$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: xz4sgnYUEf+JPJpBg1FF3PrEF/xG6P8+KnWRhHHKDT0= Subject key identifier: 1A:64:D1:90:BB:B1:9D:C0:E3:73:2C:B7:AA:19:3D:3B:1E:D9:A9:57 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584EE38CA8C44325A1EF1045B420 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a8:c4:43:25:a1:ef:10:45:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=56ac76ad-b695-43df-8c48-8265529a8793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:03:f8:68:58:e7:c9:e4:9e:68:22:66:ea: 8e:07:b1:d6:7d:ea:ef:8f:61:d9:57:98:66:38:17: b5:68:af:8d:7e:dc:3d:d8:ce:25:0d:e1:3e:7f:b6: 49:ab:0a:d1:16:59:e3:d5:a5:ae:d0:ee:ff:04:83: c2:7e:ca:35:e0:bd:56:95:3f:fc:66:ac:02:db:0f: 14:eb:b9:34:74:db:76:af:85:19:b6:7b:e3:3e:ea: b2:47:22:2b:1f:ec:92:51:07:7d:4f:10:ce:82:8c: 1e:68:b4:d4:ba:a5:2a:87:67:1c:00:85:dc:95:50: a9:00:ed:76:46:ab:ac:e6:6c:58:be:fe:c9:02:dc: bb:ad:1b:a5:e0:3e:69:19:f0:ee:7a:6d:f7:fe:16: cd:74:9c:94:9f:32:4f:99:d9:1e:3e:29:fe:21:40: 62:44:bc:66:d9:9d:cb:a8:10:7e:a1:f8:77:90:d9: eb:dd:77:1d:64:73:67:99:13:4a:54:03:86:d3:32: 6a:40:8e:cf:22:f4:fc:d9:fe:86:f7:38:ab:3c:44: aa:2d:a0:fa:7f:1f:88:5b:73:b2:6f:19:b8:75:fd: 20:75:35:8b:b7:5f:27:7f:51:07:81:32:36:b5:cd: ee:37:83:15:48:fe:7e:ac:0c:43:4d:da:d0:b2:50: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:64:D1:90:BB:B1:9D:C0:E3:73:2C:B7:AA:19:3D:3B:1E:D9:A9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b5:53:d9:a8:a3:71:9f:af:61:1e:14:6e:6f:db:fa:ab:c0: ef:eb:ec:a8:e1:55:52:65:01:f5:b7:77:6b:a5:0a:1f:f6:d6: 56:e3:e2:89:1c:81:74:08:a3:51:66:d9:88:10:b9:2f:fb:90: d9:d1:46:a3:24:f9:06:30:d9:38:46:b6:4d:7d:73:de:da:0e: 4a:74:00:c4:bd:f1:7d:a1:6f:fa:ff:8b:8d:f1:8c:3e:56:1f: 38:b2:68:c9:59:46:cf:2c:38:02:94:4d:d0:7b:e2:f2:4d:ab: 95:ab:06:a4:05:7f:12:8d:14:fd:7a:d2:34:1e:f2:43:48:21: 8c:2e:dc:e3:a8:59:e1:d4:d5:87:cc:93:b4:a8:bc:1d:da:23: eb:04:3a:9d:a5:53:24:be:90:9d:d3:91:15:ee:89:76:d8:14: 35:15:2e:31:ae:2b:b2:23:05:36:8f:d8:38:f2:a6:3c:13:0d: ac:da:77:ed:51:5d:e7:0b:c2:58:28:75:16:d0:53:a0:c6:83: 98:31:af:d3:76:4b:21:1b:df:a3:b4:f4:70:bb:45:be:94:96: 73:b2:f3:76:44:35:0c:88:b6:e4:5f:37:65:31:f9:df:00:df: 78:a6:fa:a4:1e:44:ae:b1:88:e7:d0:72:f5:09:22:f7:01:be: bd:ad:2c:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7jjKjEQyWh7xBFtCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NTZhYzc2YWQtYjY5NS00M2RmLThjNDgtODI2NTUyOWE4NzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicMD+GhY58nknmgiZuqOB7HWfervj2HZV5hm OBe1aK+Nftw92M4lDeE+f7ZJqwrRFlnj1aWu0O7/BIPCfso14L1WlT/8ZqwC2w8U 67k0dNt2r4UZtnvjPuqyRyIrH+ySUQd9TxDOgoweaLTUuqUqh2ccAIXclVCpAO12 Rqus5mxYvv7JAty7rRul4D5pGfDuem33/hbNdJyUnzJPmdkePin+IUBiRLxm2Z3L qBB+ofh3kNnr3XcdZHNnmRNKVAOG0zJqQI7PIvT82f6G9zirPESqLaD6fx+IW3Oy bxm4df0gdTWLt18nf1EHgTI2tc3uN4MVSP5+rAxDTdrQslBdmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBpk0ZC7sZ3A43Mst6oZPTse2alXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASrVT2aijcZ+vYR4Ubm/b+qvA7+vsqOFVUmUB9bd3a6UKH/bWVuPiiRyB dAijUWbZiBC5L/uQ2dFGoyT5BjDZOEa2TX1z3toOSnQAxL3xfaFv+v+LjfGMPlYf OLJoyVlGzyw4ApRN0Hvi8k2rlasGpAV/Eo0U/XrSNB7yQ0ghjC7c46hZ4dTVh8yT tKi8Hdoj6wQ6naVTJL6QndORFe6JdtgUNRUuMa4rsiMFNo/YOPKmPBMNrNp37VFd 5wvCWCh1FtBToMaDmDGv03ZLIRvfo7T0cLtFvpSWc7LzdkQ1DIi25F83ZTH53wDf eKb6pB5ErrGI59By9Qki9wG+va0sAA== -----END CERTIFICATE-----Generated at Sat Sep 5 03:26:55 2026 by rpki-client