$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa File: 24b3e43b-3b83-3437-be0d-021a80ce94df.roa (raw, json) Hash identifier: rnpOqXoq4nWu7otrQ4oKBLQ6It0CGPcbc/R6FrM6a1s= Subject key identifier: 1C:91:E2:65:5A:2A:AC:AE:97:17:CC:39:CF:D0:BB:21:C8:DC:4E:62 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CB2872FFCF304157D1B57AC00 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8075 IP address blocks: 138.32.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2f:fc:f3:04:15:7d:1b:57:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=e5f19eaa-130c-4df1-a930-2c051fbb1f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:35:9a:25:07:e3:21:03:10:38:33:fc:4e: aa:75:69:67:1e:b9:61:d4:c3:80:f4:49:29:10:6c: 89:b0:59:a9:d8:19:9c:db:ff:2f:25:81:f9:2f:cb: 73:e9:d0:4c:c4:ee:b9:1f:dc:04:1f:3e:a2:fb:78: 3b:01:ee:e4:17:32:38:69:6c:e9:26:0b:3e:ae:01: 23:32:42:be:7a:6e:56:ad:04:c9:c9:d1:5d:5f:72: ab:44:6e:bd:4d:dc:fe:62:ec:f2:cc:85:fc:ed:00: 40:20:21:5e:8c:d6:7b:d4:77:ed:fb:43:14:ba:e0: d2:5a:0d:a4:68:db:46:2d:cc:31:ad:fa:4d:32:57: 64:8d:d0:92:b2:16:a3:1e:03:6c:8e:8e:8b:fb:5c: 87:fd:a3:d7:49:13:ad:fc:0d:69:c2:fd:91:48:b6: b2:a0:23:d1:39:42:21:c6:c7:52:c1:54:1f:a7:28: 52:34:0a:a7:66:96:00:e2:ee:13:9f:ba:8a:0d:fb: 58:fc:73:e6:62:ad:89:0d:e5:b3:7d:3b:7e:fc:9a: fc:31:2b:71:39:28:c0:09:e7:20:b6:b1:e3:f1:4d: 42:6e:54:c1:c5:aa:ae:1e:a9:20:5d:39:67:ea:f9: 7b:d5:e2:5b:47:7e:73:ba:26:65:32:d8:ba:ff:de: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:91:E2:65:5A:2A:AC:AE:97:17:CC:39:CF:D0:BB:21:C8:DC:4E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:b4:65:21:a2:ec:b4:80:38:fe:82:d7:cd:52:ea:b0:af: ed:27:00:c8:c4:5e:b9:79:87:4f:26:6c:a4:be:c8:78:ad:93: df:8c:7a:c6:bd:0c:a3:a6:45:f7:53:8a:8d:48:5a:8e:07:88: c5:88:bb:b4:03:c1:5d:ea:19:30:00:be:0d:29:7b:5c:84:67: 85:1c:0c:71:d3:8e:82:e2:22:8c:c0:29:d6:20:75:e5:07:8f: fc:05:ea:52:ce:f6:c9:08:4a:63:70:9f:af:d6:61:03:44:f5: 6b:68:f2:77:80:18:d5:a3:0c:99:d1:ba:26:b0:ac:c0:df:be: a1:77:e6:fe:dd:be:ad:58:d4:6a:d9:e8:a3:2d:80:d6:9e:ed: b6:ad:51:f1:e6:4e:e2:3d:13:fd:6a:9f:1b:a9:2e:97:9e:b3: 19:2f:e2:c4:3c:f7:6c:3d:a0:52:f3:fa:01:9a:4f:ba:b4:cf: e0:2f:aa:4e:44:cc:39:ef:00:d8:9b:25:ff:9d:f6:e9:cb:7c: b9:dd:1f:d6:49:f9:23:24:e0:4e:f1:6e:31:0e:3b:56:7a:3e: 9f:91:47:c7:7a:ae:ac:67:2b:34:5d:87:3e:b7:dc:9b:c0:b0: 60:9b:e7:aa:4e:b5:df:2f:97:b1:70:b0:b5:f8:2b:d9:fe:48: 45:e8:f4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhy/88wQVfRtXrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTVmMTllYWEtMTMwYy00ZGYxLWE5MzAtMmMwNTFmYmIxZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMI1miUH4yEDEDgz/E6qdWlnHrlh1MOA9Ekp EGyJsFmp2Bmc2/8vJYH5L8tz6dBMxO65H9wEHz6i+3g7Ae7kFzI4aWzpJgs+rgEj MkK+em5WrQTJydFdX3KrRG69Tdz+YuzyzIX87QBAICFejNZ71Hft+0MUuuDSWg2k aNtGLcwxrfpNMldkjdCSshajHgNsjo6L+1yH/aPXSROt/A1pwv2RSLayoCPROUIh xsdSwVQfpyhSNAqnZpYA4u4Tn7qKDftY/HPmYq2JDeWzfTt+/Jr8MStxOSjACecg trHj8U1CblTBxaquHqkgXTln6vl71eJbR35zuiZlMti6/94E9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByR4mVaKqyulxfMOc/QuyHI3E5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjRiM2U0M2ItM2I4My0z NDM3LWJlMGQtMDIxYTgwY2U5NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDltGUhouy0gDj+gtfNUuqwr+0nAMjEXrl5h08mbKS+yHitk9+Mesa9 DKOmRfdTio1IWo4HiMWIu7QDwV3qGTAAvg0pe1yEZ4UcDHHTjoLiIozAKdYgdeUH j/wF6lLO9skISmNwn6/WYQNE9Wto8neAGNWjDJnRuiawrMDfvqF35v7dvq1Y1GrZ 6KMtgNae7batUfHmTuI9E/1qnxupLpeesxkv4sQ892w9oFLz+gGaT7q0z+Avqk5E zDnvANibJf+d9unLfLndH9ZJ+SMk4E7xbjEOO1Z6Pp+RR8d6rqxnKzRdhz633JvA sGCb56pOtd8vl7FwsLX4K9n+SEXo9H0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:16 2026 by rpki-client