$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: nsmiZ3D8uh3+5Ku5DSsxlZaPdXTHvfJJ+s2RsUGTpQ0= Subject key identifier: 94:A7:26:C9:06:E2:B5:7C:BA:89:F2:70:15:17:C8:80:E4:51:5A:0C Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584E4129DD01C1DDA3D236210340 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:dd:01:c1:dd:a3:d2:36:21:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=b4d7bdaf-274c-41ae-94aa-1fb8b01ccc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:15:75:7b:77:4d:13:26:18:2d:cd:89:3d: ee:a5:ee:d1:72:0e:cc:fe:ae:8b:c8:1e:c5:36:ed: 86:be:a4:0f:1a:23:af:32:92:2f:eb:9b:42:e1:42: 15:15:78:03:b4:43:eb:e0:ca:6c:f2:78:32:39:09: 7e:09:3e:15:1b:ab:54:a3:e6:78:e3:7f:72:fd:70: 7d:e8:ca:b3:27:04:78:2d:a0:3d:c5:9a:30:22:02: 94:f5:a4:cd:79:86:4a:92:48:64:aa:5a:72:c5:eb: 96:d6:24:9f:b3:dd:c0:d8:a3:5e:01:a8:e6:f9:b1: e2:7c:2f:6a:12:2a:7f:65:bd:c7:6d:d5:a0:b5:71: 25:73:fd:81:e4:d3:78:5f:73:be:6e:2e:81:af:5f: 5e:d3:91:4e:a5:5d:c6:0d:0c:2d:fa:12:c7:47:e8: 25:7b:9d:8a:89:8f:ec:50:0c:b4:d7:a5:56:95:b0: a6:d1:c7:dd:3f:97:e5:a9:6f:7c:24:cc:65:42:ee: 50:72:bd:1c:f9:74:b2:fe:08:9b:ed:4b:f0:0e:47: de:cf:7a:a0:57:fc:5a:c4:08:45:53:4b:b2:d2:54: 4c:de:c3:cf:41:d0:7b:af:93:e5:11:3c:f8:58:2d: bd:29:7b:78:e0:bd:87:50:69:c2:40:8b:ea:40:24: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:26:C9:06:E2:B5:7C:BA:89:F2:70:15:17:C8:80:E4:51:5A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f4:db:12:b3:eb:ed:03:38:9a:ba:de:b9:74:05:29:16:23: 5a:aa:16:b4:50:6b:67:7f:81:2b:df:12:cd:e7:07:da:a1:81: 3c:ad:11:0b:39:8e:46:31:9c:2b:02:ee:fe:e3:f3:c7:5d:02: 98:c1:dc:3e:87:4c:a9:a5:20:e5:3a:87:37:68:10:c1:72:1b: c9:04:81:a1:ea:e6:2e:5d:3e:47:2a:a8:d6:da:8e:4c:84:e1: 07:50:cb:32:bf:5e:5a:b4:95:13:dd:10:8d:02:e8:9c:6e:35: 16:f6:d5:c7:95:83:ff:8c:47:fc:8c:37:14:ba:75:68:75:9f: 3d:df:97:05:49:f1:ea:c0:c0:2e:22:eb:be:e4:ad:0f:f5:42: 9d:65:3b:5f:9e:81:99:18:6b:52:73:9a:c1:5e:ff:0b:1f:99: 8b:ba:0c:75:be:95:ce:c9:2d:f4:c7:02:b5:31:e7:f4:a9:7b: da:1e:b8:47:77:6d:80:74:9a:06:a0:1f:94:bc:5f:fa:cb:a7: 35:2a:81:af:21:14:57:23:9e:e5:ea:bc:2a:29:a0:7f:58:04: 5d:a2:11:0a:87:95:e4:66:05:f1:fc:87:49:83:c5:96:ef:a4: c4:23:54:a0:11:c8:62:bc:7f:8d:9b:54:4d:fb:8d:81:73:0c: 9f:bc:4d:ad -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5BKd0Bwd2j0jYhA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk YjRkN2JkYWYtMjc0Yy00MWFlLTk0YWEtMWZiOGIwMWNjYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDoVdXt3TRMmGC3NiT3upe7Rcg7M/q6LyB7F Nu2GvqQPGiOvMpIv65tC4UIVFXgDtEPr4Mps8ngyOQl+CT4VG6tUo+Z4439y/XB9 6MqzJwR4LaA9xZowIgKU9aTNeYZKkkhkqlpyxeuW1iSfs93A2KNeAajm+bHifC9q Eip/Zb3HbdWgtXElc/2B5NN4X3O+bi6Br19e05FOpV3GDQwt+hLHR+gle52KiY/s UAy016VWlbCm0cfdP5flqW98JMxlQu5Qcr0c+XSy/gib7UvwDkfez3qgV/xaxAhF U0uy0lRM3sPPQdB7r5PlETz4WC29KXt44L2HUGnCQIvqQCRPtwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJSnJskG4rV8uonycBUXyIDkUVoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjPTbErPr7QM4mrreuXQFKRYjWqoWtFBrZ3+BK98SzecH2qGBPK0RCzmO RjGcKwLu/uPzx10CmMHcPodMqaUg5TqHN2gQwXIbyQSBoermLl0+Ryqo1tqOTITh B1DLMr9eWrSVE90QjQLonG41FvbVx5WD/4xH/Iw3FLp1aHWfPd+XBUnx6sDALiLr vuStD/VCnWU7X56BmRhrUnOawV7/Cx+Zi7oMdb6Vzskt9McCtTHn9Kl72h64R3dt gHSaBqAflLxf+sunNSqBryEUVyOe5eq8Kimgf1gEXaIRCoeV5GYF8fyHSYPFlu+k xCNUoBHIYrx/jZtUTfuNgXMMn7xNrQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:31 2026 by rpki-client