$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa File: 099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa (raw, json) Hash identifier: pXeUswGF8aHBBB1oEFPrYkXQxIlMyHXA86UwriqP04g= Subject key identifier: 81:3B:1A:F2:34:84:55:40:56:BB:DC:C6:5E:E5:9E:4F:7F:C3:D9:2B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D7470072E928CB6CCBC457DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 138.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:07:2e:92:8c:b6:cc:bc:45:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=8129aecf-0bec-4f7f-bfaf-ba3a4860e90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:5a:75:4a:fe:49:f1:66:41:25:c4:c9:c3: df:fd:25:75:0e:30:a1:14:70:5a:58:af:11:46:a4: ee:8f:0c:52:90:f4:28:b9:f8:a6:41:e7:c6:35:e1: 65:75:86:b5:e4:fb:ce:7f:a1:f1:00:69:e2:98:0d: 69:14:6a:ce:95:b4:80:76:92:45:cf:36:d0:0b:19: b4:ef:6b:86:df:49:7b:0d:03:28:39:e5:33:2a:f7: da:57:04:34:f4:9c:30:3c:47:d5:2a:d1:f4:2b:2d: 4d:fd:96:db:ac:39:57:88:9a:cf:32:0f:9b:f3:28: c5:27:3b:b0:0b:58:e3:ac:b2:f7:91:6a:60:b3:90: 9a:33:93:e6:11:fc:9b:2c:86:57:b6:a1:a7:ec:af: 69:2a:95:be:f3:85:25:d7:9d:74:79:7b:4b:af:2b: c9:e1:65:53:c8:4b:ff:92:a0:15:39:3c:e5:98:86: cc:91:af:04:c1:d3:c2:b2:ce:36:3c:7b:13:6b:f9: 48:93:5b:89:39:dd:f4:32:50:86:b9:21:f6:6e:f6: be:d8:5b:eb:5a:2f:ef:5c:7e:b9:21:8d:dc:12:a1: 08:f7:0e:e4:02:c9:86:30:16:a1:a1:f6:7e:5e:f8: ea:e6:67:8e:56:9b:8f:6c:c7:81:ba:bb:5a:87:0d: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:1A:F2:34:84:55:40:56:BB:DC:C6:5E:E5:9E:4F:7F:C3:D9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2b:2a:1f:cf:03:fb:a6:3b:68:31:79:59:25:bd:bc:6a:91: 2c:2b:f3:90:d0:26:79:0a:3f:b0:a2:b7:be:88:81:e7:3b:27: 19:87:4e:cf:13:20:d2:fc:7e:d1:a2:bf:c0:a2:50:7b:5e:fd: 87:7e:5c:b4:e1:2b:bf:a4:38:28:47:d4:43:e3:82:34:41:9d: c5:db:b3:2f:ae:70:5d:e0:66:fa:d4:76:a8:a9:f7:7b:d7:35: dd:49:49:01:7c:f4:0e:c9:0f:00:e7:d3:35:f7:7b:60:b8:78: 28:89:70:99:bc:40:31:7b:f3:ca:22:ab:14:ca:ad:32:4e:f2: d0:19:c9:dc:96:25:53:a4:4a:61:96:cd:62:f9:aa:d1:f7:30: ad:9b:cd:1f:0d:23:e7:66:5a:cc:05:4b:b4:c8:73:d4:f7:54: 87:dd:c9:3a:4d:43:18:3e:51:1a:b2:45:18:d1:3b:b6:08:59: 9d:3d:95:0a:27:5e:74:82:a1:bb:4b:6d:c8:60:0c:f2:51:2e: fa:81:8f:2a:d9:fe:d3:84:4f:3a:02:44:a8:f9:39:91:46:c1: 38:1e:22:1b:4a:a1:84:20:4e:05:17:fb:2f:b8:c9:2d:8c:9f: 4f:84:14:3c:61:86:ad:7c:43:4b:eb:28:f9:c2:e9:ac:ae:81: 38:39:67:2d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE10cAcukoy2zLxFfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ODEyOWFlY2YtMGJlYy00ZjdmLWJmYWYtYmEzYTQ4NjBlOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCladUr+SfFmQSXEycPf/SV1DjChFHBaWK8R RqTujwxSkPQoufimQefGNeFldYa15PvOf6HxAGnimA1pFGrOlbSAdpJFzzbQCxm0 72uG30l7DQMoOeUzKvfaVwQ09JwwPEfVKtH0Ky1N/ZbbrDlXiJrPMg+b8yjFJzuw C1jjrLL3kWpgs5CaM5PmEfybLIZXtqGn7K9pKpW+84Ul1510eXtLryvJ4WVTyEv/ kqAVOTzlmIbMka8EwdPCss42PHsTa/lIk1uJOd30MlCGuSH2bva+2FvrWi/vXH65 IY3cEqEI9w7kAsmGMBahofZ+Xvjq5meOVpuPbMeBurtahw0iRQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIE7GvI0hFVAVrvcxl7lnk9/w9krMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDk5YTJjODAtNWMwZS0z YWQ5LTg1YmYtYzZjYzViZjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAilgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiysqH88D+6Y7aDF5WSW9vGqRLCvzkNAmeQo/sKK3voiB5zsnGYdOzxMg 0vx+0aK/wKJQe179h35ctOErv6Q4KEfUQ+OCNEGdxduzL65wXeBm+tR2qKn3e9c1 3UlJAXz0DskPAOfTNfd7YLh4KIlwmbxAMXvzyiKrFMqtMk7y0BnJ3JYlU6RKYZbN Yvmq0fcwrZvNHw0j52ZazAVLtMhz1PdUh93JOk1DGD5RGrJFGNE7tghZnT2VCide dIKhu0ttyGAM8lEu+oGPKtn+04RPOgJEqPk5kUbBOB4iG0qhhCBOBRf7L7jJLYyf T4QUPGGGrXxDS+so+cLprK6BODlnLQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:15 2026 by rpki-client