$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa File: b991e82a-2e7a-3467-997c-589f9374fc62.roa (raw, json) Hash identifier: jf93n+sMEHlZ2equ7+n8+rjLjpm7MP1bbI/99n76a1g= Subject key identifier: 9A:B6:72:86:B1:C2:AC:68:3A:E6:DC:C7:10:7F:29:13:5B:46:70:AB Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584EA7887B2F206EC893EE95AA48 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7b:2f:20:6e:c8:93:ee:95:aa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3a6b2b47-1bbe-4e20-af23-25636d3747b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:52:40:41:72:82:9a:07:fa:6e:f3:7d:39: 1e:01:cf:3c:fb:96:36:0e:b8:87:2b:f4:b3:ba:eb: 5c:23:d6:61:d4:69:fa:d4:ab:97:ad:33:d8:55:83: cb:38:74:12:f7:1c:36:a9:48:ae:79:fa:28:d3:57: af:bb:6c:c6:27:52:67:15:3e:15:6f:8a:a0:58:e0: a7:16:27:85:b3:c3:3a:b4:fc:17:4d:6b:00:72:b9: 24:e9:bc:85:f1:d7:ce:cf:33:38:6b:30:37:fa:ee: ee:00:58:55:3e:ad:15:52:9d:49:f0:a3:30:31:46: 12:19:e3:98:07:7d:d6:e7:80:ce:63:9d:0f:9b:89: c0:a4:39:3c:fb:79:2f:32:3b:13:a2:1e:6b:c8:ee: 09:0b:a4:b2:55:ff:0f:d3:54:63:61:fb:81:f8:e5: 8f:84:8a:d5:6c:dd:4c:53:7a:3f:b4:a6:ad:37:67: 43:f3:b2:47:f4:b7:c2:e5:5e:a6:62:b6:ea:5b:02: f2:71:d9:b0:45:13:37:4c:74:23:26:c8:25:12:e9: 53:a9:1c:b7:11:a9:f6:63:a6:c3:ff:f9:93:aa:36: 91:0b:35:ea:8b:d0:1f:48:45:a7:a2:af:ce:d5:50: ed:78:c9:c5:bb:a7:51:b6:cc:7f:dd:24:6d:2a:b8: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:72:86:B1:C2:AC:68:3A:E6:DC:C7:10:7F:29:13:5B:46:70:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:96:f8:05:b4:ea:3b:7b:8f:86:50:37:2f:f9:7c:4b:6b:92: 82:e1:a7:3c:b3:8c:f8:c2:5b:3c:c4:ad:ba:78:82:3e:fa:38: 0b:e9:4b:6b:5d:3f:de:88:56:07:72:58:e4:26:41:ac:08:a4: 31:83:d8:fb:d7:e7:4b:98:54:07:ac:66:f7:aa:d9:ba:5d:b1: d2:08:d7:dd:6f:98:98:ff:9e:f1:08:21:89:14:7b:cc:d6:63: dc:00:87:50:94:81:12:18:7f:b6:e9:0f:02:b1:89:05:6a:7a: dc:e3:fd:38:3d:c8:f2:f6:0b:6c:63:ea:3e:b2:ef:27:94:3f: 86:16:0b:9b:1c:1b:00:92:de:43:f1:2e:a6:54:a8:69:c6:3d: b7:12:77:66:5a:a3:e8:da:03:fa:fd:55:63:fb:ac:9d:c4:31: 8a:55:59:10:09:5f:88:22:92:82:0e:11:bd:4c:7b:3f:2f:c2: e8:de:ff:d1:b3:91:a5:61:66:c4:7d:3a:61:2d:08:1e:b8:f7: 97:d3:2e:9f:2d:ab:16:77:1d:ec:f9:ed:07:5d:5a:3d:13:0d: e1:2f:9d:f2:6a:30:5a:13:98:51:a5:d7:2a:17:6e:bc:65:15: a1:e8:5c:23:8b:2c:af:3b:a5:3d:64:33:5f:d3:12:ab:eb:36: 2f:8d:a7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHsvIG7Ik+6VqkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2E2YjJiNDctMWJiZS00ZTIwLWFmMjMtMjU2MzZkMzc0N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymJSQEFygpoH+m7zfTkeAc88+5Y2DriHK/Sz uutcI9Zh1Gn61KuXrTPYVYPLOHQS9xw2qUiuefoo01evu2zGJ1JnFT4Vb4qgWOCn FieFs8M6tPwXTWsAcrkk6byF8dfOzzM4azA3+u7uAFhVPq0VUp1J8KMwMUYSGeOY B33W54DOY50Pm4nApDk8+3kvMjsToh5ryO4JC6SyVf8P01RjYfuB+OWPhIrVbN1M U3o/tKatN2dD87JH9LfC5V6mYrbqWwLycdmwRRM3THQjJsglEulTqRy3Ean2Y6bD //mTqjaRCzXqi9AfSEWnoq/O1VDteMnFu6dRtsx/3SRtKrigKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq2coaxwqxoOubcxxB/KRNbRnCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYjk5MWU4MmEtMmU3YS0z NDY3LTk5N2MtNTg5ZjkzNzRmYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuW+AW06jt7j4ZQNy/5fEtrkoLhpzyzjPjCWzzErbp4gj76OAvpS2td P96IVgdyWOQmQawIpDGD2PvX50uYVAesZveq2bpdsdII191vmJj/nvEIIYkUe8zW Y9wAh1CUgRIYf7bpDwKxiQVqetzj/Tg9yPL2C2xj6j6y7yeUP4YWC5scGwCS3kPx LqZUqGnGPbcSd2Zao+jaA/r9VWP7rJ3EMYpVWRAJX4gikoIOEb1Mez8vwuje/9Gz kaVhZsR9OmEtCB6495fTLp8tqxZ3Hez57QddWj0TDeEvnfJqMFoTmFGl1yoXbrxl FaHoXCOLLK87pT1kM1/TEqvrNi+Np9M= -----END CERTIFICATE-----Generated at Thu Aug 20 00:11:31 2026 by rpki-client