$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa File: f97f189a-180d-3cb0-b698-2d94be7d983a.roa (raw, json) Hash identifier: ZI3VU9niZV+DhkzAdcFVgIJ1/rB2FwKS4pw0rhwdBbU= Subject key identifier: BF:FD:DC:0A:79:7E:19:E3:2C:32:9C:55:94:B7:B8:2A:77:52:A5:0E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584E66DA0B7A4FB23D1F2215F380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 14061 IP address blocks: 138.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0b:7a:4f:b2:3d:1f:22:15:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=858be2df-0d0f-4a4b-b77c-da11da5bc9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:a0:77:59:9c:f3:b5:f7:06:8b:c4:67:59: ca:d9:83:21:e9:13:c1:29:c3:8f:d9:21:70:15:5b: 05:4a:fb:e6:f1:9f:af:16:4e:5d:40:48:c6:fd:ec: 1a:96:5d:af:38:c7:0e:80:a3:1b:76:a6:cf:30:75: 2d:a4:d1:32:39:11:05:1f:dd:c1:45:03:84:44:bf: 7e:06:aa:cc:31:e6:a5:28:78:ef:13:10:d7:8e:48: 65:6c:4d:bd:6a:49:6c:7b:8c:66:9b:60:6e:28:e3: 56:d8:24:7d:66:30:76:31:8c:4c:d6:29:ef:65:5f: 07:33:95:f8:26:12:27:67:12:f6:e8:cf:88:1d:bb: e5:b7:33:13:a7:24:e8:9c:0b:d4:09:34:bf:eb:e3: 65:8c:fe:6f:06:46:71:64:66:83:7b:9a:a4:26:96: 9f:46:d7:16:20:a2:57:8b:e8:3b:b4:e3:a6:e2:64: 18:b5:7c:4a:5a:e0:0a:3c:57:28:62:2a:a4:c6:a8: ba:ad:14:ad:4e:db:57:c6:d5:f1:6d:ab:6e:49:94: 82:91:30:31:51:9f:cc:bc:ab:c5:dc:54:2c:5e:f0: 09:78:89:eb:46:50:4c:61:e7:1f:c3:ab:57:13:d5: 38:f3:d6:7b:7d:30:ba:1c:ac:ad:6b:04:c4:35:08: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FD:DC:0A:79:7E:19:E3:2C:32:9C:55:94:B7:B8:2A:77:52:A5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 138.197.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7b:96:c1:a6:22:15:cd:5f:d2:b4:9d:cc:a2:4e:73:f6:5f: cf:9d:81:16:24:26:c9:cb:0a:c8:cb:b7:c3:ab:b9:6c:e9:1c: a8:a1:da:be:d1:df:a1:ff:4f:a6:ad:72:e9:7a:f5:08:f3:94: 0d:ce:ba:c1:8a:d5:01:f1:25:f7:77:fb:ed:28:5d:6f:9a:62: a0:b7:c6:ae:66:af:67:6c:f2:d5:e7:b0:45:b7:24:80:bb:0a: 5e:86:07:94:ee:08:93:cd:1f:1b:66:79:f4:24:af:ec:ea:60: 3b:c0:f7:2c:ce:20:fc:f8:c7:8f:af:f2:52:e4:40:1b:6b:f9: 9d:ec:7b:55:65:13:bb:e5:2a:b5:f9:89:bd:6d:37:6c:cc:2d: 10:d0:ea:9b:9b:6f:4f:a4:61:c2:6f:a9:bb:56:f0:e9:fb:f5: 3e:72:8d:cf:96:51:94:36:23:74:69:8f:b6:d9:7d:5e:41:fc: dd:1a:e8:f6:55:7c:6c:d7:2b:83:d0:47:f0:fa:54:96:8f:f4: 6f:1f:0e:b3:fe:ef:37:be:2c:7d:69:d3:94:57:20:63:44:c7: 23:6a:c2:99:b3:5c:43:83:66:f2:89:74:0a:38:63:3a:db:23: d2:ec:83:bc:21:12:b0:ba:af:fa:0f:7a:d9:0a:07:b7:10:5c: eb:3e:dc:3e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5m2gt6T7I9HyIV84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ODU4YmUyZGYtMGQwZi00YTRiLWI3N2MtZGExMWRhNWJjOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Ggd1mc87X3BovEZ1nK2YMh6RPBKcOP2SFw FVsFSvvm8Z+vFk5dQEjG/ewall2vOMcOgKMbdqbPMHUtpNEyOREFH93BRQOERL9+ BqrMMealKHjvExDXjkhlbE29aklse4xmm2BuKONW2CR9ZjB2MYxM1invZV8HM5X4 JhInZxL26M+IHbvltzMTpyTonAvUCTS/6+NljP5vBkZxZGaDe5qkJpafRtcWIKJX i+g7tOOm4mQYtXxKWuAKPFcoYiqkxqi6rRStTttXxtXxbatuSZSCkTAxUZ/MvKvF 3FQsXvAJeInrRlBMYecfw6tXE9U489Z7fTC6HKytawTENQhfSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL/93Ap5fhnjLDKcVZS3uCp3UqUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZjk3ZjE4OWEtMTgwZC0z Y2IwLWI2OTgtMmQ5NGJlN2Q5ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAisUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMnuWwaYiFc1f0rSdzKJOc/Zfz52BFiQmycsKyMu3w6u5bOkcqKHavtHf of9Ppq1y6Xr1CPOUDc66wYrVAfEl93f77Shdb5pioLfGrmavZ2zy1eewRbckgLsK XoYHlO4Ik80fG2Z59CSv7OpgO8D3LM4g/PjHj6/yUuRAG2v5nex7VWUTu+UqtfmJ vW03bMwtENDqm5tvT6Rhwm+pu1bw6fv1PnKNz5ZRlDYjdGmPttl9XkH83Rro9lV8 bNcrg9BH8PpUlo/0bx8Os/7vN74sfWnTlFcgY0THI2rCmbNcQ4Nm8ol0CjhjOtsj 0uyDvCESsLqv+g962QoHtxBc6z7cPg== -----END CERTIFICATE-----Generated at Mon Jul 6 20:15:38 2026 by rpki-client