$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa File: 7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json) Hash identifier: HxQenUFjy6z4tpWPEOXr0xjZUjEPA0teS+7M1Lsp1/g= Subject key identifier: 37:9D:4D:C0:F3:8C:A5:E7:A0:C0:F4:DB:F0:83:15:2E:94:62:9F:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A9CAB5637CBFBC9D40D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 138.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9c:ab:56:37:cb:fb:c9:d4:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=21f55ba2-37ff-4080-8ecc-4e35ef9ac38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:07:ef:f0:11:5e:1d:55:5a:e5:d3:39:0b: 5d:8f:ef:88:68:cf:74:ef:92:ed:b6:f0:c8:f1:3b: 9a:5a:fd:4f:d0:28:3d:9d:03:bd:4f:cc:4c:b1:d7: ed:0d:4d:3b:79:0b:de:89:27:d1:80:f4:b8:fa:d1: 90:1e:d9:4e:08:e2:9a:f4:e3:39:89:78:f6:96:90: 42:4a:db:ea:c2:a8:9b:79:1e:94:b1:73:97:23:d6: 7d:c1:73:a4:06:0f:4b:ae:b6:e3:a5:9f:e6:e2:67: e0:30:af:30:03:f8:94:67:c2:7c:51:1b:8e:5c:1f: ba:61:4b:af:c2:7b:48:4a:1d:18:ac:15:bc:bb:9a: 54:95:04:3a:83:22:bb:f8:67:98:16:b1:64:5b:ec: d8:b9:76:c0:7e:d3:69:5e:e8:1c:d0:69:37:fa:a4: 44:de:5e:d4:2c:e4:2a:82:16:18:e9:00:1c:ce:1f: 59:bc:a4:67:cc:e4:7a:3c:33:fd:06:68:d5:aa:e7: 35:dd:bd:84:b7:5d:41:19:35:95:97:5d:af:db:50: 3a:bd:7b:a9:c9:3b:f2:01:32:67:92:81:b5:7d:2f: 45:33:60:9f:34:cb:45:b9:d0:cc:ce:64:1d:a7:ba: db:3e:3b:c8:a7:58:5f:25:e5:d8:c0:a8:22:be:e0: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:4D:C0:F3:8C:A5:E7:A0:C0:F4:DB:F0:83:15:2E:94:62:9F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fb:de:b7:22:4e:46:d1:65:8d:2d:07:0f:8a:de:27:a8:ce: bc:4f:b5:af:3b:d5:7e:4e:26:f7:73:c1:db:96:99:41:17:1a: cb:cc:29:a9:dd:0b:41:b2:07:76:c2:55:35:6d:25:78:e0:bf: fa:37:6e:ec:d6:8b:ce:f5:b6:3a:e2:e6:23:51:90:cd:85:ee: 7b:cd:e5:82:97:48:d0:c2:c6:c3:51:e7:43:4a:7c:f6:4a:fc: bc:6d:54:20:60:56:c3:85:f5:1a:8a:74:4b:5b:f3:9c:cf:9f: c0:bc:be:7a:d4:29:1a:d3:8b:99:4a:ad:25:ba:c6:a7:80:d2: 6e:b0:c8:d8:69:93:99:b0:ac:fb:75:95:26:29:20:ba:b6:ba: 98:46:57:12:1a:67:0d:49:1d:a8:12:e5:1b:df:c6:00:cb:65: 7a:c2:a9:f5:db:de:10:02:d7:4f:a0:63:ba:c7:09:8f:16:53: d3:bf:97:ec:b2:4e:37:ae:0f:8c:10:60:2c:05:d1:76:82:23: 94:29:f2:71:b2:c4:a3:e3:a3:39:c7:2a:94:99:52:d6:b8:8c: d4:9d:cd:c0:dd:13:a5:2e:d0:cf:be:e5:09:92:6c:b2:79:e5: 1f:14:a1:f7:35:69:a9:08:b7:9c:18:15:55:65:48:0e:a3:d8: 8b:4b:b8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSpyrVjfL+8nUDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MjFmNTViYTItMzdmZi00MDgwLThlY2MtNGUzNWVmOWFjMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV8H7/ARXh1VWuXTOQtdj++IaM9075LttvDI 8TuaWv1P0Cg9nQO9T8xMsdftDU07eQveiSfRgPS4+tGQHtlOCOKa9OM5iXj2lpBC StvqwqibeR6UsXOXI9Z9wXOkBg9LrrbjpZ/m4mfgMK8wA/iUZ8J8URuOXB+6YUuv wntISh0YrBW8u5pUlQQ6gyK7+GeYFrFkW+zYuXbAftNpXugc0Gk3+qRE3l7ULOQq ghYY6QAczh9ZvKRnzOR6PDP9BmjVquc13b2Et11BGTWVl12v21A6vXupyTvyATJn koG1fS9FM2CfNMtFudDMzmQdp7rbPjvIp1hfJeXYwKgivuCwBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDedTcDzjKXnoMD02/CDFS6UYp++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQwNWE5OWEtMzkzZi0z MTk2LTgwYmEtYjRhZDE0MDZhZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHilkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn73rciTkbRZY0tBw+K3ieozrxPta871X5OJvdzwduWmUEXGsvMKand C0GyB3bCVTVtJXjgv/o3buzWi871tjri5iNRkM2F7nvN5YKXSNDCxsNR50NKfPZK /LxtVCBgVsOF9RqKdEtb85zPn8C8vnrUKRrTi5lKrSW6xqeA0m6wyNhpk5mwrPt1 lSYpILq2uphGVxIaZw1JHagS5RvfxgDLZXrCqfXb3hAC10+gY7rHCY8WU9O/l+yy TjeuD4wQYCwF0XaCI5Qp8nGyxKPjoznHKpSZUta4jNSdzcDdE6Uu0M++5QmSbLJ5 5R8Uofc1aakIt5wYFVVlSA6j2ItLuCo= -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:56 2026 by rpki-client