$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa File: 099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa (raw, json) Hash identifier: Uvhz9dIZAOpCevp0yGDUqrk/IUQGF98ZLF7dBji9Xpk= Subject key identifier: 46:89:7C:E5:36:4E:96:51:8C:C4:7C:D0:16:E0:0A:BD:91:9B:B7:88 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A4E58F6302B99CDEFD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 138.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a4:e5:8f:63:02:b9:9c:de:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d0f3e86a-ad6f-4f82-9359-310ff523e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:d4:5f:10:80:b6:c5:14:af:c4:60:57:08: 03:d2:b3:ba:a6:02:d8:0b:64:e6:01:cc:0c:a2:b8: 3c:5d:39:5e:aa:73:35:0d:b1:f5:ce:b7:ba:6a:74: 99:ed:85:a1:71:32:f8:82:74:af:6a:d6:96:34:a1: 5f:b4:01:f8:9c:a5:3b:89:a9:63:31:b6:3b:21:d4: 81:64:3f:c6:40:fb:a7:ef:c6:5a:76:07:86:51:ab: c0:3c:00:6c:2f:e6:b3:ce:51:ee:17:4c:fa:83:f8: 20:c5:ed:6b:bb:0e:05:88:7f:83:71:40:7c:2d:0e: be:ea:2d:e6:71:e9:6c:93:ae:c0:b2:57:2e:18:fe: 31:cf:06:37:c7:67:4a:d6:29:88:00:5a:49:a6:f8: 38:e6:58:57:66:45:38:5c:99:ce:21:60:fb:60:8b: 65:d1:04:f3:43:c0:15:92:cb:35:d7:7b:06:98:5d: 32:a1:5b:d5:eb:4c:a0:16:61:91:df:6a:f0:4a:4a: 2a:f5:e3:88:45:69:60:c3:89:73:3e:78:07:e2:44: d5:51:40:99:01:7e:4e:49:03:a2:ed:40:ee:75:e7: 67:7b:11:aa:36:84:2f:56:8d:c7:71:43:53:0c:5b: 0d:70:7f:74:79:2b:96:e3:1a:08:28:e0:8d:9d:cf: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:89:7C:E5:36:4E:96:51:8C:C4:7C:D0:16:E0:0A:BD:91:9B:B7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:94:aa:61:b5:79:60:88:81:83:73:dd:82:bd:e4:e0:58:2f: b5:5d:ba:56:de:03:0f:09:4d:c6:b9:68:f9:29:6b:f8:2e:32: af:f5:d3:47:15:6b:43:73:f7:b1:5f:bd:df:04:10:d2:6e:f4: a8:56:46:9f:97:a1:1b:ee:43:06:9b:d8:4c:44:84:fc:94:0a: 6e:3d:0a:77:f9:be:d4:3b:df:7f:b8:f9:c0:ee:57:45:3b:1c: 8a:4a:a7:e3:1e:58:1a:d8:c7:33:5a:57:89:79:97:95:e1:0e: 3e:7f:e4:fc:b4:26:a4:d4:dc:22:06:82:8d:7d:d2:17:af:64: 25:bb:89:76:62:9a:b7:64:72:3b:c9:fe:2b:1d:28:1d:a8:3b: 35:5c:d5:9d:ae:c7:df:e4:d3:8d:86:3f:3b:9f:a1:02:f1:81: a4:ed:55:27:42:43:8f:b1:c5:65:d3:1d:d7:1a:34:e4:f6:39: e6:a0:3a:4f:4a:da:1f:b0:e8:29:9f:45:0c:95:62:e3:92:e3: 7a:fc:51:a3:17:e1:ec:4a:e7:2d:a1:02:d1:8a:9b:9a:11:e9: 52:32:08:af:15:3a:08:0b:f5:69:f0:1c:81:d6:4f:0b:79:55: 9f:3b:0e:0d:84:ca:0b:35:bc:fb:ed:c4:d3:19:8e:6d:82:69: c5:6e:81:be -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE73F6Tlj2MCuZze/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDBmM2U4NmEtYWQ2Zi00ZjgyLTkzNTktMzEwZmY1MjNlNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMrUXxCAtsUUr8RgVwgD0rO6pgLYC2TmAcwM org8XTleqnM1DbH1zre6anSZ7YWhcTL4gnSvataWNKFftAH4nKU7ialjMbY7IdSB ZD/GQPun78ZadgeGUavAPABsL+azzlHuF0z6g/ggxe1ruw4FiH+DcUB8LQ6+6i3m celsk67AslcuGP4xzwY3x2dK1imIAFpJpvg45lhXZkU4XJnOIWD7YItl0QTzQ8AV kss113sGmF0yoVvV60ygFmGR32rwSkoq9eOIRWlgw4lzPngH4kTVUUCZAX5OSQOi 7UDudednexGqNoQvVo3HcUNTDFsNcH90eSuW4xoIKOCNnc8tDwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEaJfOU2TpZRjMR80BbgCr2Rm7eIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDk5YTJjODAtNWMwZS0z YWQ5LTg1YmYtYzZjYzViZjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAilgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlZSqYbV5YIiBg3Pdgr3k4FgvtV26Vt4DDwlNxrlo+Slr+C4yr/XTRxVr Q3P3sV+93wQQ0m70qFZGn5ehG+5DBpvYTESE/JQKbj0Kd/m+1Dvff7j5wO5XRTsc ikqn4x5YGtjHM1pXiXmXleEOPn/k/LQmpNTcIgaCjX3SF69kJbuJdmKat2RyO8n+ Kx0oHag7NVzVna7H3+TTjYY/O5+hAvGBpO1VJ0JDj7HFZdMd1xo05PY55qA6T0ra H7DoKZ9FDJVi45LjevxRoxfh7ErnLaEC0YqbmhHpUjIIrxU6CAv1afAcgdZPC3lV nzsODYTKCzW8++3E0xmObYJpxW6Bvg== -----END CERTIFICATE-----Generated at Sun Sep 13 19:00:57 2026 by rpki-client