$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: s/Sr7973YkVCUuSqWsf1rmUvaXvYRVHVcAwWansTxMM= Subject key identifier: 72:AB:FA:03:AF:50:AC:41:4F:EF:E0:E7:12:C2:2F:63:39:07:94:1E Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584D60E509E7FECFA06772749E20 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:09:e7:fe:cf:a0:67:72:74:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=95130b0a-14af-4577-a2e2-86f686f328fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:64:95:af:a1:98:a0:73:37:e9:c8:64:3c: ea:81:d9:2b:be:1d:b7:36:6d:a1:0c:5d:5f:dd:fd: 80:83:cc:b3:75:7d:31:28:98:a1:38:25:c9:fd:43: 22:85:67:b0:d9:a0:88:05:a2:32:d9:dd:e2:f2:96: 8b:17:6e:c3:87:9b:b9:2c:70:b0:f0:32:4b:be:df: a5:0d:9e:15:b5:7f:78:1f:e0:f5:2b:aa:ea:d8:9e: 03:50:41:02:e3:ad:87:86:4c:e9:fc:14:ca:13:83: b6:4a:ed:7c:8c:e0:76:df:5d:6d:b9:85:3e:e3:49: 4e:49:7a:d6:ad:e8:19:b7:43:70:38:5a:d7:99:50: 0c:6f:c4:e6:1f:d4:d1:34:1c:6f:29:66:cb:7c:ca: 02:eb:8a:70:96:23:60:62:39:78:30:6c:3e:2e:2b: 66:c5:ed:1e:f1:c2:9d:d4:96:01:53:22:f3:e6:7e: 5f:c5:04:df:ff:1c:61:bf:a3:06:21:22:cc:88:57: 0d:10:89:57:96:39:8f:aa:73:e8:e3:57:8b:e5:8f: 47:e1:1e:2a:5c:64:16:0c:a8:2d:f6:54:de:56:79: d5:b5:60:4c:37:93:15:ae:f4:55:dd:9e:1f:4e:33: ec:cf:c4:a9:ff:a9:46:3d:b5:7e:b8:01:59:71:04: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:FA:03:AF:50:AC:41:4F:EF:E0:E7:12:C2:2F:63:39:07:94:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ee:d5:dc:d2:25:9c:82:f8:84:58:15:45:44:4f:63:4d:68: 20:68:af:c9:b7:fe:7a:c0:57:d4:ce:5f:69:61:9d:14:45:19: d7:ac:c7:73:3b:4b:5f:75:a6:95:fd:86:cb:1e:5a:3e:70:ed: dd:52:b4:44:dd:79:f4:96:a1:ee:71:c7:87:4a:94:f2:4e:57: 47:74:b4:28:d0:b0:9e:b3:67:d4:cd:4d:78:01:52:b5:73:f3: 2e:5f:2d:2e:20:d2:5a:2d:99:ae:9d:18:33:6a:4a:d5:b4:98: 8c:57:30:bb:3a:7a:02:29:52:fa:5b:51:38:c8:df:8d:80:84: e0:e2:78:29:22:c3:80:e8:1d:f3:53:88:80:67:b7:34:7c:70: 0c:30:44:3a:1f:2e:35:ef:fc:17:85:27:97:ea:85:dd:68:b4: fc:d2:be:f2:00:91:42:89:6d:fa:6c:7a:37:ca:a2:4a:94:c8: 72:a0:35:14:5a:c0:7d:fe:db:41:45:65:22:20:0c:a2:65:5d: e2:49:e3:15:13:8f:a4:68:33:df:e4:ee:07:52:96:1f:2c:51: 87:f0:01:1e:3b:4a:89:4f:ec:e7:8e:2f:bc:a1:9a:2b:bd:03: ac:60:4a:b2:de:2b:6e:03:79:f4:4b:52:f8:9a:53:eb:86:c9: d5:56:6f:36 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1g5Qnn/s+gZ3J0niAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTUxMzBiMGEtMTRhZi00NTc3LWEyZTItODZmNjg2ZjMyOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZkla+hmKBzN+nIZDzqgdkrvh23Nm2hDF1f 3f2Ag8yzdX0xKJihOCXJ/UMihWew2aCIBaIy2d3i8paLF27Dh5u5LHCw8DJLvt+l DZ4VtX94H+D1K6rq2J4DUEEC462Hhkzp/BTKE4O2Su18jOB2311tuYU+40lOSXrW regZt0NwOFrXmVAMb8TmH9TRNBxvKWbLfMoC64pwliNgYjl4MGw+Litmxe0e8cKd 1JYBUyLz5n5fxQTf/xxhv6MGISLMiFcNEIlXljmPqnPo41eL5Y9H4R4qXGQWDKgt 9lTeVnnVtWBMN5MVrvRV3Z4fTjPsz8Sp/6lGPbV+uAFZcQSwfwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHKr+gOvUKxBT+/g5xLCL2M5B5QeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvO7V3NIlnIL4hFgVRURPY01oIGivybf+esBX1M5faWGdFEUZ16zHcztL X3Wmlf2Gyx5aPnDt3VK0RN159Jah7nHHh0qU8k5XR3S0KNCwnrNn1M1NeAFStXPz Ll8tLiDSWi2Zrp0YM2pK1bSYjFcwuzp6AilS+ltROMjfjYCE4OJ4KSLDgOgd81OI gGe3NHxwDDBEOh8uNe/8F4Unl+qF3Wi0/NK+8gCRQolt+mx6N8qiSpTIcqA1FFrA ff7bQUVlIiAMomVd4knjFROPpGgz3+TuB1KWHyxRh/ABHjtKiU/s544vvKGaK70D rGBKst4rbgN59EtS+JpT64bJ1VZvNg== -----END CERTIFICATE-----Generated at Wed Apr 15 11:37:17 2026 by rpki-client