$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa File: bf933f39-3d1b-3b4e-a17f-f9d650858405.roa (raw, json) Hash identifier: 5mZ9blCpEztOa72VcssUXobu5fRihtPEghCl+2BE5h8= Subject key identifier: F9:CE:54:1E:24:AD:0D:1E:AA:4C:98:30:A6:7F:9C:D6:0F:F1:EC:6F Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584DA28015E812C6905766A1F500 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 18701 IP address blocks: 138.32.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:15:e8:12:c6:90:57:66:a1:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=2da02141-32d2-4a6b-9265-0abee2a7048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:e7:da:af:0f:0e:22:3b:18:bd:a2:fc:29: a9:5d:41:d9:50:42:d8:11:c1:54:42:60:61:91:eb: 84:fa:7e:6a:3c:d2:67:8b:89:a2:db:7e:02:8e:dd: 87:19:ad:04:72:06:89:55:35:3c:b5:88:24:15:60: c9:fc:b3:aa:de:61:e9:46:9b:35:2a:ec:35:99:df: 6f:b0:98:21:8d:2f:d4:57:d0:16:d9:ea:3d:a9:a9: 21:f1:9a:1d:de:df:17:53:95:ac:88:f7:6d:e3:80: 54:a7:f8:9c:5e:5e:05:a0:fa:42:3b:f2:00:6f:eb: be:40:35:42:46:5f:98:21:e7:3d:c5:b5:6f:3e:8e: 37:9b:42:5c:f8:1b:a9:58:01:b2:b4:5a:38:69:c5: 05:17:1d:f9:68:c7:b6:58:de:a8:01:db:30:71:51: ff:47:df:d5:fe:7e:e9:ae:e0:62:06:19:18:42:58: d1:d8:45:e7:d5:d8:12:e1:d0:6e:f5:94:a3:9c:1d: 87:dd:8f:15:1b:c2:aa:c4:07:31:ad:90:a0:ae:9d: d3:f7:63:2b:65:5a:22:f0:96:ae:3d:87:6d:2b:3b: 38:c3:10:fa:d5:4b:4d:55:97:20:c7:e1:21:d3:81: 7b:3e:74:a2:e9:a1:c6:d3:38:7c:2f:be:59:2a:b1: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CE:54:1E:24:AD:0D:1E:AA:4C:98:30:A6:7F:9C:D6:0F:F1:EC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b0:45:58:08:60:d8:6a:ee:d1:10:30:1c:51:ea:cd:1a:bf: a3:65:d6:d6:ae:d3:3a:4e:c5:3c:bd:ee:a4:c3:8b:d3:c8:e8: 44:21:28:6d:76:51:e1:36:e1:d6:12:ac:1f:2b:83:56:d7:6d: 15:67:74:44:b4:d8:73:8d:e2:aa:12:50:d4:5e:fb:61:e7:4d: 16:fd:b2:7b:8d:71:55:ce:e5:2c:62:8a:d0:8c:fd:10:42:44: b0:57:df:37:93:8e:d4:72:33:40:bd:2c:42:4c:22:6d:c6:cb: 67:c3:c0:4d:1c:35:54:26:3a:10:76:0f:58:2a:02:a6:1f:7a: 80:d5:c5:22:d7:97:d1:ef:17:ef:39:2f:89:d8:6a:7b:fb:ae: d5:83:6d:d2:b7:b8:38:a3:32:69:3c:a6:de:48:36:ca:1c:5f: 7b:dc:62:85:8b:00:34:4c:37:41:6d:c7:8d:bf:88:6a:6d:18: e5:d3:a7:33:0c:25:32:c5:de:7d:e1:20:ca:5a:bd:aa:2b:5c: a6:38:e3:92:cb:2d:17:a8:2b:38:a7:82:cd:ff:3a:c0:9a:99: 7c:d4:b3:4d:1f:16:1f:c7:58:14:18:d4:46:9e:41:bc:57:61: e7:dc:86:1e:0d:e8:9e:b4:98:ed:54:d8:d2:0f:84:af:2c:d1: c1:8b:5c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBXoEsaQV2ah9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk MmRhMDIxNDEtMzJkMi00YTZiLTkyNjUtMGFiZWUyYTcwNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdPn2q8PDiI7GL2i/CmpXUHZUELYEcFUQmBh keuE+n5qPNJni4mi234Cjt2HGa0EcgaJVTU8tYgkFWDJ/LOq3mHpRps1Kuw1md9v sJghjS/UV9AW2eo9qakh8Zod3t8XU5WsiPdt44BUp/icXl4FoPpCO/IAb+u+QDVC Rl+YIec9xbVvPo43m0Jc+BupWAGytFo4acUFFx35aMe2WN6oAdswcVH/R9/V/n7p ruBiBhkYQljR2EXn1dgS4dBu9ZSjnB2H3Y8VG8KqxAcxrZCgrp3T92MrZVoi8Jau PYdtKzs4wxD61UtNVZcgx+Eh04F7PnSi6aHG0zh8L75ZKrFQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnOVB4krQ0eqkyYMKZ/nNYP8exvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYmY5MzNmMzktM2QxYi0z YjRlLWExN2YtZjlkNjUwODU4NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+wRVgIYNhq7tEQMBxR6s0av6Nl1tau0zpOxTy97qTDi9PI6EQhKG12 UeE24dYSrB8rg1bXbRVndES02HON4qoSUNRe+2HnTRb9snuNcVXO5SxiitCM/RBC RLBX3zeTjtRyM0C9LEJMIm3Gy2fDwE0cNVQmOhB2D1gqAqYfeoDVxSLXl9HvF+85 L4nYanv7rtWDbdK3uDijMmk8pt5INsocX3vcYoWLADRMN0Ftx42/iGptGOXTpzMM JTLF3n3hIMpavaorXKY445LLLReoKzings3/OsCamXzUs00fFh/HWBQY1EaeQbxX Yefchh4N6J60mO1U2NIPhK8s0cGLXEs= -----END CERTIFICATE-----Generated at Thu May 7 01:16:11 2026 by rpki-client