$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa File: 976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa (raw, json) Hash identifier: kFRn5F8z1c0u9hQqJI1KHHl0WUIQTelMkx70BgX6lLM= Subject key identifier: 1E:69:6D:60:F9:6F:19:29:D6:9D:15:7E:5C:1F:F1:0B:D7:37:FD:7D Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584F268D0E4A5D7FA4E445F72000 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 18701 IP address blocks: 138.32.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0e:4a:5d:7f:a4:e4:45:f7:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=be860cd9-7814-45ba-b1bf-242952b42eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b5:96:af:42:eb:8f:74:0d:fd:ee:a8:dc:9e: 7b:ee:29:9d:fc:cd:02:3b:c8:21:53:41:dd:d6:d7: 0d:58:c6:af:7b:51:62:e4:85:45:d4:40:ee:0b:04: 74:b6:31:1a:61:12:59:34:26:1c:79:16:70:16:0b: 5a:16:a9:0b:1e:a5:6c:f7:1a:b2:13:52:cb:64:3e: de:8a:51:2a:2e:ed:2e:50:5a:3b:bf:ec:37:13:3d: fa:7f:ed:28:7d:e8:71:6c:07:cf:48:15:a8:41:36: 81:35:92:e5:8a:c6:d7:3f:12:3e:6f:81:a4:33:cf: 0c:dd:04:ad:78:a0:2a:6c:6b:85:ec:52:09:17:6b: b8:a8:93:35:b4:05:d7:b2:e0:40:3c:79:38:6e:63: d6:fd:15:50:53:6a:aa:0e:a5:63:63:f3:3a:0c:16: af:d9:3d:56:3c:a0:d9:df:62:3a:95:d6:7e:3a:2d: 42:3e:ea:50:bf:8e:b6:d6:d4:7a:95:d3:56:de:a4: e5:21:36:c6:46:ae:e6:ec:fd:2f:25:20:e6:89:cb: b0:1d:79:c2:14:d3:e4:b7:6e:e9:cf:c7:d9:92:ed: a8:20:15:1d:94:a4:34:63:c6:02:40:04:81:b7:31: fc:02:ea:35:0f:af:62:c9:6a:fb:f1:cb:df:83:bf: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:6D:60:F9:6F:19:29:D6:9D:15:7E:5C:1F:F1:0B:D7:37:FD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:24:f2:74:84:b0:27:d1:de:11:21:3e:ca:e0:11:0a:63:2d: 20:81:20:4e:31:4d:3b:d4:7f:90:3b:5e:2f:c8:d5:d7:c7:03: df:48:5a:3f:f2:76:50:2a:d1:0b:e5:78:19:30:d8:60:ca:9b: 86:d8:ce:05:41:95:a9:76:88:62:5d:e1:92:d9:97:36:d5:34: 2c:1d:76:ca:0c:bc:22:94:09:8a:d4:5b:98:c6:23:c3:9c:33: 35:b6:9f:36:0f:24:0d:6b:34:bc:92:f3:1c:53:c0:24:09:c5: 52:87:1c:7a:14:c2:3f:e0:6a:8d:5c:2b:74:7d:97:44:9d:70: 54:84:a2:90:ab:a3:91:f1:02:17:34:d8:60:4a:ce:7e:94:49: 6a:94:64:bd:5d:e7:c0:eb:f0:a1:a4:9d:64:25:8f:e3:4d:e9: 32:eb:c8:b8:66:fb:28:d7:5b:07:be:21:60:cf:0e:7d:36:3b: 16:d9:b8:1a:89:65:7a:47:6b:a7:37:81:83:d6:43:b0:39:dc: 38:65:8c:31:68:11:32:0a:5e:cc:01:39:ef:de:b9:cc:23:e7: 1f:81:d8:43:c7:f9:f4:cd:0b:1e:a2:b9:d8:dd:27:e9:67:ba: 98:bc:19:e1:88:d4:b6:9d:42:a1:ca:d0:f6:4c:45:21:70:fc: 1b:a3:62:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ5KXX+k5EX3IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk YmU4NjBjZDktNzgxNC00NWJhLWIxYmYtMjQyOTUyYjQyZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7WWr0Lrj3QN/e6o3J577imd/M0CO8ghU0Hd 1tcNWMave1Fi5IVF1EDuCwR0tjEaYRJZNCYceRZwFgtaFqkLHqVs9xqyE1LLZD7e ilEqLu0uUFo7v+w3Ez36f+0ofehxbAfPSBWoQTaBNZLlisbXPxI+b4GkM88M3QSt eKAqbGuF7FIJF2u4qJM1tAXXsuBAPHk4bmPW/RVQU2qqDqVjY/M6DBav2T1WPKDZ 32I6ldZ+Oi1CPupQv4621tR6ldNW3qTlITbGRq7m7P0vJSDmicuwHXnCFNPkt27p z8fZku2oIBUdlKQ0Y8YCQASBtzH8Auo1D69iyWr78cvfg7/IrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5pbWD5bxkp1p0Vflwf8QvXN/19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvOTc2NzY0YTEtOTJkNC0z MGEwLThlODItYjhiMDQwYzVlNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEk8nSEsCfR3hEhPsrgEQpjLSCBIE4xTTvUf5A7Xi/I1dfHA99IWj/y dlAq0QvleBkw2GDKm4bYzgVBlal2iGJd4ZLZlzbVNCwddsoMvCKUCYrUW5jGI8Oc MzW2nzYPJA1rNLyS8xxTwCQJxVKHHHoUwj/gao1cK3R9l0SdcFSEopCro5HxAhc0 2GBKzn6USWqUZL1d58Dr8KGknWQlj+NN6TLryLhm+yjXWwe+IWDPDn02OxbZuBqJ ZXpHa6c3gYPWQ7A53DhljDFoETIKXswBOe/eucwj5x+B2EPH+fTNCx6iudjdJ+ln upi8GeGI1LadQqHK0PZMRSFw/BujYpg= -----END CERTIFICATE-----Generated at Tue Oct 13 22:55:29 2026 by rpki-client