$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa File: 27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa (raw, json) Hash identifier: Ob9jB/wqx0Of+98wCE3Vs1/aY1BGJEF81CeBT5zSor8= Subject key identifier: 42:0A:DC:81:B7:4D:01:A9:19:71:2A:1C:42:9D:E1:EE:50:1B:7E:E5 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D52435AF3E323AD15A55F7780 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 54994 IP address blocks: 138.113.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:f3:e3:23:ad:15:a5:5f:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=95ed355b-148a-4ecc-84f9-cb3a082b6bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:62:f2:5b:ec:73:0a:37:3c:6c:5c:f9:47: 60:4f:b5:56:8e:44:cd:a4:0c:7a:3b:62:2c:02:c1: 27:3d:93:6d:79:9a:c7:ee:eb:46:22:b9:40:1d:d5: 1f:28:d0:6b:d7:2b:a8:b0:4b:e4:4d:e3:e5:17:47: 6d:75:bb:4a:08:60:32:25:e3:22:d8:81:9e:b3:64: 8d:03:b8:92:19:1a:6a:8e:b0:4a:43:73:e8:ef:04: f3:cb:10:62:12:27:22:bc:b4:5d:63:76:af:2c:a6: e4:08:f3:29:43:5d:09:83:11:f0:a5:91:4f:d9:25: 8e:10:88:b4:e1:9d:06:6b:c6:c9:3a:7c:da:56:11: 0b:c7:07:15:f5:57:d0:c5:20:5d:c2:40:b1:50:0a: ce:50:03:7e:f5:59:c5:18:44:93:a1:f2:06:fa:99: 18:7e:b4:cd:a8:12:9e:09:1f:6d:e0:2c:61:06:87: 82:74:d8:ae:0f:f7:47:59:68:24:ae:b5:fe:a4:08: 7d:d0:24:ec:c0:91:53:ff:e2:0c:f4:eb:1f:f3:e7: 05:6c:2c:1c:fd:d9:01:df:5e:ca:00:a6:ab:4a:c4: 8a:d5:07:0c:40:fd:da:00:1d:f4:ff:5a:54:dd:c6: 3c:a5:e9:75:a0:a1:75:95:67:4e:94:27:98:aa:2f: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:DC:81:B7:4D:01:A9:19:71:2A:1C:42:9D:E1:EE:50:1B:7E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/27649c7c-d22a-39d0-a5d6-c3dc18bc1e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:41:c4:c6:f1:8a:c0:74:34:5c:0d:93:9a:0c:b8:4a:45:75: 80:b0:75:6a:ff:54:ed:bc:97:36:d2:0e:2e:86:c4:40:3a:57: e3:b0:b7:f2:34:71:58:86:cb:7f:d1:07:df:e1:3b:99:6c:dc: 71:5f:c5:bc:6a:3c:98:9c:13:9d:a3:66:25:95:2a:1d:04:db: e1:d7:8e:48:7f:2b:fd:a3:7f:3b:1c:51:7c:3f:82:59:b5:56: 36:55:0d:4f:55:b5:42:fa:05:9d:7a:08:09:d0:e3:31:1a:9f: 74:19:7a:d0:ba:e5:33:53:ff:f9:12:3e:99:b9:2e:46:e3:f2: db:a8:3f:54:83:e5:62:f9:27:16:ae:18:ce:e6:68:8f:9d:6b: bf:11:08:6c:ef:4b:84:f9:16:eb:b9:a8:26:16:d9:41:60:d8: e2:20:53:f1:9b:63:34:85:c9:a1:d5:a1:1b:d5:ee:2c:7e:58: 8f:56:73:b2:c5:b3:98:33:f5:39:95:a2:89:92:24:54:14:0b: 25:f2:75:f9:ce:67:86:98:a0:43:82:67:f3:0d:b4:37:1f:07: 2d:c8:c9:43:32:01:33:f7:ce:d1:36:af:35:5e:af:71:5e:05: c0:94:8e:b7:3c:bb:18:67:07:92:83:c8:7d:de:bc:d6:36:e6: db:76:00:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1rz4yOtFaVfd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OTVlZDM1NWItMTQ4YS00ZWNjLTg0ZjktY2IzYTA4MmI2YmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KFi8lvscwo3PGxc+UdgT7VWjkTNpAx6O2Is AsEnPZNteZrH7utGIrlAHdUfKNBr1yuosEvkTePlF0dtdbtKCGAyJeMi2IGes2SN A7iSGRpqjrBKQ3Po7wTzyxBiEicivLRdY3avLKbkCPMpQ10JgxHwpZFP2SWOEIi0 4Z0Ga8bJOnzaVhELxwcV9VfQxSBdwkCxUArOUAN+9VnFGESTofIG+pkYfrTNqBKe CR9t4CxhBoeCdNiuD/dHWWgkrrX+pAh90CTswJFT/+IM9Osf8+cFbCwc/dkB317K AKarSsSK1QcMQP3aAB30/1pU3cY8pel1oKF1lWdOlCeYqi/kMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIK3IG3TQGpGXEqHEKd4e5QG37lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjc2NDljN2MtZDIyYS0z OWQwLWE1ZDYtYzNkYzE4YmMxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABBxMbxisB0NFwNk5oMuEpFdYCwdWr/VO28lzbSDi6GxEA6V+Owt/I0 cViGy3/RB9/hO5ls3HFfxbxqPJicE52jZiWVKh0E2+HXjkh/K/2jfzscUXw/glm1 VjZVDU9VtUL6BZ16CAnQ4zEan3QZetC65TNT//kSPpm5Lkbj8tuoP1SD5WL5Jxau GM7maI+da78RCGzvS4T5Fuu5qCYW2UFg2OIgU/GbYzSFyaHVoRvV7ix+WI9Wc7LF s5gz9TmVoomSJFQUCyXydfnOZ4aYoEOCZ/MNtDcfBy3IyUMyATP3ztE2rzVer3Fe BcCUjrc8uxhnB5KDyH3evNY25tt2AJo= -----END CERTIFICATE-----Generated at Tue Apr 7 08:00:52 2026 by rpki-client