$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa File: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (raw, json) Hash identifier: 9OOO+/iBfjfueYXqMdWIy2CfcET/tlJ9qJ/VtgDZM9k= Subject key identifier: 4E:98:E9:AA:67:8A:84:8B:D6:3C:85:9D:01:4B:0E:D1:00:49:68:66 Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F4328584EF7175F6AAF4EFA9FF1793980 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 60171 IP address blocks: 139.64.228.0/22 maxlen: 24 2605:ba40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:5f:6a:af:4e:fa:9f:f1:79:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=4fd8907f-feb8-495d-bb47-1add686e0e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:0e:66:63:97:10:f8:1c:76:43:e9:27:ac: 98:63:12:68:1b:fb:a0:db:a9:51:65:ec:b3:07:f1: d6:1a:12:07:95:6a:21:0e:47:bd:45:07:82:21:1c: 17:33:24:e6:28:87:ec:98:73:8a:fc:41:22:b1:56: 5d:e1:97:16:02:4a:dc:4a:01:9c:c0:09:96:39:a7: 5c:75:a3:32:e3:1b:4a:b4:84:b6:a7:31:7f:e2:84: dd:db:e1:62:6c:0f:df:6f:c6:9d:09:5d:1d:e4:1c: e8:1b:27:bb:75:b9:0f:d4:b7:f7:66:3c:2f:3d:87: b9:8c:f1:1a:bf:61:0d:96:9b:75:9e:35:13:29:89: 13:07:b7:f6:70:c7:e4:56:c0:3a:f3:93:fe:10:11: f1:99:e9:11:25:9d:78:04:ac:a1:3d:d6:6e:99:0b: d5:a1:e2:37:1d:48:e2:47:2f:bc:67:02:09:2d:f7: e5:6d:df:ac:73:23:b2:95:4c:31:a1:ea:3c:1f:22: 00:38:ca:6a:8a:9c:ba:07:56:ea:2a:76:38:f2:38: f7:9a:cc:52:23:4e:57:2d:ec:87:16:8c:e7:d2:9c: 79:fd:4d:ae:c8:ba:0e:23:45:64:f4:c6:3d:3f:26: 01:8e:f5:f0:1a:26:9b:ad:cf:4a:93:01:78:73:e5: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:E9:AA:67:8A:84:8B:D6:3C:85:9D:01:4B:0E:D1:00:49:68:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: 139.64.228.0/22 IPv6: 2605:ba40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:39:e6:5b:17:f6:b9:74:ef:4b:90:67:db:b6:5f:e6:fa:40: b2:17:d2:f8:8c:e5:30:d2:40:c5:e0:bb:36:d0:a3:af:2e:7f: 1b:65:57:73:b6:1b:f5:c6:0a:42:cc:70:65:a8:b2:e9:c8:c7: df:64:2a:36:56:11:02:ea:cc:ed:82:63:a6:01:96:d1:3d:bd: c9:5d:83:05:f2:32:6b:43:42:57:d3:a2:62:f6:ee:0e:6c:27: 49:62:fc:9e:00:df:48:b9:66:26:c5:e4:85:66:e2:64:4a:d5: da:bc:bd:f2:a6:66:01:21:a5:4c:b6:55:ae:f8:4b:0d:65:df: 9b:41:8c:c0:dc:ff:64:34:86:bd:c9:2c:03:30:f9:fe:de:a1: f6:2a:ca:82:ba:50:a3:8d:bf:bf:f7:81:d9:c9:8e:bc:92:b3: 1c:10:11:fa:fc:12:bc:52:32:95:0e:1b:e8:48:bd:ba:34:fb: e3:15:54:da:02:55:d6:88:b2:fb:de:92:e4:09:a1:aa:64:35: 0c:09:3c:20:22:d4:0d:56:ca:2a:7e:00:4f:c6:83:3e:29:6c: 31:83:6b:4b:56:11:6b:5c:cf:8c:ff:dd:02:15:88:82:68:88: fb:42:ef:9b:a8:63:f7:a1:68:dd:81:3d:c8:fd:73:6f:5c:73: 56:b7:fc:28 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE73F19qr076n/F5OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NGZkODkwN2YtZmViOC00OTVkLWJiNDctMWFkZDY4NmUwZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWwOZmOXEPgcdkPpJ6yYYxJoG/ug26lRZeyz B/HWGhIHlWohDke9RQeCIRwXMyTmKIfsmHOK/EEisVZd4ZcWAkrcSgGcwAmWOadc daMy4xtKtIS2pzF/4oTd2+FibA/fb8adCV0d5BzoGye7dbkP1Lf3ZjwvPYe5jPEa v2ENlpt1njUTKYkTB7f2cMfkVsA685P+EBHxmekRJZ14BKyhPdZumQvVoeI3HUji Ry+8ZwIJLfflbd+scyOylUwxoeo8HyIAOMpqipy6B1bqKnY48jj3msxSI05XLeyH Fozn0px5/U2uyLoOI0Vk9MY9PyYBjvXwGiabrc9KkwF4c+XZvQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFE6Y6apnioSL1jyFnQFLDtEASWhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvYWQ2NDRlMDctZDA4Yy0z Y2Q0LTk1NjEtMGIzOTM2NTNlZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCi0DkMA0E AgACMAcDBQAmBbpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACs55lsX9rl070uQZ9u2X+b6QLIX0viM5TDS QMXguzbQo68ufxtlV3O2G/XGCkLMcGWosunIx99kKjZWEQLqzO2CY6YBltE9vcld gwXyMmtDQlfTomL27g5sJ0li/J4A30i5ZibF5IVm4mRK1dq8vfKmZgEhpUy2Va74 Sw1l35tBjMDc/2Q0hr3JLAMw+f7eofYqyoK6UKONv7/3gdnJjrySsxwQEfr8ErxS MpUOG+hIvbo0++MVVNoCVdaIsvvekuQJoapkNQwJPCAi1A1Wyip+AE/Ggz4pbDGD a0tWEWtcz4z/3QIViIJoiPtC75uoY/ehaN2BPcj9c29cc1a3/Cg= -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:20 2026 by rpki-client