$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa File: 8011e5b3-48f4-34a8-9932-e07529862633.roa (raw, json) Hash identifier: 6HYXODVkeJEgV+no6L0dXSiVheNdHpwbQrFLLC2xZ8c= Subject key identifier: 5D:73:C1:66:3C:54:A4:EF:1C:D5:15:3A:50:B7:25:B7:59:63:DF:C6 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CF85245662D243ECFA3E440C0 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:45:66:2d:24:3e:cf:a3:e4:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=8e3d4733-1c62-408d-ae4b-38e7abae3d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:bc:ed:68:1d:bb:93:1b:57:88:53:b0:b9: f1:a2:fa:79:7c:ff:3f:9e:3a:c9:4d:d8:1d:86:f5: 2a:d7:58:e7:3a:2b:1e:e7:e8:ba:1e:22:25:22:ee: 44:ac:84:8a:68:a5:2b:1e:29:68:5f:fa:a5:91:af: bf:ec:3d:0d:49:f6:ab:f9:6d:f9:14:ad:03:3b:95: 3e:8a:fa:0d:a6:bb:b9:ee:94:ef:63:ec:b8:53:f4: db:ef:00:aa:b3:b9:37:82:76:ca:4d:15:e6:b6:79: 7d:18:2e:89:91:2f:e3:72:25:1d:d4:42:23:fa:03: 97:cb:01:25:c7:2d:30:b1:66:5c:14:62:89:3e:71: a1:ed:30:31:4c:cb:8d:ed:27:9a:3d:b9:1a:f7:55: 77:74:f9:1e:68:da:54:a0:17:bd:b1:9c:6d:df:8f: 61:72:60:23:a0:de:71:88:fd:02:6a:6d:77:0d:9e: dd:0e:3b:71:f1:ac:38:29:cf:68:09:19:8a:fd:b3: 75:09:cc:3e:96:6c:1f:69:07:84:05:d5:5a:5f:2a: cd:06:6e:e1:55:04:08:ae:db:73:e8:eb:33:e8:52: 4d:2c:f4:71:77:e7:e7:a1:41:6d:e3:d5:cd:e8:4d: 6c:51:05:34:ff:99:3b:12:c2:e8:fb:c5:1f:d9:87: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:C1:66:3C:54:A4:EF:1C:D5:15:3A:50:B7:25:B7:59:63:DF:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:8d:60:b1:7b:71:c9:93:7a:f9:db:64:3a:41:f6:5e:8e: 1e:5c:82:fd:f6:19:3d:da:e6:be:9c:9a:37:1b:26:cd:57:51: e6:cf:55:e5:82:80:46:4e:61:1b:3a:c5:85:24:29:7f:96:3e: 5e:4a:93:cb:32:a1:07:ef:c5:65:1e:03:51:6b:56:ad:8e:18: 4e:d4:0d:27:2b:cc:22:70:e7:95:84:b4:b9:d8:26:11:a6:c7: 3d:96:6f:db:89:a4:7a:d4:7e:92:b5:6e:64:1f:5a:a7:9a:f0: ba:be:5c:97:d4:f9:ff:e7:c9:aa:67:47:ff:1f:63:3f:2f:7c: 81:c5:75:df:80:59:ed:4d:80:d9:d1:95:f2:fb:aa:37:9f:93: 34:20:68:17:86:fd:26:e9:e2:3f:6e:71:77:91:9e:48:14:5c: 92:8c:07:9c:d2:0f:8f:a6:29:b9:8f:11:24:1c:b3:b3:c8:aa: f6:38:5f:ff:d7:0b:a2:53:c5:81:fe:be:c6:87:db:ca:5c:a5: d3:6c:b9:b0:72:10:fb:d1:8a:46:3a:22:d2:77:10:57:15:8e: ca:14:92:22:66:f1:c7:c8:a1:c0:cc:0c:96:e6:f5:55:ce:96: 67:14:fa:73:2c:2c:e3:ff:84:0b:12:35:b0:5a:1d:96:9c:48: 0e:95:75:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkVmLSQ+z6PkQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk OGUzZDQ3MzMtMWM2Mi00MDhkLWFlNGItMzhlN2FiYWUzZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoau87Wgdu5MbV4hTsLnxovp5fP8/njrJTdgd hvUq11jnOise5+i6HiIlIu5ErISKaKUrHiloX/qlka+/7D0NSfar+W35FK0DO5U+ ivoNpru57pTvY+y4U/Tb7wCqs7k3gnbKTRXmtnl9GC6JkS/jciUd1EIj+gOXywEl xy0wsWZcFGKJPnGh7TAxTMuN7SeaPbka91V3dPkeaNpUoBe9sZxt349hcmAjoN5x iP0Cam13DZ7dDjtx8aw4Kc9oCRmK/bN1Ccw+lmwfaQeEBdVaXyrNBm7hVQQIrttz 6Osz6FJNLPRxd+fnoUFt49XN6E1sUQU0/5k7EsLo+8Uf2YfcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1zwWY8VKTvHNUVOlC3JbdZY9/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvODAxMWU1YjMtNDhmNC0z NGE4LTk5MzItZTA3NTI5ODYyNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO0jWCxe3HJk3r522Q6QfZejh5cgv32GT3a5r6cmjcbJs1XUebPVeWC gEZOYRs6xYUkKX+WPl5Kk8syoQfvxWUeA1FrVq2OGE7UDScrzCJw55WEtLnYJhGm xz2Wb9uJpHrUfpK1bmQfWqea8Lq+XJfU+f/nyapnR/8fYz8vfIHFdd+AWe1NgNnR lfL7qjefkzQgaBeG/Sbp4j9ucXeRnkgUXJKMB5zSD4+mKbmPESQcs7PIqvY4X//X C6JTxYH+vsaH28pcpdNsubByEPvRikY6ItJ3EFcVjsoUkiJm8cfIocDMDJbm9VXO lmcU+nMsLOP/hAsSNbBaHZacSA6VdTE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:03 2026 by rpki-client