$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: wEGYFigVHhKr21vVBFqU8Wd+HZQPafOSHqmzqNOSs4o= Subject key identifier: 0D:10:4E:F1:43:D3:61:EE:6D:28:04:DE:CB:7D:5F:32:26:EA:10:73 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D26290B858BBE2449963A0 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:62:90:b8:58:bb:e2:44:99:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a73a6a3b-5b11-44a8-849d-2e9095445dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:a3:16:07:4c:ec:8a:90:18:a5:1c:1d:1f: 31:27:b7:70:a7:60:39:56:b9:fb:ec:41:4d:86:f2: 8c:b7:ea:8d:b7:61:49:69:a8:2e:4f:01:17:ea:90: 64:08:0f:a5:53:3e:12:40:e8:3d:6b:fa:a4:65:f7: 6b:98:09:20:9a:bc:20:05:46:1d:2b:3c:eb:62:62: fa:22:8a:99:86:a2:c6:8b:87:82:5e:46:72:62:20: 2a:5e:2f:e0:23:b0:18:47:c0:b9:e4:d0:26:a9:03: b6:38:c2:06:1f:06:bd:b6:d6:ce:d3:58:eb:98:12: 64:f4:46:8f:28:42:1c:d4:47:43:00:b8:e2:d6:e0: eb:87:db:86:b7:08:7a:a2:30:6b:71:93:3c:95:b0: cd:17:b9:25:40:3f:78:60:f6:bd:69:e7:0f:10:3e: 40:da:69:14:c8:4d:51:81:b1:76:7b:cc:17:ef:42: e2:15:4c:71:e0:e1:e7:a7:59:1b:c4:14:9a:07:72: a1:89:16:08:bc:54:14:5d:0b:e1:fa:5c:a5:de:fc: 54:17:fe:69:2d:a4:dd:72:2d:8c:f3:30:b2:0e:f8: 82:a8:5e:f1:f5:6d:95:3e:15:41:f3:8a:ac:8a:83: 75:01:b9:f5:2e:53:2b:f2:1f:f1:4e:de:93:8b:38: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:10:4E:F1:43:D3:61:EE:6D:28:04:DE:CB:7D:5F:32:26:EA:10:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:04:67:4c:ce:4d:35:b9:88:03:ab:cc:90:be:8c:40:da:3e: e6:3c:cb:0b:57:72:8c:7a:0a:6a:08:57:35:90:f7:ee:94:91: 94:98:e0:12:65:70:79:60:38:c6:ac:f3:cf:a8:30:69:e8:8f: 52:ad:46:e7:19:c1:5d:6a:9f:a5:02:4f:ce:5d:a7:5f:41:76: 1e:8c:b0:16:fd:32:66:52:27:f2:e1:9a:29:64:50:88:ac:15: ac:f5:58:33:17:8a:07:02:2c:73:39:0f:24:ed:e6:ec:59:8f: 20:00:cb:b2:dc:b7:f1:58:41:bd:77:b7:3e:9b:70:04:f6:be: f5:bd:95:4e:26:75:c9:a7:96:8c:22:9b:03:3c:bb:e5:dc:a4: 23:37:99:47:76:31:e5:91:2d:9a:77:54:2b:4a:b7:c0:99:ed: 4d:f4:20:b6:b1:85:28:ab:23:43:31:f6:aa:fc:41:1f:8a:69: 5d:18:17:72:4d:29:7a:c1:67:8d:f9:89:14:7a:55:6a:cd:0b: 86:ea:ad:aa:2a:1a:07:08:12:bc:29:14:66:49:b8:83:68:0f: 6f:5b:6b:4c:ef:b7:ac:b2:1d:90:c3:3a:5a:76:ec:2c:72:18: 4b:e6:32:2f:94:ca:68:8a:ba:8d:7a:99:1b:35:4a:8d:eb:c4: de:8b:a3:6f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEug0mKQuFi74kSZY6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTczYTZhM2ItNWIxMS00NGE4LTg0OWQtMmU5MDk1NDQ1ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ejFgdM7IqQGKUcHR8xJ7dwp2A5Vrn77EFN hvKMt+qNt2FJaaguTwEX6pBkCA+lUz4SQOg9a/qkZfdrmAkgmrwgBUYdKzzrYmL6 IoqZhqLGi4eCXkZyYiAqXi/gI7AYR8C55NAmqQO2OMIGHwa9ttbO01jrmBJk9EaP KEIc1EdDALji1uDrh9uGtwh6ojBrcZM8lbDNF7klQD94YPa9aecPED5A2mkUyE1R gbF2e8wX70LiFUxx4OHnp1kbxBSaB3KhiRYIvFQUXQvh+lyl3vxUF/5pLaTdci2M 8zCyDviCqF7x9W2VPhVB84qsioN1Abn1LlMr8h/xTt6TizgGxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA0QTvFD02HubSgE3st9XzIm6hBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXwRnTM5NNbmIA6vMkL6MQNo+5jzLC1dyjHoKaghXNZD37pSRlJjgEmVw eWA4xqzzz6gwaeiPUq1G5xnBXWqfpQJPzl2nX0F2HoywFv0yZlIn8uGaKWRQiKwV rPVYMxeKBwIsczkPJO3m7FmPIADLsty38VhBvXe3PptwBPa+9b2VTiZ1yaeWjCKb Azy75dykIzeZR3Yx5ZEtmndUK0q3wJntTfQgtrGFKKsjQzH2qvxBH4ppXRgXck0p esFnjfmJFHpVas0LhuqtqioaBwgSvCkUZkm4g2gPb1trTO+3rLIdkMM6WnbsLHIY S+YyL5TKaIq6jXqZGzVKjevE3oujbw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:09 2025 by rpki-client