$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: koZJoVByK91GA1wEzuQl6uycFA1laz4/yVmGfaRZiLs= Subject key identifier: 2F:C7:5E:BF:00:C7:BE:6F:B4:F6:A8:3D:E0:14:74:D2:B4:41:08:2B Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584D932547340B16300A0486DD00 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:47:34:0b:16:30:0a:04:86:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=5dc7a8fe-fbb4-40f4-9c01-ba0c2badf32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:bf:c7:d4:fb:40:36:c8:86:3a:29:7b:8b: ab:6b:5b:a9:43:3c:f5:39:ef:7d:e5:b6:ba:ec:a6: bf:f2:54:7d:18:7b:83:10:18:30:31:dc:98:cf:06: 8c:7d:ed:6f:c5:69:16:56:1a:b8:26:e5:4e:eb:ef: 06:67:d1:d5:ee:a5:c6:4c:c7:c4:55:20:2a:38:a6: a6:14:59:92:db:ec:c2:8c:c8:ba:ce:91:10:84:f7: 84:60:8d:42:56:51:82:ac:65:c5:68:a2:70:3e:ca: 05:33:81:ba:0d:8c:e4:22:7f:91:04:47:6a:49:97: b0:65:b9:f4:19:a6:32:1b:c4:4a:bf:fd:78:78:e8: bd:b0:aa:1c:50:cd:d4:c7:77:c8:18:43:a0:ba:6c: d9:50:4d:39:65:10:26:fe:63:eb:3a:7e:a6:ab:08: 0a:cc:16:25:59:c1:a4:fd:9d:19:46:e0:f1:29:31: 18:90:7e:1b:66:69:bc:49:6d:94:b2:ca:97:d5:8a: 73:8a:e0:54:17:f9:30:f2:84:0a:4c:b6:16:74:03: 27:f3:b1:38:52:0b:98:31:6d:23:eb:2d:64:7e:c0: f0:fb:10:75:94:5b:2b:4f:c6:27:bd:d6:6b:32:8c: fd:0e:39:cb:e8:4c:92:74:27:ef:99:b1:d2:7a:a8: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:5E:BF:00:C7:BE:6F:B4:F6:A8:3D:E0:14:74:D2:B4:41:08:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:04:ee:b4:a5:e8:63:f9:98:c9:d8:0e:29:b6:33:af:98:aa: 61:63:8e:29:17:db:d5:64:6a:37:a4:80:93:3f:64:b5:f5:0d: b0:80:c4:2a:30:cb:e1:65:59:34:9d:f1:38:80:71:9d:90:5f: a0:50:8b:5a:89:54:3b:33:90:6b:4e:a4:a6:f3:d9:75:b2:32: 8e:13:d2:d0:6a:a8:d2:5e:ab:58:f9:d9:f7:cc:84:6a:8d:e1: a7:df:bc:95:c3:5b:e8:3b:68:bc:16:e4:df:10:14:73:db:fd: 48:ee:2c:d3:6a:76:1c:01:32:df:ca:28:54:42:ef:19:a8:6a: 92:20:af:2e:84:84:bb:09:f6:97:ea:4d:9b:c3:32:cb:13:30: 70:ee:8e:b6:79:69:c7:83:22:f5:55:55:b3:02:72:db:8f:fa: a3:05:69:0c:f8:a1:e8:ad:f2:85:3e:fe:4a:b1:5f:63:ea:29: 32:5a:6c:bf:ac:ca:47:dc:6b:f4:3b:5b:bc:7c:34:53:24:a4: 44:07:89:c3:b9:be:ef:3b:75:74:33:f4:50:af:cf:96:18:4c: aa:51:23:cf:0e:08:d9:5d:0d:24:91:a9:a6:d0:50:b6:46:1c: b7:31:34:bc:bd:5a:0b:01:43:a6:4f:83:59:90:3f:e7:97:4d: 50:4c:62:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUc0CxYwCgSG3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NWRjN2E4ZmUtZmJiNC00MGY0LTljMDEtYmEwYzJiYWRmMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI+/x9T7QDbIhjope4ura1upQzz1Oe995ba6 7Ka/8lR9GHuDEBgwMdyYzwaMfe1vxWkWVhq4JuVO6+8GZ9HV7qXGTMfEVSAqOKam FFmS2+zCjMi6zpEQhPeEYI1CVlGCrGXFaKJwPsoFM4G6DYzkIn+RBEdqSZewZbn0 GaYyG8RKv/14eOi9sKocUM3Ux3fIGEOgumzZUE05ZRAm/mPrOn6mqwgKzBYlWcGk /Z0ZRuDxKTEYkH4bZmm8SW2UssqX1YpziuBUF/kw8oQKTLYWdAMn87E4UguYMW0j 6y1kfsDw+xB1lFsrT8YnvdZrMoz9DjnL6EySdCfvmbHSeqjZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/HXr8Ax75vtPaoPeAUdNK0QQgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgE7rSl6GP5mMnYDim2M6+YqmFjjikX29VkajekgJM/ZLX1DbCAxCow y+FlWTSd8TiAcZ2QX6BQi1qJVDszkGtOpKbz2XWyMo4T0tBqqNJeq1j52ffMhGqN 4affvJXDW+g7aLwW5N8QFHPb/UjuLNNqdhwBMt/KKFRC7xmoapIgry6EhLsJ9pfq TZvDMssTMHDujrZ5aceDIvVVVbMCctuP+qMFaQz4oeit8oU+/kqxX2PqKTJabL+s ykfca/Q7W7x8NFMkpEQHicO5vu87dXQz9FCvz5YYTKpRI88OCNldDSSRqabQULZG HLcxNLy9WgsBQ6ZPg1mQP+eXTVBMYtA= -----END CERTIFICATE-----Generated at Mon Apr 27 11:21:26 2026 by rpki-client