$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9c6ec65-a15e-3725-97c8-147bbf8dad34.roa File: c9c6ec65-a15e-3725-97c8-147bbf8dad34.roa (raw, json) Hash identifier: 3AD2DtDV/yvi3r8R+RLniVnIg+C1IcKo718w9mNrBao= Subject key identifier: 53:CE:55:A5:AE:0B:A9:79:D5:CE:53:E1:2F:B3:D8:23:D3:48:71:72 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DBD05CC39E94A088D54D06980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9c6ec65-a15e-3725-97c8-147bbf8dad34.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 701 IP address blocks: 138.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:cc:39:e9:4a:08:8d:54:d0:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=deaf8ba8-a4af-4b97-9cef-d2fe3cf10ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:9f:ac:20:2f:fc:55:0b:41:79:ce:f5:d4: 28:51:36:81:44:5b:40:41:bb:3c:a8:d9:15:fc:0a: 09:c3:76:63:3a:d2:92:b9:55:20:e8:49:da:18:91: 54:36:34:20:0a:6a:e7:09:54:7c:c6:d8:23:c3:52: c9:c0:54:d0:f1:4b:a3:5b:26:4a:66:19:07:6b:d0: 94:47:a3:04:06:32:49:58:38:e9:54:71:73:98:68: 20:fb:f2:e6:21:06:03:f3:77:7d:95:e4:6b:20:fd: da:20:86:37:95:b3:38:9a:de:00:91:be:bb:18:7a: 60:3b:ca:b2:ff:27:76:d1:58:73:a2:75:85:25:f1: e7:b6:1e:fa:10:fe:bc:7e:01:8d:ed:bd:16:62:55: a9:ec:9d:d5:14:1a:4a:10:49:8d:fd:e6:c6:de:e5: d2:d1:01:27:57:74:4b:7a:8f:cf:ad:d0:1b:11:2e: 23:98:ad:03:b1:81:9c:28:a8:e6:9a:19:58:8d:ae: 8f:b9:55:fe:24:cc:ab:8a:5f:d7:80:1e:56:89:a4: a5:fe:25:85:f0:6d:ea:f4:96:04:c7:78:35:8c:e7: 6c:57:97:4b:93:b9:86:f2:a6:b5:8b:c2:ca:8c:ab: 83:60:12:cf:9e:dd:68:e1:92:48:ca:1a:f8:69:db: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CE:55:A5:AE:0B:A9:79:D5:CE:53:E1:2F:B3:D8:23:D3:48:71:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9c6ec65-a15e-3725-97c8-147bbf8dad34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:54:48:cb:c2:ba:09:39:97:12:23:05:1e:19:b7:85:1d:6f: 38:cd:ef:21:77:91:98:b9:a3:4c:7e:9c:04:8e:75:6e:cf:e9: d7:cf:54:fd:29:7c:4c:34:0c:21:5a:4a:a3:28:1c:7d:78:10: b4:67:86:eb:1b:9a:25:cf:b7:72:f9:44:eb:2d:ef:fd:02:44: 78:e6:74:d5:b3:de:c0:41:e2:1d:f5:df:79:d2:70:66:0e:6b: ce:9a:22:88:6c:ee:b0:d2:20:1a:d5:e0:fb:71:f6:1a:84:bb: c6:9f:47:09:fa:05:0f:4a:61:af:80:3e:8f:b7:ec:b4:e3:e4: 19:a0:51:0f:17:dd:2f:4a:4a:d8:75:c4:5b:77:03:9c:7c:97: ad:b7:18:22:f8:53:43:b1:06:5c:b0:ea:78:15:eb:e5:cf:6b: 49:87:ec:1c:0b:7e:00:14:45:42:a2:48:ec:25:6e:97:ec:a8: 5e:bb:2e:e7:cb:81:5a:77:d6:ec:ce:9c:42:8b:63:73:1e:7f: 3a:39:b0:7c:ae:82:1a:e4:a8:50:0b:8f:16:31:e7:3d:23:e3: 7c:15:4e:21:12:ac:04:e2:7c:54:13:65:8b:e2:ad:b4:10:fe: 89:ec:de:1e:95:65:77:ba:58:46:5f:ea:bc:94:e7:0d:9e:04: b0:a7:60:d3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE29Bcw56UoIjVTQaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZGVhZjhiYTgtYTRhZi00Yjk3LTljZWYtZDJmZTNjZjEwYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09WfrCAv/FULQXnO9dQoUTaBRFtAQbs8qNkV /AoJw3ZjOtKSuVUg6EnaGJFUNjQgCmrnCVR8xtgjw1LJwFTQ8UujWyZKZhkHa9CU R6MEBjJJWDjpVHFzmGgg+/LmIQYD83d9leRrIP3aIIY3lbM4mt4Akb67GHpgO8qy /yd20VhzonWFJfHnth76EP68fgGN7b0WYlWp7J3VFBpKEEmN/ebG3uXS0QEnV3RL eo/PrdAbES4jmK0DsYGcKKjmmhlYja6PuVX+JMyril/XgB5WiaSl/iWF8G3q9JYE x3g1jOdsV5dLk7mG8qa1i8LKjKuDYBLPnt1o4ZJIyhr4aduCcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFPOVaWuC6l51c5T4S+z2CPTSHFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzljNmVjNjUtYTE1ZS0z NzI1LTk3YzgtMTQ3YmJmOGRhZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAilkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXlRIy8K6CTmXEiMFHhm3hR1vOM3vIXeRmLmjTH6cBI51bs/p189U/Sl8 TDQMIVpKoygcfXgQtGeG6xuaJc+3cvlE6y3v/QJEeOZ01bPewEHiHfXfedJwZg5r zpoiiGzusNIgGtXg+3H2GoS7xp9HCfoFD0phr4A+j7fstOPkGaBRDxfdL0pK2HXE W3cDnHyXrbcYIvhTQ7EGXLDqeBXr5c9rSYfsHAt+ABRFQqJI7CVul+yoXrsu58uB WnfW7M6cQotjcx5/OjmwfK6CGuSoUAuPFjHnPSPjfBVOIRKsBOJ8VBNli+KttBD+ iezeHpVld7pYRl/qvJTnDZ4EsKdg0w== -----END CERTIFICATE-----Generated at Wed May 13 11:38:57 2026 by rpki-client