:a8:24: 19:7f:15:d1:a7:5d:7b:53:2c:d0:9a:01:7a:a1:26: 69:a2:96:74:31:b2:2d:95:22:54:ff:56:e3:09:99: e3:dc:ab:ff:f4:ff:fe:ad:a9:b4:35:87:1a:5a:8e: bc:9d:0d:dc:c5:b2:a7:56:94:20:ac:0c:c7:a2:a7: b2:9a:f0:d4:06:16:15:9a:fb:30:41:69:45:47:1d: 83:64:9d:e7:da:85:1e:d0:e2:db:76:fc:d4:db:1d: fa:39:c6:ed:e9:70:6c:97:13:fd:40:63:10:89:a9: e1:61:dd:02:1f:f2:ab:32:aa:ea:81:e8:c6:02:7b: 28:fd:1a:dd:8b:df:ab:4a:02:e8:a8:24:87:8b:e3: d0:ec:4a:31:6e:29:6a:bd:0d:02:5d:ea:99:83:c0: 44:a7:02:31:eb:f9:d3:91:ed:cf:ea:99:97:6a:0f: 02:4f:58:55:db:7d:60:49:31:e7:ab:ae:7b:65:0f: 28:c3:9c:6d:77:73:47:59:93:67:21:a4:0c:4b:30: 31:c9:00:ed:23:29:15:77:a2:cf:c8:13:ef:44:5b: d3:5d:5e:d2:0f:96:fd:f8:20:b8:3b:66:72:cf:a0: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F4:DB:C2:7F:D3:74:72:D8:C3:0D:D1:49:04:E3:CB:DA:77:72:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bea768c2-af77-37bd-8d5b-cd5161a35234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:23:21:97:97:cf:83:6c:8a:bd:98:9a:31:af:3b:c3:06:be: 89:03:ec:c0:42:41:85:b1:59:61:12:27:f2:a0:b1:cb:7a:f6: 3f:c4:27:53:1d:0e:59:e0:ac:9b:69:57:40:d3:ff:5b:85:25: 3a:ab:77:db:f9:11:21:35:0a:dd:24:6a:42:30:a5:0a:07:83: e9:03:3c:e7:04:db:95:2f:31:d8:87:fb:2f:f9:15:41:5f:62: 0d:ba:56:15:b3:cb:56:c1:d0:65:e8:75:32:ea:06:a6:20:aa: ef:2c:df:25:f0:35:45:fc:1a:45:82:cc:17:c5:18:61:16:65: bc:b5:c9:9f:87:c6:ca:7a:91:00:52:be:6e:bf:78:54:f1:23: f4:51:59:7d:18:8c:fa:8d:4e:ed:d5:80:a5:6e:51:2e:29:b7: da:c1:a1:47:ac:da:14:48:9d:b2:3f:aa:a7:6e:1c:79:b8:a9: b3:a9:e3:bb:5f:02:63:ba:41:77:c0:d8:b0:1c:28:b3:99:ac: 43:4c:7f:b6:83:10:d2:0f:12:83:92:49:99:64:ef:a5:3e:2d: a1:fe:6a:9f:89:6f:a8:72:ed:0c:6e:7f:cd:04:ff:0b:b8:84: b8:0b:5e:6f:75:56:f1:d7:2f:04:fa:c7:fb:22:ae:78:2e:7c: 3c:c5:29:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLWG0JfaQkuSAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDRjNTExNDEtMWQ2Ny00YjA0LWJlZTYtZGUyZGRlNzY5MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h7C0wlRhc8tHaEIeARseFKN8byPbZae1elP qCQZfxXRp117UyzQmgF6oSZpopZ0MbItlSJU/1bjCZnj3Kv/9P/+ram0NYcaWo68 nQ3cxbKnVpQgrAzHoqeymvDUBhYVmvswQWlFRx2DZJ3n2oUe0OLbdvzU2x36Ocbt 6XBslxP9QGMQianhYd0CH/KrMqrqgejGAnso/Rrdi9+rSgLoqCSHi+PQ7Eoxbilq vQ0CXeqZg8BEpwIx6/nTke3P6pmXag8CT1hV231gSTHnq657ZQ8ow5xtd3NHWZNn IaQMSzAxyQDtIykVd6LPyBPvRFvTXV7SD5b9+CC4O2Zyz6BY0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL028J/03Ry2MMN0UkE48vad3IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYmVhNzY4YzItYWY3Ny0z N2JkLThkNWItY2Q1MTYxYTM1MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8jIZeXz4Nsir2YmjGvO8MGvokD7MBCQYWxWWESJ/Kgsct69j/EJ1Md DlngrJtpV0DT/1uFJTqrd9v5ESE1Ct0kakIwpQoHg+kDPOcE25UvMdiH+y/5FUFf Yg26VhWzy1bB0GXodTLqBqYgqu8s3yXwNUX8GkWCzBfFGGEWZby1yZ+Hxsp6kQBS vm6/eFTxI/RRWX0YjPqNTu3VgKVuUS4pt9rBoUes2hRInbI/qqduHHm4qbOp47tf AmO6QXfA2LAcKLOZrENMf7aDENIPEoOSSZlk76U+LaH+ap+Jb6hy7Qxuf80E/wu4 hLgLXm91VvHXLwT6x/sirngufDzFKYI= -----END CERTIFICATE-----Generated at Sat Sep 5 06:32:19 2026 by rpki-client