$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa File: 28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json) Hash identifier: qhOIRdKU62RP1YIfWNT+NIrywQAQew54M3xvZMMGrk4= Subject key identifier: 50:3F:09:AC:72:44:A7:E3:FB:87:75:48:EA:22:EC:77:AC:1E:5F:07 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CB2872FEE507C0D6A2899A180 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8075 IP address blocks: 138.32.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2f:ee:50:7c:0d:6a:28:99:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=bfc56711-2779-4970-a8ec-b490e67028f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:13:88:a5:12:d9:0d:fb:6a:4e:79:c0:77: eb:6b:5e:a0:01:77:8e:c3:b1:40:9a:27:da:7f:c2: f6:82:28:1c:80:53:30:c6:4b:e9:c8:ed:b4:82:23: 5d:26:fa:05:68:1a:61:65:1c:ae:75:34:77:90:69: ed:03:7b:1b:00:1e:d0:4b:01:74:c8:5c:52:d8:cb: 62:25:5a:2a:0a:14:0a:d5:2a:48:93:fb:f5:d4:bd: 67:ad:14:f0:61:51:fc:c8:42:94:ba:14:b7:fe:f1: 22:4d:1c:96:1a:30:94:33:82:f1:af:f6:77:ab:5d: 2d:e4:71:f0:fa:24:d1:e5:3b:7e:90:62:11:90:5d: be:7f:97:91:63:0d:58:17:dd:00:5a:31:d9:3b:f1: 61:f6:41:24:8a:eb:ef:87:bd:3c:9c:59:4b:0f:eb: aa:f9:5f:dd:13:a5:da:d4:a3:43:55:48:fa:f3:c5: c9:a1:ad:db:44:de:67:c9:98:f6:59:e7:d5:46:fe: d9:91:1e:f9:35:34:a3:2c:22:0b:2d:69:03:dc:40: 2d:bd:94:a1:cd:50:68:44:d3:75:2c:3e:b0:98:bf: 38:93:fc:5f:0c:16:d5:ec:3b:6c:37:7a:a8:4a:da: da:8e:b6:6c:f3:10:a2:b7:e1:3d:e0:6a:a8:92:d4: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:09:AC:72:44:A7:E3:FB:87:75:48:EA:22:EC:77:AC:1E:5F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b3:5d:9b:c7:4c:1d:79:88:ee:db:63:2c:c6:76:f9:4d:bc: 26:d1:3b:e7:d8:e5:d4:63:b4:df:65:e0:71:bd:45:c8:32:d3: a5:e6:dc:e9:ee:21:a7:10:39:89:14:06:1f:96:41:32:da:2c: ea:c8:aa:61:14:c4:2b:e7:b1:a4:59:b7:04:af:61:ee:22:d7: 88:fc:12:4c:15:18:47:03:96:f2:32:39:05:4d:c9:9e:24:6e: fe:6d:32:79:0f:1e:9a:e5:13:d7:7d:65:59:0a:ec:43:76:8b: d6:44:ce:63:a9:74:9b:0f:cd:b0:28:93:f4:ce:f3:02:22:ae: 83:aa:6b:69:99:c3:a1:2c:c6:4a:36:58:0e:cf:8a:64:b6:1f: 0d:f6:5f:80:85:39:5c:89:a2:16:13:ac:74:71:06:51:84:0e: 49:fd:34:e9:0a:22:61:0e:b9:8a:19:b4:05:bc:5a:ef:f5:83: fb:40:11:ce:2b:2f:f9:cc:b5:ac:ae:59:6a:02:de:9b:30:bd: e4:4d:29:ad:36:e3:1e:d9:27:f0:f2:f9:34:48:62:bd:ff:47: b6:ee:cd:3e:dc:4d:4d:32:d8:70:10:8d:a9:63:60:d1:ee:7b: 14:56:0b:05:e7:71:69:35:f1:dc:3d:f8:12:9c:28:9f:89:eb: 42:0e:c1:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhy/uUHwNaiiZoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk YmZjNTY3MTEtMjc3OS00OTcwLWE4ZWMtYjQ5MGU2NzAyOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCcTiKUS2Q37ak55wHfra16gAXeOw7FAmifa f8L2gigcgFMwxkvpyO20giNdJvoFaBphZRyudTR3kGntA3sbAB7QSwF0yFxS2Mti JVoqChQK1SpIk/v11L1nrRTwYVH8yEKUuhS3/vEiTRyWGjCUM4Lxr/Z3q10t5HHw +iTR5Tt+kGIRkF2+f5eRYw1YF90AWjHZO/Fh9kEkiuvvh708nFlLD+uq+V/dE6Xa 1KNDVUj688XJoa3bRN5nyZj2WefVRv7ZkR75NTSjLCILLWkD3EAtvZShzVBoRNN1 LD6wmL84k/xfDBbV7DtsN3qoStrajrZs8xCit+E94GqoktSMwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA/CaxyRKfj+4d1SOoi7HesHl8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjg3MzUzNDgtNmNkYS0z NzRhLTk3OGEtYTJhYWJmNjU5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+zXZvHTB15iO7bYyzGdvlNvCbRO+fY5dRjtN9l4HG9Rcgy06Xm3Onu IacQOYkUBh+WQTLaLOrIqmEUxCvnsaRZtwSvYe4i14j8EkwVGEcDlvIyOQVNyZ4k bv5tMnkPHprlE9d9ZVkK7EN2i9ZEzmOpdJsPzbAok/TO8wIiroOqa2mZw6Esxko2 WA7PimS2Hw32X4CFOVyJohYTrHRxBlGEDkn9NOkKImEOuYoZtAW8Wu/1g/tAEc4r L/nMtayuWWoC3pswveRNKa024x7ZJ/Dy+TRIYr3/R7buzT7cTU0y2HAQjaljYNHu exRWCwXncWk18dw9+BKcKJ+J60IOwfc= -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:54 2026 by rpki-client