$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa File: cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa (raw, json) Hash identifier: xxFjxyMGUTZ5064Q8MIlcguBQR+9lwkIoXzLDIBKBtk= Subject key identifier: 39:70:96:70:09:65:EE:34:CA:5A:D0:9A:3D:0A:9D:31:11:F4:5D:84 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E614562D224606980474BA880 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 54994 IP address blocks: 138.113.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:62:d2:24:60:69:80:47:4b:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=abfc705c-ae44-4eaa-ab20-02517923663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:d0:01:88:63:31:4d:db:95:65:4b:87:54: 36:fd:94:02:f0:45:4c:2b:ba:4e:09:ac:af:33:bd: 15:5c:72:d0:4b:5a:a3:61:44:34:ca:62:2b:7d:a7: 43:d4:bc:89:46:b6:86:24:fa:5a:0d:db:0f:11:d8: f4:42:e4:e9:ed:a4:59:98:7b:0e:09:7f:b8:0b:51: d3:87:db:e2:a9:a3:e2:3c:67:f9:b8:f3:42:94:bb: 2b:d4:9a:0e:93:ab:78:a5:f3:6a:d0:39:32:35:6d: c8:27:61:d5:9d:c4:9d:f0:42:ac:48:7a:10:0a:b8: 2b:25:f0:e3:35:ac:d3:96:cc:5e:23:fd:0f:1e:75: 30:46:72:a7:d1:70:61:69:3d:dc:60:1b:3e:78:12: 52:06:b5:82:d4:b6:0c:3b:a4:6f:4a:e8:e9:86:4c: de:f3:5e:89:b2:c7:ef:c3:42:04:26:99:db:82:fc: e4:f7:1e:fd:51:cc:cd:93:d4:c1:15:17:ba:5b:b0: 0b:da:f8:63:15:b0:1b:58:33:18:21:fa:90:1e:ed: 5a:c9:02:74:d0:8f:a1:e8:00:a3:19:2a:6e:d1:ce: 4b:38:70:e6:35:67:4f:c0:d8:b3:4c:a0:d8:1d:fa: 3d:eb:45:a1:dc:76:47:1c:cf:b6:69:1d:1f:b1:8d: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:70:96:70:09:65:EE:34:CA:5A:D0:9A:3D:0A:9D:31:11:F4:5D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cfe56dde-68cd-375c-8a57-33a3ceeb8313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ef:d7:fb:d8:56:44:b4:db:11:c3:33:47:12:dd:3c:3b:ee: 08:37:be:99:e4:92:8a:17:44:7d:5a:b3:02:aa:67:a7:ef:cd: e6:1c:1f:a0:37:b8:17:84:18:e8:2b:cd:70:d0:cd:70:f4:71: c4:b4:4c:96:35:93:15:c6:ad:1f:ef:72:1d:4b:ce:9d:22:d1: cb:6e:02:2f:19:95:c6:25:b4:9d:39:18:c1:82:36:0f:15:d1: 01:28:8b:b5:01:bb:11:40:1a:a1:10:bf:1c:3f:ed:74:3d:2f: 78:d6:06:e4:71:e4:1f:e2:6e:0a:4e:2e:b0:4f:84:78:49:87: 9f:c8:de:bc:f5:4a:89:b5:42:61:16:e1:fc:a3:b9:31:99:5f: bf:ad:f6:96:28:e8:7b:62:9a:66:54:41:b7:02:c7:22:34:0b: 07:8f:00:b2:66:ff:a2:2e:fd:6a:d7:d0:c1:c1:01:6a:54:40: 30:c4:fe:91:4a:c3:19:0f:cb:0e:12:16:83:17:62:45:9c:b0: 46:2c:bf:a8:80:09:ee:c1:3f:7e:88:a6:71:ad:4e:3b:4a:1d: 3f:93:8b:0e:d8:e6:3b:53:a5:b2:0e:cb:50:98:7a:a1:f6:67: 9f:29:24:6c:b8:05:68:26:c6:b2:a3:cd:f7:9a:b2:66:df:c1: 17:fc:c6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRWLSJGBpgEdLqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk YWJmYzcwNWMtYWU0NC00ZWFhLWFiMjAtMDI1MTc5MjM2NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUnQAYhjMU3blWVLh1Q2/ZQC8EVMK7pOCayv M70VXHLQS1qjYUQ0ymIrfadD1LyJRraGJPpaDdsPEdj0QuTp7aRZmHsOCX+4C1HT h9viqaPiPGf5uPNClLsr1JoOk6t4pfNq0DkyNW3IJ2HVncSd8EKsSHoQCrgrJfDj NazTlsxeI/0PHnUwRnKn0XBhaT3cYBs+eBJSBrWC1LYMO6RvSujphkze816Jssfv w0IEJpnbgvzk9x79UczNk9TBFRe6W7AL2vhjFbAbWDMYIfqQHu1ayQJ00I+h6ACj GSpu0c5LOHDmNWdPwNizTKDYHfo960Wh3HZHHM+2aR0fsY0LxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlwlnAJZe40ylrQmj0KnTER9F2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvY2ZlNTZkZGUtNjhjZC0z NzVjLThhNTctMzNhM2NlZWI4MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzv1/vYVkS02xHDM0cS3Tw77gg3vpnkkooXRH1aswKqZ6fvzeYcH6A3 uBeEGOgrzXDQzXD0ccS0TJY1kxXGrR/vch1Lzp0i0ctuAi8ZlcYltJ05GMGCNg8V 0QEoi7UBuxFAGqEQvxw/7XQ9L3jWBuRx5B/ibgpOLrBPhHhJh5/I3rz1Som1QmEW 4fyjuTGZX7+t9pYo6HtimmZUQbcCxyI0CwePALJm/6Iu/WrX0MHBAWpUQDDE/pFK wxkPyw4SFoMXYkWcsEYsv6iACe7BP36IpnGtTjtKHT+Tiw7Y5jtTpbIOy1CYeqH2 Z58pJGy4BWgmxrKjzfeasmbfwRf8xrA= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:57 2026 by rpki-client