$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa File: 6cf2c805-2a89-392d-9045-0492053626d7.roa (raw, json) Hash identifier: tsrajRgXP4PRFMQEW73Sy4Bydpnl/b3KI1OZfPGPyfE= Subject key identifier: 6D:DA:07:52:A3:01:08:6C:F1:E8:D1:36:7D:8E:18:83:12:BE:8E:94 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B1AD17F50EC1C9D7443218740 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 54994 IP address blocks: 138.113.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7f:50:ec:1c:9d:74:43:21:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=e374c111-1723-4769-a71d-984a41760cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:38:55:8c:cb:24:a5:ec:51:71:fe:94:6d: 4e:dd:d4:c4:ab:74:8f:60:84:d9:8e:3f:73:43:30: db:73:bb:3b:e6:9f:61:4a:a9:b1:d9:4c:34:2a:49: 4e:27:f1:e7:0f:fe:be:7b:0e:3b:51:3b:d4:07:2b: eb:b0:ac:f0:ff:54:4b:e9:1c:f9:75:cc:d4:d8:43: cd:28:24:49:34:cf:b4:28:45:b6:78:bc:2d:34:d8: 42:a5:94:be:f9:43:17:a0:cb:f8:67:89:6b:b5:ac: 0f:cd:88:44:cf:e1:d4:23:29:fb:f0:06:b6:f5:fe: 63:4f:cd:3e:f6:9f:02:25:42:48:57:c0:73:19:e0: c2:8b:21:13:e3:76:8b:40:ed:f6:22:19:f7:82:82: 53:44:6c:9e:86:0e:43:0d:e3:50:7d:25:da:bb:f8: f9:27:eb:75:bf:90:f1:43:5c:d5:31:b1:e2:46:48: d0:f2:56:c4:b9:4c:ba:48:67:94:44:48:2f:6b:5f: fa:b6:b5:84:dc:33:66:0f:8c:bd:ae:24:96:0f:d5: 5e:3e:e2:c1:f1:91:96:c5:af:09:7f:fa:92:ae:80: 05:17:29:d4:04:d6:6a:85:03:d1:15:2a:f0:b7:53: ba:1b:76:84:f6:5d:a4:a7:ae:02:65:b7:7e:4e:c1: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:07:52:A3:01:08:6C:F1:E8:D1:36:7D:8E:18:83:12:BE:8E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ee:0c:c1:e7:63:52:7b:76:2f:1b:23:af:df:af:ea:a7:67: ff:eb:0e:00:3a:90:ab:7e:6d:1d:ba:82:fc:eb:1f:05:2a:7f: 66:70:e8:a2:96:ca:c6:03:45:7d:6d:18:d3:ce:eb:87:d6:54: f4:59:50:7e:4e:76:ea:27:3b:74:a4:7f:c7:cf:ed:f9:9a:e8: cf:db:08:29:f9:6f:65:7f:5b:9b:8f:4b:9d:a8:df:d5:d5:50: c5:53:e8:62:7a:d9:17:cd:52:e4:67:d9:fc:90:97:a2:1e:0f: 82:39:54:14:38:f8:b5:95:e8:8e:07:0e:63:4b:a5:39:79:f7: a8:8d:35:78:90:31:89:20:e6:91:81:dc:30:72:b4:41:85:a2: 30:3d:46:dc:df:95:cd:38:87:6b:e8:9a:6a:0a:b4:03:5b:98: 80:8c:00:f9:a8:79:a2:1b:9a:e7:7d:97:73:11:0b:67:23:3a: 2b:fd:34:8f:47:6f:f5:63:5f:55:06:b9:52:38:90:35:75:06: 8e:a4:f4:d5:80:7a:ce:5a:df:53:d1:09:90:19:c6:bb:1a:71: 4c:b2:e5:dd:28:bc:bc:f2:ad:d2:d3:01:50:d0:77:c0:d9:05: 35:cc:0c:e2:be:fa:f0:16:4a:a9:5a:aa:50:10:5f:54:29:8d: f0:d6:52:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0X9Q7ByddEMhh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTM3NGMxMTEtMTcyMy00NzY5LWE3MWQtOTg0YTQxNzYwY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXU4VYzLJKXsUXH+lG1O3dTEq3SPYITZjj9z QzDbc7s75p9hSqmx2Uw0KklOJ/HnD/6+ew47UTvUByvrsKzw/1RL6Rz5dczU2EPN KCRJNM+0KEW2eLwtNNhCpZS++UMXoMv4Z4lrtawPzYhEz+HUIyn78Aa29f5jT80+ 9p8CJUJIV8BzGeDCiyET43aLQO32Ihn3goJTRGyehg5DDeNQfSXau/j5J+t1v5Dx Q1zVMbHiRkjQ8lbEuUy6SGeUREgva1/6trWE3DNmD4y9riSWD9VePuLB8ZGWxa8J f/qSroAFFynUBNZqhQPRFSrwt1O6G3aE9l2kp64CZbd+TsFWcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3aB1KjAQhs8ejRNn2OGIMSvo6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNmNmMmM4MDUtMmE4OS0z OTJkLTkwNDUtMDQ5MjA1MzYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTuDMHnY1J7di8bI6/fr+qnZ//rDgA6kKt+bR26gvzrHwUqf2Zw6KKW ysYDRX1tGNPO64fWVPRZUH5OduonO3Skf8fP7fma6M/bCCn5b2V/W5uPS52o39XV UMVT6GJ62RfNUuRn2fyQl6IeD4I5VBQ4+LWV6I4HDmNLpTl596iNNXiQMYkg5pGB 3DBytEGFojA9Rtzflc04h2vommoKtANbmICMAPmoeaIbmud9l3MRC2cjOiv9NI9H b/VjX1UGuVI4kDV1Bo6k9NWAes5a31PRCZAZxrsacUyy5d0ovLzyrdLTAVDQd8DZ BTXMDOK++vAWSqlaqlAQX1QpjfDWUlk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:22 2025 by rpki-client