$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa File: e9a2c883-433a-3010-903a-e1899d8a61d5.roa (raw, json) Hash identifier: Lvu1lqq4JPQ/fAVAMpJ95Z8oOc6Sb1daRwKkZKpjysw= Subject key identifier: 92:F7:E1:B5:92:8B:C8:36:99:1A:2D:47:C8:61:F0:2E:3A:25:72:20 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B715CB732CD5AD07D4F2E9280 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 48737 IP address blocks: 138.113.254.0/24 maxlen: 24 138.113.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b7:32:cd:5a:d0:7d:4f:2e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0cd1713b-52a9-48d8-9fe2-7bd819b24c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:db:96:be:bd:ca:dc:79:9c:02:4f:2f:50: 38:05:9b:e6:2a:95:79:80:1a:f0:a1:d4:62:26:b6: 23:2d:21:83:02:17:be:eb:54:b2:23:8e:7c:5e:20: d8:ee:a6:e7:53:b1:d0:9f:10:1f:32:d0:b6:62:6e: bc:1a:6a:4d:6f:d7:bb:1a:71:eb:fd:ad:99:89:ec: aa:91:73:f7:44:2e:94:4f:41:c7:76:9a:e8:6e:ed: bd:36:2a:ee:82:da:ea:ae:f7:47:bb:f1:17:c9:48: dd:57:1d:ce:45:96:dc:62:ee:f0:c9:7b:4f:d0:95: ff:0a:a8:43:fe:6b:a0:e9:50:19:8c:d3:8c:d2:ab: c2:b6:c8:b1:47:dc:f0:6e:7d:d4:41:9c:bb:90:e8: d6:c4:12:89:6b:a9:6d:f5:8c:b3:b5:ae:57:0e:87: fb:47:b8:43:4e:39:3f:bd:9c:7d:f6:75:f1:be:ce: f4:12:61:57:8e:a5:55:0e:be:db:65:39:76:ad:5c: d7:f5:8f:3b:42:b0:32:f0:21:a6:40:f5:18:04:97: 05:2a:47:4c:a8:04:df:ec:5e:95:d7:39:44:ad:14: 6b:4e:db:98:d2:58:1d:55:39:47:87:52:bb:23:82: 2c:05:37:c8:9a:36:2f:70:ab:82:f7:9b:17:ca:60: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F7:E1:B5:92:8B:C8:36:99:1A:2D:47:C8:61:F0:2E:3A:25:72:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:e0:b0:f3:a3:0a:d0:08:39:b7:f5:05:ba:15:52:b7:cd: e8:bd:8d:31:74:34:ab:68:c7:57:54:4a:2c:d0:e0:26:19:e1: 1f:f0:6c:0a:96:b8:9a:87:5d:da:a0:24:70:fc:91:0d:da:0d: 69:5c:07:8e:40:18:76:62:ce:29:b7:c8:ad:63:c3:ab:79:2e: 8b:cd:38:03:0b:4b:33:ac:89:64:a1:ab:26:86:c0:4f:48:d5: 66:db:c4:ef:d1:9d:96:a0:fb:df:3f:dc:54:a5:46:6a:97:51: 25:cf:93:1d:3d:3c:af:0b:53:66:db:79:4f:82:2e:d3:b0:d3: da:f1:a0:46:b5:84:b1:ef:4d:4b:57:28:e2:24:9a:11:8b:76: 2d:21:ab:b4:26:e6:c9:ed:88:88:f6:d8:ef:fd:b6:0d:a5:b9: 07:a3:78:3d:72:52:d8:a3:68:09:cb:f8:23:ca:09:ca:58:d0: 2e:8a:a6:c5:ed:54:6c:05:ba:40:dc:4e:ad:ba:43:a9:53:34: 73:ba:55:24:f0:49:cd:d5:da:8a:04:80:2a:a3:c5:2e:a5:d1: 65:8f:23:50:e7:a0:1b:cb:0c:d6:c6:cf:79:31:ff:b8:ca:e4: 5d:90:9a:db:8a:05:a3:0c:eb:e3:27:21:09:ec:7b:b2:d2:b5: 61:4a:fb:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLcyzVrQfU8ukoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGNkMTcxM2ItNTJhOS00OGQ4LTlmZTItN2JkODE5YjI0YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR3blr69ytx5nAJPL1A4BZvmKpV5gBrwodRi JrYjLSGDAhe+61SyI458XiDY7qbnU7HQnxAfMtC2Ym68GmpNb9e7GnHr/a2Zieyq kXP3RC6UT0HHdprobu29NirugtrqrvdHu/EXyUjdVx3ORZbcYu7wyXtP0JX/CqhD /mug6VAZjNOM0qvCtsixR9zwbn3UQZy7kOjWxBKJa6lt9Yyzta5XDof7R7hDTjk/ vZx99nXxvs70EmFXjqVVDr7bZTl2rVzX9Y87QrAy8CGmQPUYBJcFKkdMqATf7F6V 1zlErRRrTtuY0lgdVTlHh1K7I4IsBTfImjYvcKuC95sXymBc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL34bWSi8g2mRotR8hh8C46JXIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTlhMmM4ODMtNDMzYS0z MDEwLTkwM2EtZTE4OTlkOGE2MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBinH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtw4LDzowrQCDm39QW6FVK3zei9jTF0NKtox1dUSizQ4CYZ4R/wbAqW uJqHXdqgJHD8kQ3aDWlcB45AGHZizim3yK1jw6t5LovNOAMLSzOsiWShqyaGwE9I 1WbbxO/RnZag+98/3FSlRmqXUSXPkx09PK8LU2bbeU+CLtOw09rxoEa1hLHvTUtX KOIkmhGLdi0hq7Qm5sntiIj22O/9tg2luQejeD1yUtijaAnL+CPKCcpY0C6KpsXt VGwFukDcTq26Q6lTNHO6VSTwSc3V2ooEgCqjxS6l0WWPI1DnoBvLDNbGz3kx/7jK 5F2QmtuKBaMM6+MnIQnse7LStWFK+wM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:25 2025 by rpki-client