$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa File: af08d7df-7048-3d64-a80c-79eef48f967f.roa (raw, json) Hash identifier: V3PkCM8m9Jk7c1gSRK3/V4NDK/zvSZ+q696ARq8F08E= Subject key identifier: 0E:86:21:3C:B7:8E:99:0F:30:3D:A6:C1:0E:02:61:BF:AC:B5:F8:88 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F1E2CF3024EC4871447FF7280 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 54994 IP address blocks: 138.113.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f3:02:4e:c4:87:14:47:ff:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=c43635d3-bcba-49c0-9c3f-7eb4016501eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:2f:79:b4:5a:65:08:cc:ab:89:fb:30:d5: a1:44:69:fd:35:e1:12:59:d4:36:c9:3a:44:3c:8e: 8c:9b:80:d9:e9:12:b4:8a:0b:ca:4d:32:12:7c:1f: 41:d2:42:fe:bd:f9:4f:22:d9:ef:11:c4:c8:19:5f: b6:a8:0d:e9:7f:1f:60:0e:c5:0c:fe:bb:ff:79:26: 97:61:8b:e3:73:7b:c4:2c:4f:bb:4d:09:db:f0:79: 6d:e4:07:21:18:64:55:ac:c0:73:41:70:8e:46:91: 52:68:69:21:ca:46:c7:c7:b1:07:6e:00:be:4c:c3: 80:f9:13:a3:21:e8:a3:b3:99:f5:8d:c4:1b:4d:2c: df:2a:f4:0e:16:25:e2:d7:ac:15:31:a4:4f:3b:2c: 7e:22:64:08:47:c0:d8:fc:31:e0:14:0f:74:93:00: 37:ad:65:6d:d9:3d:4c:ba:db:79:0d:36:ab:66:9c: 77:77:b8:5d:b5:bd:7a:a1:d4:9c:01:c5:e6:47:f3: 11:ff:64:21:2e:f0:86:dd:d9:a4:8c:65:bc:6e:17: 00:05:d6:38:72:8c:c6:6b:b5:92:63:34:ef:6a:b8: c8:97:c1:b6:e1:cb:e4:d9:c7:b3:0f:cd:a8:f3:1b: 06:68:4c:cb:14:c4:08:9b:c4:c9:c3:6c:55:1a:b2: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:86:21:3C:B7:8E:99:0F:30:3D:A6:C1:0E:02:61:BF:AC:B5:F8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bf:f7:3b:47:50:d9:a4:c6:85:23:15:4f:b1:04:21:b3:c6: d4:c1:f2:67:f7:ab:dc:6c:84:c6:7d:85:93:0b:b1:48:7f:5b: 7a:70:cd:c0:64:42:fa:0a:62:c1:6a:9f:7b:84:21:aa:ae:94: a3:f5:12:05:12:13:50:bc:f9:aa:1f:b5:f5:55:b6:f0:70:9e: f6:5a:1e:17:b2:87:1e:43:6f:5d:33:cc:95:88:a9:58:d5:f2: 46:84:9d:0e:35:4c:28:b8:6c:f1:92:e1:b6:09:df:80:e5:81: 4b:41:78:66:18:aa:04:62:45:76:8a:fe:02:e4:92:d5:28:15: 45:60:69:b7:32:44:6c:3f:e8:41:7c:dc:ad:00:bf:d2:20:91: 94:5e:39:d2:ef:f9:ab:70:2c:81:66:72:9e:b1:ae:24:69:b5: 8c:ab:ad:23:42:34:a9:a4:98:96:a8:ec:79:2a:fb:c3:84:0b: 70:bc:6e:d5:66:88:6b:63:24:89:7d:a5:08:f5:b9:d4:b6:1e: 18:c3:9f:9a:af:9f:3f:31:4b:65:01:ab:b6:04:cf:ee:51:91: d2:9e:24:1d:7f:78:60:1d:7c:1f:cd:c8:a6:26:48:ff:d9:30: 36:43:40:e3:da:d4:0c:40:a1:f8:33:37:4b:78:63:8a:b4:86: 27:2e:95:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPMCTsSHFEf/coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk YzQzNjM1ZDMtYmNiYS00OWMwLTljM2YtN2ViNDAxNjUwMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUAvebRaZQjMq4n7MNWhRGn9NeESWdQ2yTpE PI6Mm4DZ6RK0igvKTTISfB9B0kL+vflPItnvEcTIGV+2qA3pfx9gDsUM/rv/eSaX YYvjc3vELE+7TQnb8Hlt5AchGGRVrMBzQXCORpFSaGkhykbHx7EHbgC+TMOA+ROj Ieijs5n1jcQbTSzfKvQOFiXi16wVMaRPOyx+ImQIR8DY/DHgFA90kwA3rWVt2T1M utt5DTarZpx3d7hdtb16odScAcXmR/MR/2QhLvCG3dmkjGW8bhcABdY4cozGa7WS YzTvarjIl8G24cvk2cezD82o8xsGaEzLFMQIm8TJw2xVGrL8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6GITy3jpkPMD2mwQ4CYb+stfiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYWYwOGQ3ZGYtNzA0OC0z ZDY0LWE4MGMtNzllZWY0OGY5NjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS/9ztHUNmkxoUjFU+xBCGzxtTB8mf3q9xshMZ9hZMLsUh/W3pwzcBk QvoKYsFqn3uEIaqulKP1EgUSE1C8+aoftfVVtvBwnvZaHheyhx5Db10zzJWIqVjV 8kaEnQ41TCi4bPGS4bYJ34DlgUtBeGYYqgRiRXaK/gLkktUoFUVgabcyRGw/6EF8 3K0Av9IgkZReOdLv+atwLIFmcp6xriRptYyrrSNCNKmkmJao7Hkq+8OEC3C8btVm iGtjJIl9pQj1udS2HhjDn5qvnz8xS2UBq7YEz+5RkdKeJB1/eGAdfB/NyKYmSP/Z MDZDQOPa1AxAofgzN0t4Y4q0hiculaE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:15:12 2026 by rpki-client