$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa File: 720ba2e2-29a5-310a-ae15-5a549837472a.roa (raw, json) Hash identifier: Fouav7Q6jaipAV+5K2bDZQhWxVN4GPI3Tj6HPSk8CfY= Subject key identifier: AC:82:7E:1A:1E:22:2D:6C:3E:D1:9B:91:83:99:1D:B8:26:57:98:A6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F03A83F3D615B7E259689F400 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 54994 IP address blocks: 138.113.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:3f:3d:61:5b:7e:25:96:89:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ec5ce613-c908-49a7-9e38-a86915d3222a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:98:9f:11:ca:8b:fc:6b:7f:eb:72:58:64: 39:b6:ae:fd:fb:27:82:71:63:9d:62:85:94:ba:13: 04:2e:64:43:33:bc:56:08:86:65:c1:cc:21:0c:c6: 8c:c7:1e:d5:f7:6c:b8:02:8e:38:e7:c5:06:f2:ce: 8a:0d:1c:d2:50:ff:99:65:a1:f8:56:fd:c3:fe:cb: 1d:99:97:ea:ab:38:c5:36:3e:50:85:4d:f6:eb:ad: 6d:31:13:87:48:f4:da:25:0e:80:d4:0d:50:b5:c0: 8b:24:12:65:78:a0:ea:be:82:00:15:27:89:00:b3: be:ac:01:fe:f8:ed:01:12:74:40:d5:c0:27:06:c4: c7:8f:03:13:c8:3f:4e:d3:cb:fb:ab:d8:a2:be:fd: e4:be:6a:0a:fb:80:92:86:e1:07:18:8c:4d:f1:90: 5d:d3:a2:fb:78:c3:ca:c1:77:66:af:95:7f:2b:20: 40:bb:56:05:8e:6e:45:30:f1:80:6b:67:2e:1b:d8: 7f:9c:3a:64:bc:fb:93:b6:a6:5f:a9:49:cb:3b:72: a9:03:a1:79:ad:22:1f:93:34:31:91:76:cc:94:33: 3b:a1:91:f3:21:39:44:82:a6:c7:2b:aa:ba:d5:6b: 47:79:eb:ff:d4:30:f3:6f:01:a5:20:5b:03:2a:86: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:82:7E:1A:1E:22:2D:6C:3E:D1:9B:91:83:99:1D:B8:26:57:98:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/720ba2e2-29a5-310a-ae15-5a549837472a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:81:c8:17:7a:fd:97:8b:19:45:1e:09:98:54:f3:6e:29:05: 12:4b:fa:69:ea:61:35:3d:ca:4e:e0:7b:3d:72:34:c8:5d:fa: 98:c4:59:ea:82:82:08:bb:d8:d3:0c:2b:d7:87:df:cd:e2:96: 78:5d:30:5d:d6:2e:b8:73:15:d2:e1:c7:f4:24:93:96:fb:85: 6a:bd:1c:74:6e:39:a8:9f:b7:c1:f9:b3:fc:00:82:30:c8:87: 6c:63:8b:93:c2:c9:32:f8:af:7b:47:45:db:83:11:dc:f0:1f: b8:e7:df:ce:10:95:54:91:96:c6:e7:86:87:79:0a:36:f1:e2: dd:80:04:ce:55:af:c2:32:87:2d:4a:fd:94:8b:4f:e3:73:ad: d1:b9:34:c8:80:6f:e1:5d:b6:4b:eb:bb:87:da:ec:28:7e:e2: 71:9b:c6:16:53:dd:c3:8a:1d:17:b3:41:43:bf:76:f3:73:1e: 54:da:40:a8:cb:aa:fb:70:39:99:00:7d:2d:ac:b0:ad:41:2e: cc:a0:a6:80:ce:9c:42:48:9c:b0:1b:c8:cb:c6:10:7f:43:ca: 53:1f:56:49:41:6b:0a:98:7a:a9:df:29:c1:4d:4a:3f:c5:0c: 2d:25:73:57:f0:90:bc:e6:6e:aa:a5:c1:bc:0c:b5:b0:0e:4f: 43:8f:3a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqD89YVt+JZaJ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWM1Y2U2MTMtYzkwOC00OWE3LTllMzgtYTg2OTE1ZDMyMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRSYnxHKi/xrf+tyWGQ5tq79+yeCcWOdYoWU uhMELmRDM7xWCIZlwcwhDMaMxx7V92y4Ao4458UG8s6KDRzSUP+ZZaH4Vv3D/ssd mZfqqzjFNj5QhU32661tMROHSPTaJQ6A1A1QtcCLJBJleKDqvoIAFSeJALO+rAH+ +O0BEnRA1cAnBsTHjwMTyD9O08v7q9iivv3kvmoK+4CShuEHGIxN8ZBd06L7eMPK wXdmr5V/KyBAu1YFjm5FMPGAa2cuG9h/nDpkvPuTtqZfqUnLO3KpA6F5rSIfkzQx kXbMlDM7oZHzITlEgqbHK6q61WtHeev/1DDzbwGlIFsDKoYgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyCfhoeIi1sPtGbkYOZHbgmV5imMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzIwYmEyZTItMjlhNS0z MTBhLWFlMTUtNWE1NDk4Mzc0NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiByBd6/ZeLGUUeCZhU824pBRJL+mnqYTU9yk7gez1yNMhd+pjEWeqC ggi72NMMK9eH383ilnhdMF3WLrhzFdLhx/Qkk5b7hWq9HHRuOaift8H5s/wAgjDI h2xji5PCyTL4r3tHRduDEdzwH7jn384QlVSRlsbnhod5Cjbx4t2ABM5Vr8Iyhy1K /ZSLT+NzrdG5NMiAb+Fdtkvru4fa7Ch+4nGbxhZT3cOKHRezQUO/dvNzHlTaQKjL qvtwOZkAfS2ssK1BLsygpoDOnEJInLAbyMvGEH9DylMfVklBawqYeqnfKcFNSj/F DC0lc1fwkLzmbqqlwbwMtbAOT0OPOlc= -----END CERTIFICATE-----Generated at Sun Sep 27 02:56:12 2026 by rpki-client