$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa File: e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json) Hash identifier: xerrisfgtNUGNQlZMTJ5WHFaol3rawK6TkxDQ4oDK/Y= Subject key identifier: 5A:BF:F4:85:01:4F:3C:3A:86:D1:56:FD:26:AF:EE:74:E3:BA:2A:0C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E6B0A1EBF780A807438ACAB88 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 54994 IP address blocks: 138.113.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:1e:bf:78:0a:80:74:38:ac:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=4e926216-c1d2-4f14-aa45-95f38ddef377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:82:1e:dc:01:87:fa:59:4e:e1:3d:8d:5e: 8d:bd:47:ef:f2:90:54:69:79:13:de:67:bf:06:3f: 60:1b:76:fe:cf:a5:22:6f:4b:55:78:45:27:d2:2b: c7:1e:e1:d8:1c:9a:9e:c8:f2:15:d5:65:22:49:32: 10:3b:38:2d:ca:a2:e4:47:2d:21:bc:95:69:1e:01: 48:c9:cc:91:eb:e6:7d:f1:87:7e:01:bc:d5:e0:6d: 6e:e0:16:47:b4:c1:48:02:7a:de:11:6b:6e:d9:97: e7:9e:f2:f5:98:4f:fb:45:75:87:a2:55:69:4c:e0: 53:bf:d2:bd:23:3c:f3:72:5b:9a:d0:1a:3d:c7:2d: 54:00:ef:ef:d7:ea:bc:27:70:f0:a3:c9:7a:ac:02: b7:5a:82:52:be:26:27:bc:ea:fc:a1:b1:98:c1:a5: 51:6f:d9:42:d9:c5:51:f3:99:cb:f9:08:68:a3:85: 67:83:0a:cf:0a:6b:ed:90:df:19:ed:c6:f8:ad:3c: a0:5a:40:a4:69:4d:be:01:40:76:8b:b4:d9:35:d7: 0f:24:80:cd:13:fc:e6:12:b4:ad:72:53:c5:15:39: 9a:bc:de:12:9f:b2:2e:69:86:f2:29:b8:3d:4e:51: f9:78:21:b1:4e:32:c1:a0:2f:06:49:7d:69:41:f7: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:F4:85:01:4F:3C:3A:86:D1:56:FD:26:AF:EE:74:E3:BA:2A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:33:78:46:a8:28:5f:49:f0:29:6c:4e:26:38:3d:e6:6f:02: c7:9c:ad:fc:e0:d8:37:81:44:70:96:14:45:45:0c:28:dd:ce: eb:6a:10:74:57:14:21:9f:4b:36:db:e7:6b:93:39:5a:7c:9e: 77:25:b1:4c:e0:17:9c:f7:8e:b5:54:de:e4:d1:10:30:7e:ab: 96:74:72:3f:8f:b9:b2:7d:65:3a:b6:1f:f3:85:36:50:70:40: 46:dc:31:a9:bc:36:de:e6:4a:95:d1:e2:5b:9e:a5:ce:0a:b1: b5:8a:71:cd:2c:3e:3a:ff:c6:87:7a:f5:ad:fd:13:db:63:d6: 7f:c5:68:01:80:ff:cd:97:84:eb:97:36:70:77:a8:b2:c7:04: 1b:2f:43:cc:d7:2a:c2:50:da:12:ed:4f:ee:62:be:75:c5:99: 47:7b:74:e6:5a:1f:6d:77:9c:62:91:4e:ab:21:5c:5c:79:4d: 4c:35:1d:ee:1d:34:48:74:0c:b5:2e:c6:43:2b:d0:d4:45:9d: 1d:a2:11:f5:36:68:6b:67:7b:85:43:7b:d9:9a:40:65:bc:77: 57:9a:29:2d:80:97:5d:08:6c:94:71:ca:e5:0f:84:63:31:91: 5e:55:fb:55:59:9c:ff:89:c5:7e:59:78:44:05:e9:0e:04:0c: b2:2d:3c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCh6/eAqAdDisq4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NGU5MjYyMTYtYzFkMi00ZjE0LWFhNDUtOTVmMzhkZGVmMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZSCHtwBh/pZTuE9jV6NvUfv8pBUaXkT3me/ Bj9gG3b+z6Uib0tVeEUn0ivHHuHYHJqeyPIV1WUiSTIQOzgtyqLkRy0hvJVpHgFI ycyR6+Z98Yd+AbzV4G1u4BZHtMFIAnreEWtu2ZfnnvL1mE/7RXWHolVpTOBTv9K9 Izzzclua0Bo9xy1UAO/v1+q8J3Dwo8l6rAK3WoJSviYnvOr8obGYwaVRb9lC2cVR 85nL+Qhoo4VngwrPCmvtkN8Z7cb4rTygWkCkaU2+AUB2i7TZNdcPJIDNE/zmErSt clPFFTmavN4Sn7IuaYbyKbg9TlH5eCGxTjLBoC8GSX1pQfc+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq/9IUBTzw6htFW/Sav7nTjuioMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTg1ZmEyMmMtYjdkNi0z ZmE3LTk5MjktZDFjMjQyMTYyOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABozeEaoKF9J8ClsTiY4PeZvAsecrfzg2DeBRHCWFEVFDCjdzutqEHRX FCGfSzbb52uTOVp8nnclsUzgF5z3jrVU3uTREDB+q5Z0cj+PubJ9ZTq2H/OFNlBw QEbcMam8Nt7mSpXR4luepc4KsbWKcc0sPjr/xod69a39E9tj1n/FaAGA/82XhOuX NnB3qLLHBBsvQ8zXKsJQ2hLtT+5ivnXFmUd7dOZaH213nGKRTqshXFx5TUw1He4d NEh0DLUuxkMr0NRFnR2iEfU2aGtne4VDe9maQGW8d1eaKS2Al10IbJRxyuUPhGMx kV5V+1VZnP+JxX5ZeEQF6Q4EDLItPGU= -----END CERTIFICATE-----Generated at Tue Jul 21 19:43:48 2026 by rpki-client