$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa File: e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json) Hash identifier: LY7aZ2rDlzPkAZ6MRvmWbkgU9tundqCVNlUxTj0PQfI= Subject key identifier: EE:C5:66:BC:CD:0C:06:76:1A:58:B0:48:90:5F:13:70:4C:71:62:E7 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F0D6CEA5F4C3707CB0212C340 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 138.113.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ea:5f:4c:37:07:cb:02:12:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=70d88c7e-1abf-4536-8de2-5d4668f1d588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:43:d2:1c:0a:cd:3f:34:f5:9b:f9:9e:b2: 8f:25:1d:01:2d:94:5c:8b:bd:95:2f:e7:68:35:5b: a8:0b:0c:8a:8e:fc:f9:d6:41:9e:27:1f:f3:19:bd: 90:c4:66:19:52:ea:e4:75:46:0b:2c:8c:79:e6:8b: e0:5b:dd:d2:70:19:1d:a2:a8:a2:1c:e4:12:de:5c: 03:ac:ec:d3:91:d6:88:8c:9b:ee:20:d9:ea:4a:e6: 08:f1:e3:98:46:30:79:b8:ef:d1:aa:4b:8f:41:b3: b8:43:dc:24:fb:53:98:0a:36:cf:7e:96:49:cf:5a: 3d:78:c6:3e:9a:36:fa:4e:57:f7:1e:2a:06:c0:47: a6:74:eb:60:80:0f:78:cf:f4:53:94:8f:42:22:03: d0:4b:c0:e9:71:f4:30:7c:59:0a:7c:87:40:7a:13: 84:49:91:16:26:49:a4:51:a1:e7:8c:97:4c:0a:6e: b3:cd:d6:c7:c9:59:fc:4f:45:10:cb:42:57:72:9b: ea:02:7b:3d:5a:16:16:da:2a:fa:b7:82:f3:6c:60: 71:bd:2d:fb:c5:0a:84:d9:b5:c0:0e:ee:3a:24:73: 9f:b9:6f:d8:51:87:45:91:5b:05:31:90:42:b3:de: 08:7b:e3:c5:56:57:4c:4f:6f:29:d0:95:a3:31:80: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:66:BC:CD:0C:06:76:1A:58:B0:48:90:5F:13:70:4C:71:62:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4e:27:6b:97:01:57:db:67:eb:d8:60:6e:bd:59:0f:0f:39: 88:3b:fd:d1:cd:6b:01:fb:d9:60:1a:cf:ae:09:0c:c0:9f:34: a3:57:5d:dd:3f:60:62:7d:17:72:47:86:e7:6c:3b:da:de:5c: f1:aa:2f:92:11:84:33:5d:16:31:da:7a:73:ab:90:bd:85:21: a0:2d:ac:13:45:68:bf:7b:9e:72:c4:0f:28:ce:45:10:42:d2: 2e:9d:f3:33:fa:d2:be:7b:2a:de:cb:18:62:8f:a7:35:c8:02: f4:a0:78:29:be:72:a8:99:f9:fe:dc:42:3b:e2:ad:1e:a6:cb: 7b:8a:b6:43:32:fe:3e:47:79:26:ea:0f:63:e8:cd:53:dc:58: 75:da:97:1a:3a:7c:ae:07:aa:a1:cc:2d:b2:c6:f0:ca:bf:82: 64:b2:c2:a1:96:44:cf:d6:c8:4c:34:ba:e7:c2:07:b8:c1:e4: 6e:42:cc:eb:ca:3d:e1:68:e9:e6:80:c5:62:61:21:76:8d:4b: 61:c7:ef:e4:40:25:b5:0d:85:19:65:1c:c0:64:23:2d:0e:e2: 83:70:35:6f:7c:1c:b2:f1:8b:c4:35:1c:9b:f2:bf:47:34:66: 25:72:11:bc:3a:f0:1b:64:11:c0:51:48:39:a9:be:5a:71:89: a5:fc:0a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOpfTDcHywISw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NzBkODhjN2UtMWFiZi00NTM2LThkZTItNWQ0NjY4ZjFkNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRhD0hwKzT809Zv5nrKPJR0BLZRci72VL+do NVuoCwyKjvz51kGeJx/zGb2QxGYZUurkdUYLLIx55ovgW93ScBkdoqiiHOQS3lwD rOzTkdaIjJvuINnqSuYI8eOYRjB5uO/RqkuPQbO4Q9wk+1OYCjbPfpZJz1o9eMY+ mjb6Tlf3HioGwEemdOtggA94z/RTlI9CIgPQS8DpcfQwfFkKfIdAehOESZEWJkmk UaHnjJdMCm6zzdbHyVn8T0UQy0JXcpvqAns9WhYW2ir6t4LzbGBxvS37xQqE2bXA Du46JHOfuW/YUYdFkVsFMZBCs94Ie+PFVldMT28p0JWjMYDwDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7FZrzNDAZ2GliwSJBfE3BMcWLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTg1ZmEyMmMtYjdkNi0z ZmE3LTk5MjktZDFjMjQyMTYyOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtOJ2uXAVfbZ+vYYG69WQ8POYg7/dHNawH72WAaz64JDMCfNKNXXd0/ YGJ9F3JHhudsO9reXPGqL5IRhDNdFjHaenOrkL2FIaAtrBNFaL97nnLEDyjORRBC 0i6d8zP60r57Kt7LGGKPpzXIAvSgeCm+cqiZ+f7cQjvirR6my3uKtkMy/j5HeSbq D2PozVPcWHXalxo6fK4HqqHMLbLG8Mq/gmSywqGWRM/WyEw0uufCB7jB5G5CzOvK PeFo6eaAxWJhIXaNS2HH7+RAJbUNhRllHMBkIy0O4oNwNW98HLLxi8Q1HJvyv0c0 ZiVyEbw68BtkEcBRSDmpvlpxiaX8Cug= -----END CERTIFICATE-----Generated at Sat Sep 5 06:32:15 2026 by rpki-client