$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa File: 1fa45883-9415-3840-9fe3-657d50bbe43d.roa (raw, json) Hash identifier: LSfBn0eCstdjQs2zge31M60qr0sN9NalznkR8kTTZrM= Subject key identifier: 20:E1:5D:73:9A:10:83:98:25:14:70:7C:F6:32:F0:34:47:D1:79:0E Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584DA280128BC4E9469A0A43DE80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 15269 IP address blocks: 138.32.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:12:8b:c4:e9:46:9a:0a:43:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=8d051710-bf1f-4983-a5b5-217081590c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:f5:31:b8:09:92:06:c3:97:77:0b:9c:cf: 07:b9:4a:87:e0:c8:b8:38:2d:98:48:39:c1:b1:97: 8b:88:18:46:88:ca:0c:02:d6:30:73:d7:2a:6c:e2: 38:62:a4:21:c8:b5:0c:8c:fd:ae:2f:ba:07:75:ce: 8b:07:a3:de:19:94:cc:47:36:58:f6:6b:28:da:ee: 00:80:d7:e6:4a:2c:cd:75:b5:97:97:3b:58:e0:b4: 22:62:26:a1:96:00:a0:f3:bc:18:45:43:c7:72:23: f7:05:43:86:bd:c4:6d:73:f7:3f:ef:40:89:02:6b: 23:db:6a:5c:83:99:db:b0:2b:d9:44:1a:cb:6f:b3: b0:c6:72:51:6e:0e:dc:0f:06:7e:ca:1a:d1:b9:b3: 5a:0a:12:9f:be:4b:15:80:6d:1e:eb:4d:c1:05:a0: 5a:d6:59:00:5e:48:17:2a:8c:00:25:ea:57:b7:12: 85:48:fe:65:58:b3:37:9f:86:25:94:0a:4e:ef:17: 6c:54:cc:ea:e9:56:c9:48:c9:40:b8:0f:e3:e6:36: a0:b9:fd:80:e0:95:ce:99:97:48:94:37:59:0e:f0: d0:e0:65:6a:af:a9:20:d0:61:da:7f:c1:97:0b:17: 0d:1e:3a:2b:ed:65:bf:b4:05:20:9c:ed:f8:01:a2: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:5D:73:9A:10:83:98:25:14:70:7C:F6:32:F0:34:47:D1:79:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/1fa45883-9415-3840-9fe3-657d50bbe43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f5:69:7e:81:b6:ef:0e:df:86:5b:88:f7:b1:eb:84:8a:49: 06:d0:29:29:55:39:3c:98:e7:76:b8:3c:ff:eb:fe:1d:10:8e: 43:88:0e:33:26:0d:b5:ef:c5:01:62:66:3e:69:8e:64:a4:aa: 1e:5d:77:74:55:db:20:1d:2b:cd:dc:2b:89:80:f8:b6:a9:dc: b0:5e:d4:19:c6:61:47:a8:36:a7:aa:02:03:65:e9:f4:d6:5d: c2:d2:31:fb:52:0b:9d:55:91:74:86:4d:cf:08:4a:8d:3c:ba: 8c:bb:b7:ec:5a:fe:f6:3b:0f:77:df:e6:41:50:d2:b9:ad:3a: 35:19:f7:b0:ac:f6:0f:37:8e:a8:55:ef:51:ac:de:ca:f8:c2: 20:3b:aa:bd:46:64:27:a6:8a:40:3a:dc:23:32:6e:ca:65:4c: 1e:93:f6:db:e9:45:1b:e1:8d:fe:50:ed:fb:34:34:fd:f7:9b: a3:75:f8:e2:8a:30:7f:09:f1:c4:bc:14:3b:9e:c9:f9:3a:f2: 02:31:3c:d4:da:b6:70:12:ac:39:f6:f2:1b:96:6f:b8:13:d8: 5c:c3:b5:ec:88:dd:57:88:2d:cd:b4:89:e7:b2:9d:61:64:6a: 73:d9:3c:5d:d5:1b:35:4c:f7:16:fd:11:14:05:e5:b0:b2:62: 29:57:0b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBKLxOlGmgpD3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk OGQwNTE3MTAtYmYxZi00OTgzLWE1YjUtMjE3MDgxNTkwYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQf1MbgJkgbDl3cLnM8HuUqH4Mi4OC2YSDnB sZeLiBhGiMoMAtYwc9cqbOI4YqQhyLUMjP2uL7oHdc6LB6PeGZTMRzZY9mso2u4A gNfmSizNdbWXlztY4LQiYiahlgCg87wYRUPHciP3BUOGvcRtc/c/70CJAmsj22pc g5nbsCvZRBrLb7OwxnJRbg7cDwZ+yhrRubNaChKfvksVgG0e603BBaBa1lkAXkgX KowAJepXtxKFSP5lWLM3n4YllApO7xdsVMzq6VbJSMlAuA/j5jaguf2A4JXOmZdI lDdZDvDQ4GVqr6kg0GHaf8GXCxcNHjor7WW/tAUgnO34AaKmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDhXXOaEIOYJRRwfPYy8DRH0XkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMWZhNDU4ODMtOTQxNS0z ODQwLTlmZTMtNjU3ZDUwYmJlNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL1aX6Btu8O34ZbiPex64SKSQbQKSlVOTyY53a4PP/r/h0QjkOIDjMm DbXvxQFiZj5pjmSkqh5dd3RV2yAdK83cK4mA+Lap3LBe1BnGYUeoNqeqAgNl6fTW XcLSMftSC51VkXSGTc8ISo08uoy7t+xa/vY7D3ff5kFQ0rmtOjUZ97Cs9g83jqhV 71Gs3sr4wiA7qr1GZCemikA63CMybsplTB6T9tvpRRvhjf5Q7fs0NP33m6N1+OKK MH8J8cS8FDueyfk68gIxPNTatnASrDn28huWb7gT2FzDteyI3VeILc20ieeynWFk anPZPF3VGzVM9xb9ERQF5bCyYilXCxg= -----END CERTIFICATE-----Generated at Thu May 7 01:16:03 2026 by rpki-client