$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa File: 19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa (raw, json) Hash identifier: 6kDZZIfidEHZGy9CTdCbuQoIm8SGiZb1y83YWVjPdaU= Subject key identifier: DE:D1:E3:EE:A1:56:B8:F3:BE:BD:A0:69:92:83:C9:6D:2A:6C:CA:70 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584FC4667F1A84BD851768545200 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 54994 IP address blocks: 138.113.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:7f:1a:84:bd:85:17:68:54:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=ed84cd14-387e-4da5-bdcb-4f03c6939a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:6c:ba:53:06:d2:6c:fb:21:da:53:e5:ff: 67:b8:cd:ce:b6:bd:dc:3c:46:9c:7e:26:dc:ac:79: ec:a8:77:a1:82:9b:47:7f:93:f6:35:c9:13:6b:04: aa:a4:b4:e7:49:b1:43:4c:65:b5:83:e6:93:96:78: f0:bf:21:62:fe:7d:9c:c9:36:64:9d:75:75:56:42: bb:e0:09:99:62:0c:ef:45:c3:3c:55:d5:c2:97:90: 70:1c:e3:6f:f0:ec:c5:f8:1f:5a:87:97:14:9f:61: b2:0d:f7:53:cc:10:ea:79:29:4c:ed:93:57:be:10: 10:95:12:d2:e7:89:d4:c6:c6:30:09:7d:38:4e:b3: 05:4c:a2:dd:8b:81:28:94:d4:e2:e8:9c:04:c2:15: b4:c5:5b:6f:c5:89:ad:78:e6:c8:82:c4:12:cc:ba: 49:b9:20:6e:06:6e:a2:8c:5a:4e:4a:b7:07:99:90: 99:aa:47:c3:a9:78:b9:33:fc:b5:d0:ba:ef:96:2a: da:b1:e7:4c:77:ad:29:b7:47:08:86:bb:db:74:38: ba:f1:cd:95:86:26:90:eb:64:6c:3a:7a:e4:61:3c: e1:6d:c0:a2:6c:b4:f2:f2:1e:49:49:75:f7:8d:f8: c3:bf:53:83:5a:19:48:54:aa:35:3b:4e:57:43:4e: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D1:E3:EE:A1:56:B8:F3:BE:BD:A0:69:92:83:C9:6D:2A:6C:CA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/19448eaa-e0f8-32d4-855f-bc2f903c4a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ca:21:51:38:7f:6d:5a:ed:09:3f:d4:65:58:23:49:a4:a5: b6:2a:64:6d:08:dd:21:d9:a7:9e:f6:03:17:d7:37:6b:a8:56: 21:2e:36:75:49:72:3c:10:0e:26:df:cd:70:81:c4:bb:4f:46: 6f:9f:56:ea:81:78:fa:67:cb:cc:c9:a7:e9:45:89:70:43:3d: d0:fd:8d:d7:28:0c:16:fc:92:6b:ee:06:94:9e:e9:05:f5:60: c4:e2:63:65:07:ac:22:0b:c7:62:4a:35:bd:8a:c7:de:6c:8c: 2b:d4:53:48:93:c8:9f:be:80:cf:8f:25:91:73:b3:66:8c:ce: 76:0c:04:d1:8a:87:78:03:df:d2:06:0c:de:39:c6:49:e2:31: e9:cd:a3:28:22:c1:15:33:c0:8d:8a:96:16:72:68:c1:fc:a1: 03:76:bc:df:e0:de:a4:40:ca:2c:bd:b8:36:67:09:2c:6c:41: b1:a1:63:0d:07:13:de:56:d4:12:dc:d3:6e:8c:0b:ae:b6:5c: 94:e4:1c:96:9a:2e:a5:4f:45:b8:5f:36:23:df:ab:03:04:28: 6a:08:17:bd:e3:62:db:1e:da:fb:b6:31:71:19:8e:c9:c3:8b: b0:3f:0f:23:a3:4c:61:a1:06:f6:01:c9:8c:05:7b:d0:1b:a7: 4e:da:95:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZn8ahL2FF2hUUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk ZWQ4NGNkMTQtMzg3ZS00ZGE1LWJkY2ItNGYwM2M2OTM5YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0dsulMG0mz7IdpT5f9nuM3Otr3cPEacfibc rHnsqHehgptHf5P2NckTawSqpLTnSbFDTGW1g+aTlnjwvyFi/n2cyTZknXV1VkK7 4AmZYgzvRcM8VdXCl5BwHONv8OzF+B9ah5cUn2GyDfdTzBDqeSlM7ZNXvhAQlRLS 54nUxsYwCX04TrMFTKLdi4EolNTi6JwEwhW0xVtvxYmteObIgsQSzLpJuSBuBm6i jFpOSrcHmZCZqkfDqXi5M/y10LrvlirasedMd60pt0cIhrvbdDi68c2VhiaQ62Rs OnrkYTzhbcCibLTy8h5JSXX3jfjDv1ODWhlIVKo1O05XQ06mPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7R4+6hVrjzvr2gaZKDyW0qbMpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTk0NDhlYWEtZTBmOC0z MmQ0LTg1NWYtYmMyZjkwM2M0YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALKIVE4f21a7Qk/1GVYI0mkpbYqZG0I3SHZp572AxfXN2uoViEuNnVJ cjwQDibfzXCBxLtPRm+fVuqBePpny8zJp+lFiXBDPdD9jdcoDBb8kmvuBpSe6QX1 YMTiY2UHrCILx2JKNb2Kx95sjCvUU0iTyJ++gM+PJZFzs2aMznYMBNGKh3gD39IG DN45xkniMenNoygiwRUzwI2KlhZyaMH8oQN2vN/g3qRAyiy9uDZnCSxsQbGhYw0H E95W1BLc026MC662XJTkHJaaLqVPRbhfNiPfqwMEKGoIF73jYtse2vu2MXEZjsnD i7A/DyOjTGGhBvYByYwFe9Abp07alVg= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:04 2026 by rpki-client