$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa File: 34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa (raw, json) Hash identifier: NuKytT5is4stCeiF/ZPtQdNHQViVKWA/aIrMtJTY5Bc= Subject key identifier: E1:32:E7:64:9B:F9:CC:08:A7:34:8A:AF:A8:95:E1:FC:3A:ED:7C:75 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DEF45E5030212AFB72E017ED6 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 54994 IP address blocks: 138.113.11.0/24 maxlen: 24 138.113.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:e5:03:02:12:af:b7:2e:01:7e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=8a80272e-4515-40c6-b100-6a0394faaf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:9c:07:bc:d6:6b:0a:78:cd:63:39:dd:5e: 16:4d:1b:0b:19:87:d5:c9:05:24:67:c0:26:c3:cf: 05:6e:4b:8a:3c:5d:0e:e5:f8:3f:77:a5:35:97:bd: a3:79:5c:05:e2:b1:61:ad:a6:4f:cb:18:38:a0:cd: a9:02:3c:5d:b1:c0:09:e2:3b:a0:82:53:9c:c6:ac: 57:9e:c4:23:21:3f:2d:ff:5b:a8:b5:cd:49:2a:ea: 34:87:d1:33:a0:27:58:e4:9e:36:3e:a0:1b:a1:2f: 86:66:fc:96:a4:ab:5e:51:e8:45:28:2e:ba:57:66: d5:0b:4c:79:7a:fb:cd:20:ed:1b:a2:4d:05:ac:bc: 31:b8:40:95:fa:e5:a4:7b:d8:93:f2:0c:47:68:f4: f1:6e:ab:07:08:3e:b2:d8:6b:18:07:22:e7:15:8d: 21:d3:b3:15:a7:62:a1:f8:77:2f:b3:33:13:54:e7: ec:bc:6a:0d:46:b0:5b:e4:6f:62:b1:27:49:d1:a6: 37:a5:c5:95:9d:4e:5a:dd:66:44:32:60:66:21:dd: 8b:8c:5d:96:ca:0d:f5:49:64:a9:e7:a7:e8:94:33: de:d0:12:02:8c:35:83:60:e2:54:d2:c3:50:e1:f0: af:c7:16:12:74:02:ff:b4:76:d8:ea:0b:62:97:0a: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:E7:64:9B:F9:CC:08:A7:34:8A:AF:A8:95:E1:FC:3A:ED:7C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.11.0/24 138.113.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a7:13:b6:87:42:4d:28:7e:f0:e7:a2:fb:f6:36:c3:d2:7b: 7d:5b:17:aa:34:49:0e:92:fb:ec:52:0c:3d:6a:20:39:13:31: 8b:14:bf:33:23:ac:64:0e:47:f9:7d:77:de:ae:c9:2b:3e:5f: 4b:ab:47:b2:4d:c7:97:02:4f:2a:19:0a:fc:28:cb:3b:36:f9: 2a:1f:5f:1c:bb:a2:25:8c:76:52:b5:49:2c:c4:4c:ea:c0:ee: 03:95:e8:f9:13:16:ab:8e:00:c8:b2:8d:aa:8e:9b:49:83:49: 23:46:55:5b:ca:88:8f:8d:b4:cd:c7:79:fe:29:8e:0c:37:08: 27:4b:00:8a:a8:85:28:34:ab:d0:60:d6:5d:da:90:85:db:25: 40:df:21:c2:69:b9:5c:4c:3d:b6:2a:34:67:dd:9f:7d:3b:0e: b2:7f:bd:4a:94:5b:87:a5:fb:fa:cc:57:24:39:af:4b:f8:8f: cb:62:4b:84:51:db:60:7b:16:c9:7d:fc:15:59:34:65:e9:d2: ca:56:84:0c:4b:b1:82:e8:6f:56:6c:89:35:4f:f2:34:08:39: f7:5a:82:a3:d9:ff:f4:dc:f8:86:93:c3:93:76:9d:14:11:38: 13:73:20:60:ff:66:87:8d:7e:c3:08:8f:f2:05:07:f9:03:1c: b3:cd:54:71 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3vReUDAhKvty4BftYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk OGE4MDI3MmUtNDUxNS00MGM2LWIxMDAtNmEwMzk0ZmFhZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKcB7zWawp4zWM53V4WTRsLGYfVyQUkZ8Am w88FbkuKPF0O5fg/d6U1l72jeVwF4rFhraZPyxg4oM2pAjxdscAJ4jugglOcxqxX nsQjIT8t/1uotc1JKuo0h9EzoCdY5J42PqAboS+GZvyWpKteUehFKC66V2bVC0x5 evvNIO0bok0FrLwxuECV+uWke9iT8gxHaPTxbqsHCD6y2GsYByLnFY0h07MVp2Kh +HcvszMTVOfsvGoNRrBb5G9isSdJ0aY3pcWVnU5a3WZEMmBmId2LjF2Wyg31SWSp 56folDPe0BICjDWDYOJU0sNQ4fCvxxYSdAL/tHbY6gtilwqmxwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOEy52Sb+cwIpzSKr6iV4fw67Xx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzQ5MDZlOWMtYzJiZS0z NWUxLWI2YjctNDBlMDFkNGI0ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinELAwQA inERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHunE7aHQk0ofvDnovv2NsPSe31bF6o0SQ6S++xSDD1qIDkT MYsUvzMjrGQOR/l9d96uySs+X0urR7JNx5cCTyoZCvwoyzs2+SofXxy7oiWMdlK1 SSzETOrA7gOV6PkTFquOAMiyjaqOm0mDSSNGVVvKiI+NtM3Hef4pjgw3CCdLAIqo hSg0q9Bg1l3akIXbJUDfIcJpuVxMPbYqNGfdn307DrJ/vUqUW4el+/rMVyQ5r0v4 j8tiS4RR22B7Fsl9/BVZNGXp0spWhAxLsYLob1ZsiTVP8jQIOfdagqPZ//Tc+IaT w5N2nRQROBNzIGD/ZoeNfsMIj/IFB/kDHLPNVHE= -----END CERTIFICATE-----Generated at Sun May 24 15:28:19 2026 by rpki-client