$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa File: 19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa (raw, json) Hash identifier: d0lC9nIXjiC+MTtg0om7y9yzVO1Xwc0X38wS2U3PdW8= Subject key identifier: A5:A6:7F:3F:23:1A:41:19:BA:DA:7D:A2:86:FA:7F:15:7A:7C:31:35 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E7FFA3935F4BAF7408A5E5740 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 54994 IP address blocks: 138.113.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:39:35:f4:ba:f7:40:8a:5e:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=f63a15c8-2b17-435c-97ca-376f2c285eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:91:8c:ba:d1:ca:59:7f:31:68:be:64:a1: 41:a8:d0:9e:27:8f:cc:66:c0:8c:20:dd:0c:86:97: 6c:1e:5a:b5:0e:a9:f5:19:f8:bc:25:65:b0:e3:88: 90:a8:63:3e:81:bc:f8:6b:78:35:f7:c2:76:6f:71: 04:c4:71:80:9b:d9:e5:ed:d0:d8:45:e4:83:97:96: ce:0a:8a:25:9e:80:dc:a5:af:c6:a2:dd:74:21:88: 00:89:b5:5b:4d:6d:dc:1c:dc:66:56:72:9f:35:8c: 1c:c5:bb:f8:9d:84:1a:17:1e:2d:d6:f2:ea:03:c2: 9c:28:43:f6:2a:4d:9b:90:4e:ff:09:65:66:6f:4c: cc:2f:cc:ea:68:3d:35:96:33:3a:c0:19:95:ce:45: 3e:74:9f:0b:05:ed:22:92:8f:86:6f:c8:97:57:08: 60:d5:c7:61:fa:27:58:1e:1e:7d:76:6f:82:39:27: b7:7d:c3:d8:db:b1:fa:c8:8f:00:63:44:c1:9f:b9: ff:8a:37:90:6e:e2:76:23:f6:4a:1a:a3:8f:cc:f1: 88:e4:2a:c5:cb:60:2b:6d:55:95:c3:3a:cc:b6:f8: 3d:da:dc:54:bd:fe:94:6d:a0:c3:b4:16:e9:0d:02: d8:22:d9:27:5d:0c:64:c0:b3:3d:44:20:69:9d:30: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:7F:3F:23:1A:41:19:BA:DA:7D:A2:86:FA:7F:15:7A:7C:31:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a3:40:23:52:c9:f2:a6:5f:a2:bc:98:1d:b4:5e:ef:19:b9: e9:f0:e2:72:bb:cb:dd:8b:2c:12:96:8b:aa:60:40:4d:67:2b: fd:77:5d:6d:90:ec:c5:ac:74:42:73:2c:8e:87:06:f4:d1:a6: 97:69:6a:18:57:56:30:88:cd:49:e5:bf:6c:3a:be:2e:5a:ac: c5:c7:b5:d9:ce:c3:72:77:d7:13:35:b0:99:75:64:4d:72:eb: 88:e4:a6:f5:f1:e6:0a:5f:42:6d:10:d0:00:6b:ab:bb:fd:e8: 34:06:82:05:7e:19:c7:fb:3a:db:14:85:ee:aa:3d:79:28:70: e0:89:bb:2b:52:e9:ea:2b:3d:ad:db:43:0e:bb:0b:95:a8:89: 3a:9f:c2:31:bf:fd:e3:cd:64:6c:a3:7d:1b:0d:c0:6b:79:a9: d0:3c:a3:d4:ef:5e:e3:21:79:f4:15:33:c1:ee:79:4c:ce:1d: 49:e6:21:f5:57:49:92:3f:5b:32:6e:b6:0a:39:ab:76:83:f0: 66:ce:e0:05:14:25:0a:08:de:dd:23:a1:ac:93:c7:2e:33:65: 3e:be:cf:1d:79:e8:fa:e0:f5:23:cb:e3:b1:5b:04:46:aa:ed: 2a:e4:97:a0:32:9e:e9:a1:c7:d1:45:4c:10:7c:74:1d:36:92: 2e:4b:aa:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jk19Lr3QIpeV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjYzYTE1YzgtMmIxNy00MzVjLTk3Y2EtMzc2ZjJjMjg1ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26CRjLrRyll/MWi+ZKFBqNCeJ4/MZsCMIN0M hpdsHlq1Dqn1Gfi8JWWw44iQqGM+gbz4a3g198J2b3EExHGAm9nl7dDYReSDl5bO CoolnoDcpa/Got10IYgAibVbTW3cHNxmVnKfNYwcxbv4nYQaFx4t1vLqA8KcKEP2 Kk2bkE7/CWVmb0zML8zqaD01ljM6wBmVzkU+dJ8LBe0iko+Gb8iXVwhg1cdh+idY Hh59dm+COSe3fcPY27H6yI8AY0TBn7n/ijeQbuJ2I/ZKGqOPzPGI5CrFy2ArbVWV wzrMtvg92txUvf6UbaDDtBbpDQLYItknXQxkwLM9RCBpnTAzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWmfz8jGkEZutp9oob6fxV6fDE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTk0NDhlYWEtZTBmOC0z MmQ0LTg1NWYtYmMyZjkwM2M0YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmjQCNSyfKmX6K8mB20Xu8Zuenw4nK7y92LLBKWi6pgQE1nK/13XW2Q 7MWsdEJzLI6HBvTRppdpahhXVjCIzUnlv2w6vi5arMXHtdnOw3J31xM1sJl1ZE1y 64jkpvXx5gpfQm0Q0ABrq7v96DQGggV+Gcf7OtsUhe6qPXkocOCJuytS6eorPa3b Qw67C5WoiTqfwjG//ePNZGyjfRsNwGt5qdA8o9TvXuMhefQVM8HueUzOHUnmIfVX SZI/WzJutgo5q3aD8GbO4AUUJQoI3t0joayTxy4zZT6+zx156Prg9SPL47FbBEaq 7Srkl6Aynumhx9FFTBB8dB02ki5LqhI= -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:36 2026 by rpki-client