$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: PqJ7iVNaBlG+YIy4RD+h6UAfxtHj8t/Ftkn9Lk84zHg= Subject key identifier: 74:1F:B5:9E:D5:4E:17:1E:10:3D:8B:E8:FE:E5:83:C8:10:48:05:75 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584F8578721D7B4DA88F0590CB80 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:72:1d:7b:4d:a8:8f:05:90:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=8aa80062-8442-4ba6-a977-4120c6225d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:87:d3:1a:c5:46:fd:14:3c:37:bc:11:aa: e6:48:fe:1e:28:c6:ad:09:ad:1a:07:f1:6d:4c:9a: 5e:50:18:ef:70:70:29:dd:c2:8b:85:4e:c1:4c:fa: ba:d6:e6:93:34:af:79:79:25:74:7c:98:76:7f:6b: 9f:f0:be:21:07:51:8e:e4:5f:e4:d4:32:36:6a:c0: 71:47:13:7b:bf:c8:6c:8b:d8:74:03:6b:6c:9b:af: 4a:d9:b6:a7:39:81:1b:38:fa:88:b9:16:31:f8:0d: 75:3f:d7:a9:5e:37:bb:32:df:d6:a4:13:57:dc:07: 24:bd:a4:71:11:d3:95:66:bb:e6:a6:d3:e7:47:62: 81:28:15:2e:a3:a3:2a:13:7b:6a:af:b7:4c:7d:91: d6:fa:93:14:32:39:e3:ed:41:3d:3d:bf:e2:bd:78: ad:6c:5b:a3:99:a7:1f:c0:4d:bf:7e:00:6f:50:ae: 2a:d5:ea:c0:e0:08:85:47:93:c9:78:f3:39:eb:4c: 66:58:bc:97:7e:26:28:11:79:9f:b8:9e:ad:9a:be: 0a:f2:37:36:b7:09:84:2d:c3:84:47:1a:92:4c:42: a0:40:00:df:04:e3:14:cd:cb:cf:43:1c:15:47:00: 52:95:28:27:0a:bc:cc:6d:0c:71:1e:1b:2b:ad:64: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1F:B5:9E:D5:4E:17:1E:10:3D:8B:E8:FE:E5:83:C8:10:48:05:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9f:7b:ae:76:3d:29:03:c9:f7:e2:91:eb:c2:fc:c3:e0:d5: 03:21:53:fa:c3:93:da:e8:d6:11:38:f5:8e:2b:53:2e:f3:6c: 12:65:a3:fd:7f:ad:b8:ed:51:c7:f4:13:ad:eb:76:a7:ab:d3: 5e:f1:56:33:3b:0f:36:df:83:be:29:47:bf:7a:f7:55:2b:54: e9:4a:a1:5a:73:af:26:6a:3c:81:89:73:3d:db:a2:9d:d6:22: bf:75:b1:1f:33:af:6f:69:68:a6:3b:a1:13:23:83:66:a4:14: 62:f0:73:da:a8:cd:66:f7:1c:52:86:10:8d:d5:c2:00:42:a1: 4e:2c:ab:21:a7:51:e7:91:d6:48:5b:cb:3e:56:ef:f7:5c:63: b3:d2:51:29:98:bb:f8:ce:13:21:86:4d:10:10:47:60:a8:66: c8:94:5a:09:97:36:c4:d7:86:41:01:ac:3c:7d:f0:4e:15:35: 83:7f:0e:bc:22:e4:0d:cd:5d:1b:05:39:77:ac:6f:2d:55:db: d3:c3:b2:72:9b:00:dc:b6:6e:0c:c7:40:77:33:8e:c9:d8:55: 83:80:00:c7:88:51:a0:4b:d6:87:2c:45:fe:0c:51:23:1d:5a: 96:a7:1c:fd:6c:99:ef:99:03:f9:86:52:3b:ee:7b:b0:e5:14: 4d:85:28:2f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+FeHIde02ojwWQy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OGFhODAwNjItODQ0Mi00YmE2LWE5NzctNDEyMGM2MjI1ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq26H0xrFRv0UPDe8EarmSP4eKMatCa0aB/Ft TJpeUBjvcHAp3cKLhU7BTPq61uaTNK95eSV0fJh2f2uf8L4hB1GO5F/k1DI2asBx RxN7v8hsi9h0A2tsm69K2banOYEbOPqIuRYx+A11P9epXje7Mt/WpBNX3AckvaRx EdOVZrvmptPnR2KBKBUuo6MqE3tqr7dMfZHW+pMUMjnj7UE9Pb/ivXitbFujmacf wE2/fgBvUK4q1erA4AiFR5PJePM560xmWLyXfiYoEXmfuJ6tmr4K8jc2twmELcOE RxqSTEKgQADfBOMUzcvPQxwVRwBSlSgnCrzMbQxxHhsrrWRyoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHQftZ7VThceED2L6P7lg8gQSAV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdJ97rnY9KQPJ9+KR68L8w+DVAyFT+sOT2ujWETj1jitTLvNsEmWj/X+t uO1Rx/QTret2p6vTXvFWMzsPNt+DvilHv3r3VStU6UqhWnOvJmo8gYlzPduindYi v3WxHzOvb2lopjuhEyODZqQUYvBz2qjNZvccUoYQjdXCAEKhTiyrIadR55HWSFvL Plbv91xjs9JRKZi7+M4TIYZNEBBHYKhmyJRaCZc2xNeGQQGsPH3wThU1g38OvCLk Dc1dGwU5d6xvLVXb08OycpsA3LZuDMdAdzOOydhVg4AAx4hRoEvWhyxF/gxRIx1a lqcc/WyZ75kD+YZSO+57sOUUTYUoLw== -----END CERTIFICATE-----Generated at Wed Oct 28 11:46:15 2026 by rpki-client