$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa File: 976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa (raw, json) Hash identifier: z3mU79nWwhuWF8LxR+JjC0ejRkUJk9tMRQmqEkN3LQE= Subject key identifier: FE:C7:12:4C:1F:E9:E0:A7:89:A0:02:C7:6C:71:59:D2:4B:18:2D:A6 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584DA3E568290C0530E3ADAA4D00 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 18701 IP address blocks: 138.32.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:68:29:0c:05:30:e3:ad:aa:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=a19da8bf-5cab-42da-8f1b-e366fc423329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:e6:93:09:79:1e:1d:d1:bf:0e:86:e8:c4: 65:c9:65:52:f9:42:e0:5e:c3:15:e9:5e:93:f2:85: a6:cc:81:81:5d:5c:b7:02:6e:32:da:5f:3f:14:ec: ec:30:cf:a9:1c:5f:d2:13:7b:f1:11:82:4e:e2:6f: 13:cf:19:3c:ae:4e:b5:c2:a2:6c:8f:51:46:ff:e2: 32:d4:4b:1e:44:15:46:0e:43:6a:ea:b0:40:22:7e: e9:f8:61:f3:e0:dc:65:14:ad:02:b1:5f:3b:e2:b5: c1:4e:a9:ae:38:95:6b:3a:ea:a5:94:82:12:d3:77: 07:16:4d:1e:e6:d0:64:32:58:ff:7f:d3:b6:c6:2e: 6c:bf:a9:10:e1:e8:e0:cf:35:cd:52:a5:7a:81:11: 4a:4a:41:f7:5a:b0:cc:f4:66:63:2a:23:9a:58:d1: a0:5c:05:79:90:06:80:a0:c0:07:bf:8b:7f:cc:48: ba:22:97:f7:1a:84:8f:f0:08:15:6f:67:d2:c7:8f: f7:2c:e5:d3:38:18:c2:ab:5a:da:eb:df:5f:26:36: ff:b2:09:09:8d:74:f7:5c:58:98:34:f3:8a:af:fe: 46:9f:82:57:7f:92:c2:6d:d6:63:5f:5f:d6:08:f8: 50:0a:45:ea:6e:2d:ee:d3:13:b0:18:cf:e3:6e:db: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:12:4C:1F:E9:E0:A7:89:A0:02:C7:6C:71:59:D2:4B:18:2D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:7a:18:ae:ce:30:61:b0:a2:c5:0d:3d:cd:60:82:c4:2e:76: 69:f9:d6:bb:33:b3:7f:6e:af:24:e6:26:9f:40:64:e1:e4:18: 1d:a2:1b:e3:bc:ad:b9:46:f5:7e:31:fe:cc:c7:87:4d:60:59: c7:48:92:2e:a0:5c:34:dd:cc:24:29:2c:cf:98:1a:4c:59:ba: 5f:fb:33:f8:6d:ac:b2:62:84:8e:52:1b:a3:93:47:3f:6b:cd: e3:fe:8d:40:57:ff:36:a3:fa:b8:26:36:00:4e:08:0d:c6:8d: f6:8f:69:08:8b:46:11:62:4d:30:36:5c:b2:1b:ae:a3:3a:f7: e4:8d:7d:ed:e8:83:4b:9e:e8:a3:66:22:0e:a3:c5:1c:5b:76: dc:a4:87:c1:95:ab:46:21:01:d4:a7:b6:c8:e2:c3:1d:02:2e: 2f:a1:09:35:ae:76:94:3d:6f:76:f8:cd:ab:6d:e6:07:d5:73: 60:bc:f0:4f:c2:57:be:1c:05:f3:42:92:a1:11:ba:ec:e3:a9: ba:c1:db:b6:47:4a:ec:64:cb:f5:fe:06:b3:1a:e2:46:6c:c1: 41:3a:b4:48:13:76:5a:52:97:6a:e9:d1:70:e1:50:ae:ab:8b: e5:84:1d:49:b2:49:bb:96:1f:ae:a1:91:86:77:67:a9:06:d5: 6a:67:94:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WgpDAUw462qTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk YTE5ZGE4YmYtNWNhYi00MmRhLThmMWItZTM2NmZjNDIzMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Tmkwl5Hh3Rvw6G6MRlyWVS+ULgXsMV6V6T 8oWmzIGBXVy3Am4y2l8/FOzsMM+pHF/SE3vxEYJO4m8Tzxk8rk61wqJsj1FG/+Iy 1EseRBVGDkNq6rBAIn7p+GHz4NxlFK0CsV874rXBTqmuOJVrOuqllIIS03cHFk0e 5tBkMlj/f9O2xi5sv6kQ4ejgzzXNUqV6gRFKSkH3WrDM9GZjKiOaWNGgXAV5kAaA oMAHv4t/zEi6Ipf3GoSP8AgVb2fSx4/3LOXTOBjCq1ra699fJjb/sgkJjXT3XFiY NPOKr/5Gn4JXf5LCbdZjX1/WCPhQCkXqbi3u0xOwGM/jbtsk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7HEkwf6eCniaACx2xxWdJLGC2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvOTc2NzY0YTEtOTJkNC0z MGEwLThlODItYjhiMDQwYzVlNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL56GK7OMGGwosUNPc1ggsQudmn51rszs39uryTmJp9AZOHkGB2iG+O8 rblG9X4x/szHh01gWcdIki6gXDTdzCQpLM+YGkxZul/7M/htrLJihI5SG6OTRz9r zeP+jUBX/zaj+rgmNgBOCA3GjfaPaQiLRhFiTTA2XLIbrqM69+SNfe3og0ue6KNm Ig6jxRxbdtykh8GVq0YhAdSntsjiwx0CLi+hCTWudpQ9b3b4zatt5gfVc2C88E/C V74cBfNCkqERuuzjqbrB27ZHSuxky/X+BrMa4kZswUE6tEgTdlpSl2rp0XDhUK6r i+WEHUmySbuWH66hkYZ3Z6kG1WpnlBQ= -----END CERTIFICATE-----Generated at Thu May 7 01:16:01 2026 by rpki-client