$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json) Hash identifier: xKeM/1HykP2/8gn8ZTsEA7LuvxznN8PR6Xot2wqVt7s= Subject key identifier: 63:17:19:32:8D:E5:99:A5:8D:98:38:97:6B:0A:AF:C7:AB:E4:E9:2E Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D359FD770D964657CF9C3A940 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 54994 IP address blocks: 138.113.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d7:70:d9:64:65:7c:f9:c3:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b0c40bd8-d21f-4711-82a0-c8b16bfa98ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:04:a3:b6:a9:06:a2:d8:22:b4:0a:6a:24: 71:2c:03:c2:ad:fd:4c:79:ee:c5:6e:56:1a:3b:58: 57:ac:28:88:54:4c:bd:b6:94:dd:07:b0:18:e4:b6: 7e:99:bd:75:7b:d4:61:5a:f5:67:56:d0:f9:67:82: 82:00:da:4f:d7:28:4a:10:85:58:2d:3c:65:40:e4: c1:fb:26:a5:98:2d:80:47:05:3e:20:ce:eb:72:3c: d8:08:ec:df:6d:14:f2:ea:20:35:37:98:9b:bb:9c: 95:c2:85:d0:86:36:d4:55:dc:03:51:f1:3e:22:fd: f9:cf:aa:92:ea:3e:1f:42:b7:a4:9d:54:ec:af:4b: 38:54:43:14:2f:d4:38:ea:ae:36:cf:7b:8f:1e:f4: 5f:91:32:4b:a4:c9:09:cf:e5:16:a8:7f:ce:a4:42: 20:ba:e2:2c:39:0c:7b:65:83:1c:f6:63:b3:58:0f: d7:0c:de:ea:88:52:a0:81:1a:2b:a6:62:69:01:f2: c1:46:7b:a3:62:9c:03:22:89:87:d9:06:84:76:6e: f2:59:bd:ec:04:8d:2d:58:0f:96:6a:79:57:e0:27: 05:97:a2:86:20:84:c4:b1:d5:37:3c:b6:a8:10:4e: 21:4f:2d:09:7f:2f:15:59:d6:16:c7:fa:8a:fa:cf: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:19:32:8D:E5:99:A5:8D:98:38:97:6B:0A:AF:C7:AB:E4:E9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:c1:f5:d6:34:92:16:0f:9a:3e:19:be:2c:42:63:ed:51: a3:df:e9:ce:3f:41:d8:bc:c1:62:05:40:d0:ff:5d:7f:08:09: 93:a2:65:06:12:d0:3f:e1:5c:78:4d:bb:6e:e5:cd:cc:5b:b8: 0e:56:e7:52:e5:aa:22:e7:70:d8:2c:43:eb:82:b4:96:ed:1d: 38:b7:5e:9e:25:48:d0:ed:4e:2d:71:7a:49:b4:00:0f:41:c8: 10:e3:7c:47:43:48:f9:53:f4:24:f1:04:a7:cb:23:e3:57:cc: db:ad:b6:86:66:c0:f9:c2:af:8c:6a:d2:1c:18:8b:26:28:ff: c2:41:39:b1:78:e2:d4:74:4a:54:3d:7e:ec:c2:c0:64:4c:5b: 80:da:7e:c4:f5:a0:0d:f1:bf:eb:81:38:1c:dd:b9:e9:f0:8e: a9:4c:f5:15:0e:e9:41:78:6c:ed:1f:43:1c:88:82:06:4f:15: f0:92:59:83:85:9a:5f:50:5a:35:15:10:a7:57:66:56:30:d4: 92:de:1e:41:07:50:96:71:b5:73:25:a0:7a:03:76:b8:d0:64: 69:cc:8a:08:96:d5:73:53:dc:73:7c:5a:cb:4c:95:2b:59:17: bc:11:ae:92:ce:62:a6:87:3a:6f:a2:49:c3:5b:ab:0b:d3:3b: de:15:aa:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9dw2WRlfPnDqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjBjNDBiZDgtZDIxZi00NzExLTgyYTAtYzhiMTZiZmE5OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0oEo7apBqLYIrQKaiRxLAPCrf1Mee7FblYa O1hXrCiIVEy9tpTdB7AY5LZ+mb11e9RhWvVnVtD5Z4KCANpP1yhKEIVYLTxlQOTB +yalmC2ARwU+IM7rcjzYCOzfbRTy6iA1N5ibu5yVwoXQhjbUVdwDUfE+Iv35z6qS 6j4fQreknVTsr0s4VEMUL9Q46q42z3uPHvRfkTJLpMkJz+UWqH/OpEIguuIsOQx7 ZYMc9mOzWA/XDN7qiFKggRorpmJpAfLBRnujYpwDIomH2QaEdm7yWb3sBI0tWA+W anlX4CcFl6KGIITEsdU3PLaoEE4hTy0Jfy8VWdYWx/qK+s9ypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMXGTKN5ZmljZg4l2sKr8er5OkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjczOGEzZTUtNzRlOS0z ZTAwLTlkN2UtYTEyMmFlYTA1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5BwfXWNJIWD5o+Gb4sQmPtUaPf6c4/Qdi8wWIFQND/XX8ICZOiZQYS 0D/hXHhNu27lzcxbuA5W51LlqiLncNgsQ+uCtJbtHTi3Xp4lSNDtTi1xekm0AA9B yBDjfEdDSPlT9CTxBKfLI+NXzNuttoZmwPnCr4xq0hwYiyYo/8JBObF44tR0SlQ9 fuzCwGRMW4DafsT1oA3xv+uBOBzduenwjqlM9RUO6UF4bO0fQxyIggZPFfCSWYOF ml9QWjUVEKdXZlYw1JLeHkEHUJZxtXMloHoDdrjQZGnMigiW1XNT3HN8WstMlStZ F7wRrpLOYqaHOm+iScNbqwvTO94Vqno= -----END CERTIFICATE-----Generated at Thu Mar 26 08:07:40 2026 by rpki-client