$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa File: 19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa (raw, json) Hash identifier: 5/fmGJs3El4rzAVBI8XGC5H+D06FWKnu5/PiQdWibzs= Subject key identifier: 35:A3:73:34:CC:C1:7B:44:6B:1B:C8:7F:9F:AE:12:89:D4:FB:6E:79 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AFEE6A8DAF75A91113C8D1980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 54994 IP address blocks: 138.113.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a8:da:f7:5a:91:11:3c:8d:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=b4c43332-5dee-4d94-9a62-a627afb4e2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:89:84:cb:a6:33:74:94:47:62:00:b1:f9: 14:a3:e3:c4:82:05:ee:51:f7:08:73:41:6f:2d:bc: 11:af:92:6f:83:07:71:b5:7e:17:d4:54:d8:fd:56: d1:91:41:60:01:a8:4a:fe:b8:e2:0e:92:1e:a6:19: b4:1a:de:65:35:51:42:fe:b5:8f:2b:2f:3b:33:7f: 7f:86:82:87:e7:9c:3c:7b:b6:66:7d:b8:71:1b:ec: 0c:0a:f4:e3:9e:18:44:e2:cb:07:6f:08:b4:9d:7b: 72:d4:9e:cc:3a:07:51:25:5d:af:1d:d9:01:5c:8b: 91:40:38:d6:a0:3d:9b:17:91:be:b9:5d:5a:c6:21: 04:d0:21:53:90:ea:66:4d:c0:b1:61:5d:37:b4:ca: b8:20:ad:a5:2e:54:fa:56:14:d1:54:6c:a7:b6:c8: 88:7e:a7:f3:d4:81:ed:5e:13:22:a0:21:76:56:0d: bc:a9:b1:84:ed:8f:7a:4a:ba:7d:0f:e1:72:cd:02: 2f:73:f0:32:d2:bf:91:84:a0:90:ab:57:74:67:60: 80:e0:b7:17:fe:57:03:9d:31:ce:98:0b:bd:b8:4f: 30:55:c3:6a:98:da:04:1e:eb:15:bd:ad:a8:65:34: 6c:b8:29:ab:10:32:a4:6a:ad:53:48:b5:f2:b7:26: 79:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:73:34:CC:C1:7B:44:6B:1B:C8:7F:9F:AE:12:89:D4:FB:6E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:06:81:93:40:da:7d:e5:42:b6:61:8a:15:d6:d9:79:72:72: dc:2d:17:17:58:81:78:19:f4:bf:e5:52:01:ab:ab:c1:cb:3d: d4:3e:8b:ad:73:1a:b2:1a:e5:83:2e:bc:47:e0:85:d3:24:29: 98:15:1b:3f:7f:db:ab:f4:66:95:a5:91:73:f8:d4:0d:e3:75: 83:75:c1:33:77:63:1e:c5:c2:6e:c9:5f:45:f2:27:9b:35:9c: 49:4b:35:a3:e6:c1:fd:c9:8c:8c:81:97:cc:dc:31:91:6f:7f: cf:91:bc:9e:66:1e:ff:a0:49:ca:6d:b7:32:53:07:6d:0c:10: 9d:fb:03:f2:a4:b3:9f:39:c1:cb:e5:af:6b:79:41:8a:6a:27: b5:ff:5c:72:88:f3:21:77:fa:c1:38:d2:c5:36:e8:72:b8:b4: 7b:fe:a3:58:14:ff:a3:09:c1:f0:7f:7d:ab:e1:59:11:3a:01: 60:ca:4b:a9:3d:5e:c9:65:ca:6b:49:0d:b4:fb:6d:60:42:25: b9:a6:b1:b9:f1:be:53:8c:ee:5c:e6:d0:93:86:22:0c:5e:ed: aa:e5:2a:22:e0:df:0c:d2:ac:08:cf:fb:02:3f:01:b0:ab:26: ca:2b:3a:0c:28:a3:32:62:42:97:59:6a:78:5e:d6:e6:e0:83: 46:42:ff:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qja91qRETyNGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YjRjNDMzMzItNWRlZS00ZDk0LTlhNjItYTYyN2FmYjRlMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRKJhMumM3SUR2IAsfkUo+PEggXuUfcIc0Fv LbwRr5JvgwdxtX4X1FTY/VbRkUFgAahK/rjiDpIephm0Gt5lNVFC/rWPKy87M39/ hoKH55w8e7ZmfbhxG+wMCvTjnhhE4ssHbwi0nXty1J7MOgdRJV2vHdkBXIuRQDjW oD2bF5G+uV1axiEE0CFTkOpmTcCxYV03tMq4IK2lLlT6VhTRVGyntsiIfqfz1IHt XhMioCF2Vg28qbGE7Y96Srp9D+FyzQIvc/Ay0r+RhKCQq1d0Z2CA4LcX/lcDnTHO mAu9uE8wVcNqmNoEHusVva2oZTRsuCmrEDKkaq1TSLXytyZ5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWjczTMwXtEaxvIf5+uEonU+255MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTk0NDhlYWEtZTBmOC0z MmQ0LTg1NWYtYmMyZjkwM2M0YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYGgZNA2n3lQrZhihXW2XlyctwtFxdYgXgZ9L/lUgGrq8HLPdQ+i61z GrIa5YMuvEfghdMkKZgVGz9/26v0ZpWlkXP41A3jdYN1wTN3Yx7Fwm7JX0XyJ5s1 nElLNaPmwf3JjIyBl8zcMZFvf8+RvJ5mHv+gScpttzJTB20MEJ37A/Kks585wcvl r2t5QYpqJ7X/XHKI8yF3+sE40sU26HK4tHv+o1gU/6MJwfB/favhWRE6AWDKS6k9 XsllymtJDbT7bWBCJbmmsbnxvlOM7lzm0JOGIgxe7arlKiLg3wzSrAjP+wI/AbCr JsorOgwoozJiQpdZanhe1ubgg0ZC/6E= -----END CERTIFICATE-----Generated at Sat Sep 6 01:28:22 2025 by rpki-client