$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa File: 98417e41-fc5c-3417-9add-ed6493dc5046.roa (raw, json) Hash identifier: sQd8V6+Ku2f/PAwfP/qctvKeLhCNKYqMZQpngpE9nMo= Subject key identifier: 8F:B0:C5:AB:A4:57:B7:5C:E2:E4:61:88:20:68:04:F0:FF:56:27:C0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A7CBA4F2E196818CB4D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 138.89.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:7c:ba:4f:2e:19:68:18:cb:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=133bcd45-0e2d-4727-91c3-898abd55a72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b8:41:3b:75:76:36:03:8d:7c:08:14:a1:4d: 1b:27:c5:77:97:3d:25:b6:68:7b:e0:93:50:6d:34: 0d:e0:f1:67:90:29:6c:06:14:57:d2:ac:0d:c7:af: 23:53:ae:af:d5:8f:b8:3a:08:13:94:71:97:8c:47: 93:42:37:4f:75:7d:13:cf:67:53:05:a7:12:d2:c7: 91:b5:ad:2d:a8:78:52:3a:dc:d3:96:b9:06:ff:52: b8:6e:2e:30:8f:e4:64:01:5c:f2:08:43:0a:de:3c: a3:74:af:d4:bb:7c:6d:7f:9a:55:5e:e4:77:de:1a: 55:b4:c8:69:8a:84:13:3f:bf:49:eb:e2:1f:2a:d9: 80:19:03:64:f5:84:82:b8:56:7d:07:61:5a:be:ee: 20:39:fa:5a:63:5e:e2:1b:b1:87:73:b0:6a:48:c9: d2:96:a6:8c:52:f5:3f:45:77:ee:bf:89:49:d2:8e: 94:71:7f:74:a4:a1:53:f3:76:f6:80:1f:42:f8:bb: df:fb:43:b9:7c:2e:a4:79:60:14:b8:a7:16:3a:24: 8d:2f:37:39:a8:68:3f:86:1a:7a:38:40:ea:5e:78: fe:8b:38:81:c1:24:d3:2b:8c:13:e6:16:31:7a:92: 5f:fd:82:e3:4c:43:3b:3c:6d:9c:1d:43:e1:c6:71: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B0:C5:AB:A4:57:B7:5C:E2:E4:61:88:20:68:04:F0:FF:56:27:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98417e41-fc5c-3417-9add-ed6493dc5046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d4:a3:18:ed:a9:ac:c8:df:de:37:7f:ea:d2:71:e4:02:70: 8e:68:e1:10:ae:05:d1:6e:7a:f9:65:83:36:d1:1a:77:71:5f: 09:9f:c2:94:b9:9c:6a:77:7f:83:af:1f:3f:9b:03:de:a5:d6: d1:57:b7:d2:14:81:6a:6e:69:3a:0a:34:5a:16:44:f5:74:08: 84:0d:88:5c:e1:0a:d7:ae:14:f3:85:2f:a1:75:df:1e:3d:ef: 3f:d4:14:58:e5:9a:c6:e4:d5:a5:b9:84:c8:24:0b:a1:da:49: 0d:05:b4:fc:58:2e:c4:01:09:62:71:6f:99:20:e1:a0:f0:74: aa:50:ea:7e:4a:65:bc:d1:8c:06:1d:eb:ea:41:f3:5c:31:cb: 80:04:91:45:26:e1:32:67:f5:32:d8:12:c6:d6:9b:b1:92:a0: 07:00:78:93:a1:00:8c:17:3d:03:2d:70:01:a7:4d:da:6c:5c: 1f:79:32:55:fb:16:c3:6f:5a:92:e7:5a:e9:ca:60:81:06:a7: 7a:80:2b:27:20:b7:ec:e3:fb:7c:3a:b4:61:b0:d8:05:1a:42: 07:c8:18:50:dd:93:7b:5a:4a:a5:a2:5d:53:b7:c2:29:e1:31: aa:bf:46:9e:5f:77:6b:ee:2b:96:c8:7f:ce:5a:4f:c8:c6:d0: 86:04:c2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSny6Ty4ZaBjLTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MTMzYmNkNDUtMGUyZC00NzI3LTkxYzMtODk4YWJkNTVhNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rhBO3V2NgONfAgUoU0bJ8V3lz0ltmh74JNQ bTQN4PFnkClsBhRX0qwNx68jU66v1Y+4OggTlHGXjEeTQjdPdX0Tz2dTBacS0seR ta0tqHhSOtzTlrkG/1K4bi4wj+RkAVzyCEMK3jyjdK/Uu3xtf5pVXuR33hpVtMhp ioQTP79J6+IfKtmAGQNk9YSCuFZ9B2Favu4gOfpaY17iG7GHc7BqSMnSlqaMUvU/ RXfuv4lJ0o6UcX90pKFT83b2gB9C+Lvf+0O5fC6keWAUuKcWOiSNLzc5qGg/hhp6 OEDqXnj+iziBwSTTK4wT5hYxepJf/YLjTEM7PG2cHUPhxnGnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+wxaukV7dc4uRhiCBoBPD/VifAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTg0MTdlNDEtZmM1Yy0z NDE3LTlhZGQtZWQ2NDkzZGM1MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGilmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjUoxjtqazI3943f+rSceQCcI5o4RCuBdFuevllgzbRGndxXwmfwpS5 nGp3f4OvHz+bA96l1tFXt9IUgWpuaToKNFoWRPV0CIQNiFzhCteuFPOFL6F13x49 7z/UFFjlmsbk1aW5hMgkC6HaSQ0FtPxYLsQBCWJxb5kg4aDwdKpQ6n5KZbzRjAYd 6+pB81wxy4AEkUUm4TJn9TLYEsbWm7GSoAcAeJOhAIwXPQMtcAGnTdpsXB95MlX7 FsNvWpLnWunKYIEGp3qAKycgt+zj+3w6tGGw2AUaQgfIGFDdk3taSqWiXVO3winh Maq/Rp5fd2vuK5bIf85aT8jG0IYEwmY= -----END CERTIFICATE-----Generated at Wed Jul 29 10:39:59 2026 by rpki-client