$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: ELU3tdwRdIZvoDkdJfyQDgjow37phiw0gND0heFIkb4= Subject key identifier: F1:B7:C3:A8:B7:15:AC:A7:FD:E7:B9:C4:FF:56:8C:37:FC:7D:60:C8 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B76F255D4E0404656DF8AB080 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:55:d4:e0:40:46:56:df:8a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=78c2d2fb-3567-4025-91d4-8b613d8ac4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:55:bb:c1:b3:7f:a0:1a:19:68:02:a7:7c:79: 6b:76:b2:66:bc:80:8c:c0:cf:47:fb:85:a6:f9:dd: 6b:52:b1:1d:38:a3:bf:24:b9:c8:17:2c:f5:9b:d0: f6:21:d4:21:3d:63:37:00:45:b4:61:26:df:ee:e2: 0c:46:1a:52:c4:92:9b:2e:28:2f:46:18:6a:99:78: 99:3c:ae:cb:4d:66:b5:90:8d:ae:f4:80:6b:e4:9c: 2e:dc:78:63:2b:0d:d1:5a:94:60:d3:02:32:b4:a0: a3:7d:e6:9c:62:fc:e4:be:dd:2c:a2:f1:97:14:c4: 9a:ae:7c:55:a5:89:2c:78:4e:64:62:2b:3d:1b:52: 6b:a5:e9:51:15:71:6b:8d:b6:99:81:21:3a:eb:34: 37:4d:ac:f4:2c:ed:ed:63:35:87:00:30:5d:2c:7e: bc:f4:6b:61:33:be:5e:8a:76:cf:8e:75:ff:35:32: 8f:15:19:1c:87:30:cd:98:ab:4d:d4:6d:b1:e5:d3: e8:a9:2e:02:0e:b8:e6:22:1f:3c:c6:ff:3c:54:d2: 16:58:ba:ec:55:d9:36:9b:71:9f:6e:d3:ab:93:e6: b0:a9:5e:75:a0:47:93:49:f1:e0:12:22:7c:07:88: 72:ee:12:10:c1:a9:20:72:64:02:20:78:dd:7e:6b: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B7:C3:A8:B7:15:AC:A7:FD:E7:B9:C4:FF:56:8C:37:FC:7D:60:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:76:57:af:4d:2c:f8:8f:37:ea:f4:be:7b:66:53:a8:80:f7: 22:34:48:89:85:84:a6:e2:63:e7:b8:38:b1:3e:c9:1c:85:3f: ec:5a:6e:6e:07:02:88:84:b4:16:13:45:ff:e2:75:66:48:ae: 4e:c7:27:1d:3c:17:cc:41:69:f0:64:6d:18:19:96:8f:94:05: 20:d8:14:6b:7c:dc:0f:d3:16:51:8d:93:11:57:e5:67:26:0a: 4a:21:d5:e9:1e:d5:9a:e8:51:c2:24:4c:a9:e5:fe:0e:12:f4: 28:6c:cc:3c:5f:e3:3a:2c:9c:7e:0c:cf:63:6a:d1:0b:d2:b1: a8:6a:1a:4f:ec:f9:46:79:b5:9b:f0:a6:bc:a4:f4:09:06:41: 9b:ef:06:95:b4:1f:b8:96:f5:b2:95:a1:5d:2a:6f:4b:94:e0: 1d:35:29:04:22:ce:d6:7a:ff:f3:9a:7f:10:c9:21:42:9f:af: 4b:c4:36:02:c2:26:d6:de:b3:bc:99:3b:a1:4e:21:f5:87:71: 64:2f:8c:26:02:2e:bf:2b:35:d5:80:bb:94:82:b1:d9:4a:36: 43:1c:d1:21:95:1b:d0:4c:53:59:42:85:6b:75:d9:b8:86:82: 0d:f6:d7:d0:3d:e0:7b:94:9e:4e:fa:1d:00:3e:27:d6:09:17: 98:14:d0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lXU4EBGVt+KsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzhjMmQyZmItMzU2Ny00MDI1LTkxZDQtOGI2MTNkOGFjNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1W7wbN/oBoZaAKnfHlrdrJmvICMwM9H+4Wm +d1rUrEdOKO/JLnIFyz1m9D2IdQhPWM3AEW0YSbf7uIMRhpSxJKbLigvRhhqmXiZ PK7LTWa1kI2u9IBr5Jwu3HhjKw3RWpRg0wIytKCjfeacYvzkvt0sovGXFMSarnxV pYkseE5kYis9G1JrpelRFXFrjbaZgSE66zQ3Taz0LO3tYzWHADBdLH689GthM75e inbPjnX/NTKPFRkchzDNmKtN1G2x5dPoqS4CDrjmIh88xv88VNIWWLrsVdk2m3Gf btOrk+awqV51oEeTSfHgEiJ8B4hy7hIQwakgcmQCIHjdfmvVawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG3w6i3Fayn/ee5xP9WjDf8fWDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd2V69NLPiPN+r0vntmU6iA9yI0SImFhKbiY+e4OLE+yRyFP+xabm4H AoiEtBYTRf/idWZIrk7HJx08F8xBafBkbRgZlo+UBSDYFGt83A/TFlGNkxFX5Wcm Ckoh1eke1ZroUcIkTKnl/g4S9ChszDxf4zosnH4Mz2Nq0QvSsahqGk/s+UZ5tZvw pryk9AkGQZvvBpW0H7iW9bKVoV0qb0uU4B01KQQiztZ6//OafxDJIUKfr0vENgLC Jtbes7yZO6FOIfWHcWQvjCYCLr8rNdWAu5SCsdlKNkMc0SGVG9BMU1lChWt12biG gg3219A94HuUnk76HQA+J9YJF5gU0Lo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:11 2025 by rpki-client