$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: fz4FfruCKh2gMLsr17AMxxD3XBdeWkPcVtneAaee344= Subject key identifier: 1B:02:E9:23:7C:C3:41:25:44:EF:CF:E3:0D:FA:F8:02:8C:21:8B:74 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584F15CCE9343D15B7FCC3F67400 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e9:34:3d:15:b7:fc:c3:f6:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=946ccf5c-53cc-408f-9103-c49ab9c33acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:aa:f7:7a:c6:08:8a:fd:72:12:91:e6:2a: 9b:5c:62:3f:2f:bd:53:54:57:9f:3c:5b:b2:09:b2: e1:8e:af:5d:60:b8:06:85:cd:a5:7f:50:95:44:c5: 2a:df:7c:9e:00:9b:a5:f8:a3:d7:34:06:a1:93:25: 10:3e:02:f5:2c:50:c8:4d:7c:15:13:e0:94:2a:29: dd:ab:2c:64:dd:1f:7f:c9:7a:e0:a5:a2:52:b4:98: c1:0c:3b:3a:7e:b1:7f:0f:3e:2b:ba:0b:c8:ac:86: 86:d6:16:3f:7c:4d:b3:ed:ed:36:c2:32:e1:44:c0: cd:06:84:a3:ad:26:2f:0b:e2:63:01:2c:9c:d2:a1: 13:2c:ca:d7:ce:44:d0:21:1a:b4:0b:9e:a5:7e:c3: 83:49:63:8a:a0:24:84:d6:20:ca:e4:c3:05:12:98: f0:45:b0:42:6b:52:f2:ac:fd:50:f7:97:08:6f:ae: a8:25:69:13:f5:66:02:b3:e0:5c:9c:ae:84:ec:d3: 03:95:1f:4c:1b:dc:1c:d4:45:00:e0:53:06:cd:b8: 98:ea:03:10:94:34:02:9b:cb:44:55:25:c0:8a:df: fa:0f:9e:7c:82:6d:9a:3e:2b:38:26:ea:02:98:68: 76:45:07:05:a8:58:fb:0c:d4:48:a5:3e:3d:c6:a1: 27:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:02:E9:23:7C:C3:41:25:44:EF:CF:E3:0D:FA:F8:02:8C:21:8B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0d:98:f8:05:1b:1b:ae:54:a0:3b:2b:6c:e1:93:76:78:82: b6:3a:07:6a:35:5e:92:f6:d8:d3:e8:21:ce:c7:45:c8:d0:54: 1d:c8:79:f7:58:3a:2c:4d:e2:bf:77:a0:dc:6e:63:80:01:36: 8d:1f:13:1e:3c:28:d0:c5:8f:a9:f0:c4:7a:0f:a3:a2:88:db: a5:e2:51:b2:3a:f5:83:9e:d6:e1:7f:e1:b4:25:49:1d:bd:1f: 88:54:20:17:e3:de:50:53:af:2c:23:46:58:a3:1a:94:54:86: f3:61:84:58:b0:bc:20:4f:d3:35:4d:86:e5:a1:79:f6:61:14: db:fd:bc:cd:c6:06:17:b8:c2:95:79:ba:2b:e7:5f:72:14:52: 2f:f8:8a:a5:44:19:22:d0:f4:4c:72:ce:a7:4b:a0:84:5a:c2: d1:d1:c1:65:54:70:b1:bc:8f:51:bb:61:25:61:10:1c:8d:1e: b2:8c:6a:6e:8c:c3:78:df:b3:71:bf:21:c6:82:45:58:79:59: e2:1a:7c:dd:f2:c0:bc:a1:52:e4:25:31:bd:ad:99:d2:db:b4: 6c:b3:bf:ff:a7:a7:c2:71:ad:ba:f4:7d:67:ab:ec:ee:9c:77: f8:c0:1b:46:13:19:06:5d:13:4a:43:db:93:13:2f:fe:4f:14: 27:af:3c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOk0PRW3/MP2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk OTQ2Y2NmNWMtNTNjYy00MDhmLTkxMDMtYzQ5YWI5YzMzYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5eq93rGCIr9chKR5iqbXGI/L71TVFefPFuy CbLhjq9dYLgGhc2lf1CVRMUq33yeAJul+KPXNAahkyUQPgL1LFDITXwVE+CUKind qyxk3R9/yXrgpaJStJjBDDs6frF/Dz4rugvIrIaG1hY/fE2z7e02wjLhRMDNBoSj rSYvC+JjASyc0qETLMrXzkTQIRq0C56lfsODSWOKoCSE1iDK5MMFEpjwRbBCa1Ly rP1Q95cIb66oJWkT9WYCs+BcnK6E7NMDlR9MG9wc1EUA4FMGzbiY6gMQlDQCm8tE VSXAit/6D558gm2aPis4JuoCmGh2RQcFqFj7DNRIpT49xqEnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsC6SN8w0ElRO/P4w36+AKMIYt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsNmPgFGxuuVKA7K2zhk3Z4grY6B2o1XpL22NPoIc7HRcjQVB3IefdY OixN4r93oNxuY4ABNo0fEx48KNDFj6nwxHoPo6KI26XiUbI69YOe1uF/4bQlSR29 H4hUIBfj3lBTrywjRlijGpRUhvNhhFiwvCBP0zVNhuWhefZhFNv9vM3GBhe4wpV5 uivnX3IUUi/4iqVEGSLQ9ExyzqdLoIRawtHRwWVUcLG8j1G7YSVhEByNHrKMam6M w3jfs3G/IcaCRVh5WeIafN3ywLyhUuQlMb2tmdLbtGyzv/+np8Jxrbr0fWer7O6c d/jAG0YTGQZdE0pD25MTL/5PFCevPHQ= -----END CERTIFICATE-----Generated at Mon Sep 28 12:33:34 2026 by rpki-client