$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa File: fad7cd94-3e4e-3057-99e9-06d40e467d37.roa (raw, json) Hash identifier: jhzKwMZ0Rb2z4UC27F72gNKqaanzVMEmbEtCXSI/9m0= Subject key identifier: E2:85:C9:5E:C9:27:E9:A9:7B:5A:3B:1B:1D:A4:A3:EA:55:15:C1:F7 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E6145608D8C6345F33E37A1C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 54994 IP address blocks: 138.113.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:60:8d:8c:63:45:f3:3e:37:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=5adba953-ba7c-44d2-b5e7-5c5320026d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:55:51:e5:b4:82:1e:bd:ff:74:b0:57:80: 5b:81:6e:06:8e:35:10:4a:2c:bb:1f:74:6f:76:6d: 33:c9:4c:92:a7:e3:37:63:16:79:31:d8:03:9d:b4: 3e:cc:60:56:56:dd:62:b9:15:ac:81:5c:cd:8d:30: 7f:ea:6c:16:33:8f:2e:84:41:d9:72:95:59:8f:09: 56:a9:2e:0d:db:e8:dc:88:fb:19:08:64:10:db:2a: 4c:7e:4a:91:91:0c:13:77:6c:0c:b8:8d:d2:2e:46: 76:a3:1c:0e:d6:d4:de:ba:89:3c:26:e0:29:35:36: 33:47:c1:0f:28:09:b4:6c:3e:10:c2:bb:e8:4b:dc: 35:cf:9c:a5:2e:4c:79:47:27:4c:b6:09:78:ac:9f: 20:40:80:ad:d0:9d:aa:28:4b:4a:f0:db:17:d9:bd: 9c:32:f2:57:80:6a:23:72:5f:bb:ed:35:f7:7f:00: d5:dd:57:20:eb:3d:e5:cd:3d:1f:25:55:b8:9d:8d: f8:cd:45:bf:ae:3d:22:a7:fb:62:72:46:95:ec:a4: 79:4d:4f:ee:3e:88:68:c5:99:b7:50:4f:60:42:36: cd:ff:9d:6c:4b:68:7e:1d:51:42:ea:08:d1:3e:27: c7:cc:dc:f8:8a:8e:14:50:33:d1:9e:0a:a4:21:91: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:C9:5E:C9:27:E9:A9:7B:5A:3B:1B:1D:A4:A3:EA:55:15:C1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d2:5b:8b:d9:07:15:f4:5e:13:e4:4e:81:11:91:7c:5d:7c: d8:23:35:9c:6a:21:aa:50:38:ae:17:42:74:46:65:b2:db:c6: 34:e1:db:90:96:90:25:cc:4d:aa:d2:45:ac:07:db:82:8f:e0: 4b:9d:97:85:a8:1a:d6:6c:33:da:bf:95:c1:6c:15:64:34:27: 0e:6c:91:cf:b1:53:fc:42:91:73:dd:73:78:64:e7:2a:98:46: ac:54:20:c5:86:41:49:40:3a:c7:f4:3f:44:b0:c8:34:ac:f3: 46:c8:b9:06:d5:0b:c0:9c:07:48:c2:8b:24:5d:22:70:eb:d5: 8e:91:1f:85:0e:19:3f:d2:98:e5:0f:d0:54:e1:b5:e2:96:b5: 62:be:97:0d:be:7f:f4:9d:89:5d:f5:ec:c2:b4:69:47:da:d7: fa:b0:cb:05:fd:6e:44:26:ba:b1:1f:51:91:c2:8c:86:1e:d2: 05:24:e0:6c:14:71:e3:63:a9:06:bc:71:84:d8:a4:39:a4:c5: e9:98:8d:b4:09:92:3c:59:b1:44:ed:65:d4:6b:b0:9a:b9:f1: 57:cc:c9:23:6a:43:ea:f1:c3:3c:8f:ab:c8:9a:3f:c5:c7:31: bc:08:64:c4:0c:23:5f:73:d0:3d:ff:db:57:77:58:0a:36:84: a1:a0:9c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRWCNjGNF8z43ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NWFkYmE5NTMtYmE3Yy00NGQyLWI1ZTctNWM1MzIwMDI2ZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLZVUeW0gh69/3SwV4BbgW4GjjUQSiy7H3Rv dm0zyUySp+M3YxZ5MdgDnbQ+zGBWVt1iuRWsgVzNjTB/6mwWM48uhEHZcpVZjwlW qS4N2+jciPsZCGQQ2ypMfkqRkQwTd2wMuI3SLkZ2oxwO1tTeuok8JuApNTYzR8EP KAm0bD4QwrvoS9w1z5ylLkx5RydMtgl4rJ8gQICt0J2qKEtK8NsX2b2cMvJXgGoj cl+77TX3fwDV3Vcg6z3lzT0fJVW4nY34zUW/rj0ip/tickaV7KR5TU/uPohoxZm3 UE9gQjbN/51sS2h+HVFC6gjRPifHzNz4io4UUDPRngqkIZG/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKFyV7JJ+mpe1o7Gx2ko+pVFcH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZmFkN2NkOTQtM2U0ZS0z MDU3LTk5ZTktMDZkNDBlNDY3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/SW4vZBxX0XhPkToERkXxdfNgjNZxqIapQOK4XQnRGZbLbxjTh25CW kCXMTarSRawH24KP4Eudl4WoGtZsM9q/lcFsFWQ0Jw5skc+xU/xCkXPdc3hk5yqY RqxUIMWGQUlAOsf0P0SwyDSs80bIuQbVC8CcB0jCiyRdInDr1Y6RH4UOGT/SmOUP 0FThteKWtWK+lw2+f/SdiV317MK0aUfa1/qwywX9bkQmurEfUZHCjIYe0gUk4GwU ceNjqQa8cYTYpDmkxemYjbQJkjxZsUTtZdRrsJq58VfMySNqQ+rxwzyPq8iaP8XH MbwIZMQMI19z0D3/21d3WAo2hKGgnBE= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:07 2026 by rpki-client