$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa File: b991e82a-2e7a-3467-997c-589f9374fc62.roa (raw, json) Hash identifier: WJ8MfOe04yugzINSa6nCyPQPJX9Gd4KY7XxcVQ7CBgc= Subject key identifier: FD:09:71:4B:B8:E6:46:DB:2B:1E:73:C9:4C:C0:F9:1E:FA:49:6E:84 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CF8524552A40E1D1719889250 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:45:52:a4:0e:1d:17:19:88:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=533cf564-d199-4c7f-852f-38f27a3e1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:55:a2:ae:3d:66:f7:3e:16:0f:f1:c3:13: e3:d2:e2:a5:1f:f0:4b:87:70:c0:e9:58:4f:0a:83: 75:8c:fd:80:04:b1:65:de:8b:11:f1:e5:8f:c0:6a: 91:ec:1c:5b:aa:3c:d5:43:38:fc:35:56:fe:25:9d: 1a:4a:96:7b:ae:93:15:ec:af:bb:30:8a:67:56:c1: fb:06:e4:2d:56:13:a9:5c:a5:03:c7:a9:80:dd:c4: 18:bb:91:b5:6b:27:8f:b8:d2:92:16:1e:a1:1d:a4: 84:12:cd:fc:ce:dc:98:71:ac:b9:89:5c:5e:98:d1: 94:fa:21:26:39:7e:87:1c:83:64:d6:fb:e3:96:6b: 2f:86:02:52:d8:0d:8a:86:1d:38:bc:87:d6:c2:40: 1f:a2:1f:8b:eb:0a:82:91:e6:97:af:f1:f2:46:e3: da:3d:5d:04:05:51:53:7d:19:49:17:f3:a3:12:ed: 6f:43:22:01:91:3a:4d:ed:71:f1:70:fa:0f:d2:3f: 2f:e4:e9:dd:bb:43:66:10:4a:56:6e:34:72:72:31: 2b:c2:63:a5:89:79:c3:53:ad:88:77:12:e9:7f:4a: be:3e:72:e2:08:4a:a9:ec:a4:a7:6e:0c:2c:8e:0e: ae:ab:27:15:45:d9:4e:bd:13:26:47:da:83:32:7a: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:71:4B:B8:E6:46:DB:2B:1E:73:C9:4C:C0:F9:1E:FA:49:6E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:79:41:7e:f6:01:e3:39:ba:8f:93:20:4f:6e:32:ae:fc:b6: 9b:71:d6:aa:d2:2d:9a:26:79:9c:80:b7:16:d3:0d:a7:d7:f0: 3d:a5:8c:67:f1:94:70:a4:81:95:96:f8:9e:83:73:0d:d5:31: e6:67:b7:1d:f0:ee:a5:d6:d5:10:f9:68:76:1e:eb:35:f4:6d: 85:8d:c2:dd:d3:a6:c2:e8:40:9e:8f:b8:55:e8:50:4a:b2:91: 9a:0e:c8:3a:d7:b2:71:21:88:a4:f8:0f:32:ab:c8:51:43:2a: 1a:55:b2:44:63:e9:f9:60:47:87:e1:40:42:07:42:c2:da:fa: d0:eb:7e:ba:d2:67:20:56:8f:c5:7c:d2:2f:7d:48:a4:6b:7b: a8:d5:15:ca:74:2d:58:67:02:41:14:59:61:b4:0c:dd:3f:8a: 56:f5:37:f9:a9:d2:4f:e2:a6:50:c3:ea:ab:a5:4b:82:7b:fd: 5d:69:aa:f2:1c:71:e3:fb:8c:49:ec:68:22:24:ff:1b:38:90: a3:60:7c:0c:0e:d9:78:f5:8e:5b:66:5c:20:9d:6f:35:2d:b8: 3d:e4:53:a6:31:fc:df:04:0f:54:25:9c:86:ee:ca:e9:d5:c4: a2:29:db:44:8a:f6:33:e9:f0:fa:69:5f:df:c9:49:d0:9e:ad: 95:27:6b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkVSpA4dFxmIklAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk NTMzY2Y1NjQtZDE5OS00YzdmLTg1MmYtMzhmMjdhM2UxNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVlVoq49Zvc+Fg/xwxPj0uKlH/BLh3DA6VhP CoN1jP2ABLFl3osR8eWPwGqR7BxbqjzVQzj8NVb+JZ0aSpZ7rpMV7K+7MIpnVsH7 BuQtVhOpXKUDx6mA3cQYu5G1ayePuNKSFh6hHaSEEs38ztyYcay5iVxemNGU+iEm OX6HHINk1vvjlmsvhgJS2A2Khh04vIfWwkAfoh+L6wqCkeaXr/HyRuPaPV0EBVFT fRlJF/OjEu1vQyIBkTpN7XHxcPoP0j8v5Ondu0NmEEpWbjRycjErwmOliXnDU62I dxLpf0q+PnLiCEqp7KSnbgwsjg6uqycVRdlOvRMmR9qDMnoRKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0JcUu45kbbKx5zyUzA+R76SW6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYjk5MWU4MmEtMmU3YS0z NDY3LTk5N2MtNTg5ZjkzNzRmYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ55QX72AeM5uo+TIE9uMq78tptx1qrSLZomeZyAtxbTDafX8D2ljGfx lHCkgZWW+J6Dcw3VMeZntx3w7qXW1RD5aHYe6zX0bYWNwt3TpsLoQJ6PuFXoUEqy kZoOyDrXsnEhiKT4DzKryFFDKhpVskRj6flgR4fhQEIHQsLa+tDrfrrSZyBWj8V8 0i99SKRre6jVFcp0LVhnAkEUWWG0DN0/ilb1N/mp0k/iplDD6qulS4J7/V1pqvIc ceP7jEnsaCIk/xs4kKNgfAwO2Xj1jltmXCCdbzUtuD3kU6Yx/N8ED1QlnIbuyunV xKIp20SK9jPp8PppX9/JSdCerZUna6c= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:09 2026 by rpki-client