$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa File: 34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa (raw, json) Hash identifier: lxnvlOIVgMlfgPocOq7+7w6ECr8p/STULvzB6Yj+sts= Subject key identifier: 7D:42:D9:1F:98:02:2F:83:5B:6D:11:28:28:FF:25:34:B8:1E:0F:87 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B4E771AAF6115AC50EA424F00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 54994 IP address blocks: 138.113.11.0/24 maxlen: 24 138.113.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:1a:af:61:15:ac:50:ea:42:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=6e5ec0b5-d2c3-445e-85f2-238292f0558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:ea:a3:eb:78:59:8d:cc:74:54:4e:14:c7: 64:c2:3b:c7:ff:63:05:ca:86:55:72:0f:ac:e8:1c: 1b:a1:bd:57:97:1c:bf:98:09:a2:d9:3e:1d:92:56: 59:b2:96:b9:58:14:c5:98:11:7b:3c:a8:2d:23:6b: 2e:71:d9:77:72:23:d1:3a:28:3b:62:ac:32:20:48: 87:09:67:7a:c3:56:f7:f5:9c:b1:a6:bb:89:fa:ca: 92:76:9f:10:c1:40:b3:5e:2f:41:c1:a5:d4:27:7f: e8:e2:bc:d6:dd:cb:b4:eb:d2:dd:a3:d5:f7:1d:33: 73:31:05:cd:61:df:ee:89:35:8b:c0:0c:aa:3f:8e: 90:fa:5a:55:9d:6d:6d:1d:10:86:fc:e4:32:e1:b1: 37:f6:02:34:2b:90:f3:86:c0:27:73:b4:31:e5:02: 6b:f9:b5:7b:84:5d:21:df:8c:8d:79:49:c9:94:5b: 58:85:d9:a5:62:b2:36:6e:f1:e7:61:b1:e6:8d:4a: 30:6c:21:ad:9d:ea:8a:08:0f:9b:ec:86:a2:da:58: 3a:46:26:6e:d8:dd:20:9b:28:6e:29:c6:af:cd:2a: de:de:cd:a7:a7:36:e8:4c:1e:76:b6:79:22:c0:1c: 9e:a1:c6:9c:31:9e:99:ce:9e:18:bc:b0:3c:89:bc: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:D9:1F:98:02:2F:83:5B:6D:11:28:28:FF:25:34:B8:1E:0F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/34906e9c-c2be-35e1-b6b7-40e01d4b4e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.11.0/24 138.113.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:3a:80:1c:72:2c:d5:7b:5a:74:2a:ec:b5:21:c7:7f:5a: 45:f4:c7:fb:0c:cd:66:35:1e:54:56:75:0b:06:13:ce:7a:3d: 84:aa:71:ed:ac:a6:b7:fe:4c:ad:73:fe:68:c8:fc:7d:b5:a1: be:2e:6d:4f:7a:67:d9:3d:70:80:c9:da:a6:81:72:c2:06:83: 32:33:43:a3:ea:ab:2f:ce:33:a8:7f:47:59:5f:79:d6:93:4d: 08:d9:b0:48:c9:84:5b:3e:c5:df:03:40:20:3a:19:e2:0c:7c: 9c:ef:98:26:9e:3f:38:53:2a:46:2f:3a:42:c9:25:8f:fe:41: 8b:ac:9d:a6:7b:60:14:b8:9c:a7:37:c8:ff:6d:e0:38:a5:ed: 0c:e1:cd:e4:69:fd:61:90:56:11:86:10:ad:46:61:c6:77:f2: ab:8c:6e:a1:e9:49:b3:23:8b:6a:fd:5e:a4:c3:10:4c:6c:33: fd:da:87:f5:59:3f:0d:5a:05:8d:be:02:39:39:83:51:a3:f5: 7b:4d:f7:d4:2d:d7:02:cc:be:40:9b:7f:01:a0:5f:c3:35:18: 4f:ea:12:8c:fb:4c:aa:54:14:00:3c:44:56:a7:cc:43:c1:23: 17:7b:d5:c3:7f:94:ef:35:3e:d9:48:a7:17:7b:c8:e5:ab:50: 65:04:6d:2f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtOdxqvYRWsUOpCTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NmU1ZWMwYjUtZDJjMy00NDVlLTg1ZjItMjM4MjkyZjA1NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXzqo+t4WY3MdFROFMdkwjvH/2MFyoZVcg+s 6Bwbob1Xlxy/mAmi2T4dklZZspa5WBTFmBF7PKgtI2sucdl3ciPROig7YqwyIEiH CWd6w1b39ZyxpruJ+sqSdp8QwUCzXi9BwaXUJ3/o4rzW3cu069Ldo9X3HTNzMQXN Yd/uiTWLwAyqP46Q+lpVnW1tHRCG/OQy4bE39gI0K5DzhsAnc7Qx5QJr+bV7hF0h 34yNeUnJlFtYhdmlYrI2bvHnYbHmjUowbCGtneqKCA+b7Iai2lg6RiZu2N0gmyhu KcavzSre3s2npzboTB52tnkiwByeocacMZ6Zzp4YvLA8ibxAxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH1C2R+YAi+DW20RKCj/JTS4Hg+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzQ5MDZlOWMtYzJiZS0z NWUxLWI2YjctNDBlMDFkNGI0ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinELAwQA inERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHVdOoAccizVe1p0Kuy1Icd/WkX0x/sMzWY1HlRWdQsGE856 PYSqce2sprf+TK1z/mjI/H21ob4ubU96Z9k9cIDJ2qaBcsIGgzIzQ6Pqqy/OM6h/ R1lfedaTTQjZsEjJhFs+xd8DQCA6GeIMfJzvmCaePzhTKkYvOkLJJY/+QYusnaZ7 YBS4nKc3yP9t4Dil7QzhzeRp/WGQVhGGEK1GYcZ38quMbqHpSbMji2r9XqTDEExs M/3ah/VZPw1aBY2+Ajk5g1Gj9XtN99Qt1wLMvkCbfwGgX8M1GE/qEoz7TKpUFAA8 RFanzEPBIxd71cN/lO81PtlIpxd7yOWrUGUEbS8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:15 2025 by rpki-client