$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json) Hash identifier: qWCn550eGLn/i36myptKV581K2lFCDRNqwraS84H91s= Subject key identifier: 74:9C:72:2B:8E:E2:59:E1:45:9F:1A:CA:E8:3F:64:C0:5F:F1:51:57 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D67DFC80B1359B79DDAE9FB00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 54994 IP address blocks: 138.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c8:0b:13:59:b7:9d:da:e9:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=b015f700-c147-4974-aa03-9b747ae5e84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:66:12:b2:1b:ed:38:30:b4:74:50:62:f4: 3e:e0:d4:65:dc:7e:5f:04:7d:2e:6d:a3:00:d5:00: 96:22:a4:28:5d:d5:b1:8b:15:71:c5:c5:e7:47:6c: 79:4d:c8:7c:78:38:a8:39:88:cf:c2:0e:98:10:76: ae:1b:ae:a1:11:14:20:12:75:61:3b:1d:16:dd:be: 0e:7c:91:72:01:55:10:c5:b2:26:f3:75:c4:90:de: 45:2f:5f:cb:ed:97:cb:e8:2d:e3:fc:7d:e6:68:9b: 6f:8c:1c:42:e5:4c:56:d9:b8:f6:31:07:e3:87:6d: 3b:45:b0:de:5c:57:21:3f:09:36:62:b3:44:3d:01: c9:6d:88:bd:e2:0c:da:d0:66:3b:b8:ee:5b:b0:db: 07:1e:c2:23:31:b4:25:7e:4c:fa:3f:9b:05:2b:45: e8:f2:72:36:d8:10:6c:0a:74:34:f5:c5:87:6e:17: c7:2a:0e:bd:9f:56:66:76:07:e0:08:fd:cf:eb:bd: 3f:c0:48:8e:29:34:25:78:a2:9e:33:3d:7c:9f:85: 64:ba:10:a2:d4:0f:0c:13:41:ab:fc:28:4c:ee:2d: 65:46:bd:81:62:e9:4c:30:f9:08:00:49:51:16:3d: 39:56:c2:ce:a2:88:ea:59:2e:cc:b1:b7:2b:66:c3: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:72:2B:8E:E2:59:E1:45:9F:1A:CA:E8:3F:64:C0:5F:F1:51:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:68:5e:3b:ad:e8:c2:dc:e5:3e:57:f0:3b:79:2b:e5:cf:a3: de:72:eb:ea:48:06:be:02:a6:0f:14:ec:73:6b:43:5a:19:a1: 9d:35:c0:ea:3d:6b:c5:27:4b:28:c7:f6:bc:88:0d:72:bd:dd: 37:7e:0f:4e:ab:b0:53:4e:5b:26:00:f8:83:94:5e:9a:8f:fc: e5:f8:81:47:18:00:9b:57:fc:51:a7:66:14:5b:a5:de:f2:c2: 97:07:e0:1c:47:13:99:33:43:d4:34:d0:cb:bb:6f:c9:3e:77: fe:85:b6:7a:8a:99:94:cc:40:b1:fa:66:ec:7f:89:74:f4:f2: 6a:cb:19:78:6e:fc:51:76:aa:73:83:14:de:97:b1:a7:a2:fd: 1e:40:30:12:8e:bb:69:13:9f:dc:a3:55:d1:a0:da:92:67:87: 30:6e:73:bf:6d:8d:a0:20:16:f0:53:52:88:b5:a1:da:e5:08: e1:d5:59:cb:6f:4a:39:b1:63:b8:fa:5f:34:12:66:41:d9:a3: 91:a0:74:a1:ba:ac:2f:1b:2d:5b:01:69:5f:8d:ad:51:c3:7a: 06:1a:fc:30:b8:64:e7:08:d2:2f:dc:8c:ad:df:7e:54:07:7f: 86:e1:3b:ff:df:95:30:71:ce:74:c6:49:df:b9:91:51:cc:89: 73:0c:f2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38gLE1m3ndrp+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YjAxNWY3MDAtYzE0Ny00OTc0LWFhMDMtOWI3NDdhZTVlODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7BmErIb7TgwtHRQYvQ+4NRl3H5fBH0ubaMA 1QCWIqQoXdWxixVxxcXnR2x5Tch8eDioOYjPwg6YEHauG66hERQgEnVhOx0W3b4O fJFyAVUQxbIm83XEkN5FL1/L7ZfL6C3j/H3maJtvjBxC5UxW2bj2MQfjh207RbDe XFchPwk2YrNEPQHJbYi94gza0GY7uO5bsNsHHsIjMbQlfkz6P5sFK0Xo8nI22BBs CnQ09cWHbhfHKg69n1ZmdgfgCP3P670/wEiOKTQleKKeMz18n4VkuhCi1A8ME0Gr /ChM7i1lRr2BYulMMPkIAElRFj05VsLOoojqWS7MsbcrZsN/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHScciuO4lnhRZ8ayug/ZMBf8VFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWQ2NGFjMDMtZDg4Yy0z ZDgwLWJlNTktYTA5NDQ1N2U5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJoXjut6MLc5T5X8Dt5K+XPo95y6+pIBr4Cpg8U7HNrQ1oZoZ01wOo9 a8UnSyjH9ryIDXK93Td+D06rsFNOWyYA+IOUXpqP/OX4gUcYAJtX/FGnZhRbpd7y wpcH4BxHE5kzQ9Q00Mu7b8k+d/6FtnqKmZTMQLH6Zux/iXT08mrLGXhu/FF2qnOD FN6Xsaei/R5AMBKOu2kTn9yjVdGg2pJnhzBuc79tjaAgFvBTUoi1odrlCOHVWctv SjmxY7j6XzQSZkHZo5GgdKG6rC8bLVsBaV+NrVHDegYa/DC4ZOcI0i/cjK3fflQH f4bhO//flTBxznTGSd+5kVHMiXMM8ls= -----END CERTIFICATE-----Generated at Tue Apr 7 07:57:36 2026 by rpki-client