$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa File: b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa (raw, json) Hash identifier: 1OcLKftAvDDmZb/oyRgAgOgNI/AyZPRjGwuB4xwO1A0= Subject key identifier: 29:3B:CE:44:43:A3:B2:B6:5C:8E:9D:16:D4:32:7D:47:B3:D6:CF:C3 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E51E9E68F789E2A40892C5180 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 54994 IP address blocks: 138.113.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:e6:8f:78:9e:2a:40:89:2c:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=9665e7cf-f91a-42e3-8987-c18756d52664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:28:39:0b:ee:d6:b8:5b:22:c6:0a:cf:d5: c2:3f:23:4e:d1:a9:12:46:4b:87:88:a6:bd:18:f3: 5c:50:94:80:89:06:35:ee:21:cc:3a:4d:dc:25:aa: eb:b5:4b:ff:28:7f:92:1a:5c:09:64:b3:da:52:3c: 23:8a:bb:dd:05:a0:40:98:93:39:66:10:09:f8:77: b8:dc:24:94:c9:49:df:ec:5b:f9:a4:f5:64:87:d4: eb:bc:59:ca:3e:b5:5f:59:68:68:92:76:01:e2:db: 9c:c6:61:52:69:2d:16:d9:f6:9d:db:08:e0:30:15: 17:3c:55:92:23:a8:b2:c8:f3:a2:47:2a:bc:d4:17: f2:93:5c:21:71:22:4e:e9:74:ba:1a:b3:87:0f:67: 11:d7:19:d0:f4:40:31:1f:b9:10:bd:55:66:f4:f7: 81:1e:80:4f:c9:fe:79:78:5a:db:e0:c8:9c:58:e6: 71:4b:5a:c4:59:0f:71:0b:b4:2c:ba:82:34:19:80: 96:3e:74:cf:2d:82:fc:26:ff:90:83:3c:ea:c9:34: bb:f7:a1:eb:68:51:88:09:a6:c6:f2:37:dc:5f:e3: 1c:f7:e8:41:e1:ac:9f:36:96:44:41:54:ab:5a:d2: e5:56:ec:23:69:d5:8e:a4:2b:18:b6:d7:98:c9:fb: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3B:CE:44:43:A3:B2:B6:5C:8E:9D:16:D4:32:7D:47:B3:D6:CF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b9f3c3a8-aa28-3c0b-93d9-9ba064f8e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:15:53:ad:b3:12:52:87:77:a8:0f:b8:d1:a7:78:30:96:0a: 05:d1:3c:55:6e:57:f3:d0:80:ff:0c:68:d5:81:9f:68:70:54: 7c:aa:f4:f3:98:2d:65:92:b3:2a:02:1b:ef:55:91:da:1f:4a: 50:34:83:9f:da:47:05:0a:a8:21:4e:a8:62:47:6a:62:fd:33: c5:b7:73:e6:05:84:0c:0c:17:bf:ea:ea:b6:e5:f3:c2:c5:09: c2:cb:cf:05:3e:24:dd:56:d7:c4:17:4a:9e:b2:3e:be:8a:40: 22:24:35:f1:bb:bc:5b:c7:c7:3e:f5:29:55:68:cb:90:fe:27: 73:00:a3:60:e1:9c:f5:54:56:02:d1:57:11:33:a9:71:c8:06: 06:f9:d2:75:70:47:ed:75:25:38:14:27:c1:b7:76:31:58:17: 07:0b:aa:31:b4:89:99:0b:58:17:92:93:b9:d5:ca:70:49:44: aa:96:d2:aa:07:cd:b2:ab:bf:d6:3c:69:be:2e:59:1a:dc:06: 6a:72:d0:35:83:ad:e6:39:b5:7e:71:cf:60:55:c8:28:bf:6e: 81:07:31:8a:97:54:40:28:5c:c5:f7:06:b8:cf:2c:2e:40:9d: 05:6b:21:5b:86:f1:56:7e:e1:af:36:35:25:63:5d:12:8f:e6: a0:22:bf:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6eaPeJ4qQIksUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk OTY2NWU3Y2YtZjkxYS00MmUzLTg5ODctYzE4NzU2ZDUyNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocAoOQvu1rhbIsYKz9XCPyNO0akSRkuHiKa9 GPNcUJSAiQY17iHMOk3cJarrtUv/KH+SGlwJZLPaUjwjirvdBaBAmJM5ZhAJ+He4 3CSUyUnf7Fv5pPVkh9TrvFnKPrVfWWhoknYB4tucxmFSaS0W2fad2wjgMBUXPFWS I6iyyPOiRyq81Bfyk1whcSJO6XS6GrOHD2cR1xnQ9EAxH7kQvVVm9PeBHoBPyf55 eFrb4MicWOZxS1rEWQ9xC7QsuoI0GYCWPnTPLYL8Jv+QgzzqyTS796HraFGICabG 8jfcX+Mc9+hB4ayfNpZEQVSrWtLlVuwjadWOpCsYtteYyfvPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk7zkRDo7K2XI6dFtQyfUez1s/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjlmM2MzYTgtYWEyOC0z YzBiLTkzZDktOWJhMDY0ZjhlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIVU62zElKHd6gPuNGneDCWCgXRPFVuV/PQgP8MaNWBn2hwVHyq9POY LWWSsyoCG+9VkdofSlA0g5/aRwUKqCFOqGJHamL9M8W3c+YFhAwMF7/q6rbl88LF CcLLzwU+JN1W18QXSp6yPr6KQCIkNfG7vFvHxz71KVVoy5D+J3MAo2DhnPVUVgLR VxEzqXHIBgb50nVwR+11JTgUJ8G3djFYFwcLqjG0iZkLWBeSk7nVynBJRKqW0qoH zbKrv9Y8ab4uWRrcBmpy0DWDreY5tX5xz2BVyCi/boEHMYqXVEAoXMX3BrjPLC5A nQVrIVuG8VZ+4a82NSVjXRKP5qAiv2Y= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:39 2026 by rpki-client