$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa File: c95fb5c3-2144-398e-85fe-c1526af5435d.roa (raw, json) Hash identifier: 7c4bod69eleW0UhWTk7+wCWezDvvVn+kcPylyo6jyU4= Subject key identifier: F2:15:FC:C3:F4:63:51:FC:36:54:10:C8:B8:2F:A3:2D:B2:A5:60:E8 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CB81C951CA8EB71C189F70680 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 8075 IP address blocks: 138.32.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:95:1c:a8:eb:71:c1:89:f7:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=5e724865-e53c-40d5-9074-432528d5a4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:11:28:87:ea:49:63:44:37:bb:03:8d:d4: 6c:fb:f9:d8:6d:65:8c:b0:ea:78:33:40:1a:14:65: 2a:49:99:5e:0b:61:f3:c9:d4:35:a5:a9:87:2d:1f: 25:75:38:bc:08:8b:10:e8:95:a7:6e:e6:65:98:32: 38:42:b4:17:9a:70:4d:4d:8f:3c:e0:ff:98:70:19: 39:50:e6:42:d5:88:70:07:8f:90:3c:ed:b0:30:79: 39:f3:61:37:fc:3f:65:09:d4:59:e4:8b:29:08:8e: 00:53:8c:5e:21:d8:bf:f9:3c:bc:ea:4e:16:e9:a7: 06:7e:b2:48:cd:25:62:48:62:33:ad:a2:78:9e:1c: df:b7:bb:36:e0:dd:86:38:39:7a:61:06:b9:b6:e9: c5:97:a7:f0:57:01:db:b6:26:05:90:5f:0b:1f:89: 6d:e1:3b:09:f0:71:66:f9:a0:33:8c:50:ae:34:94: ab:6e:94:e0:59:55:70:7a:ce:7f:b8:d4:bf:a2:21: 9c:b5:69:f3:b6:69:ae:66:30:d4:8b:d4:91:dd:c0: 13:e0:7c:72:10:3e:90:d7:2e:78:f7:80:78:83:a8: 22:2a:f8:a7:a2:b1:e8:40:09:38:cf:8d:57:3a:01: a0:a3:e4:4e:46:3f:c6:1f:a2:ed:52:28:31:7a:57: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:FC:C3:F4:63:51:FC:36:54:10:C8:B8:2F:A3:2D:B2:A5:60:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/c95fb5c3-2144-398e-85fe-c1526af5435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c8:be:06:fe:f3:a5:c9:6d:6e:ac:6f:a6:6e:d9:6e:e8:c4: 1f:57:24:da:fb:99:44:87:42:b0:83:90:97:e2:0d:3b:06:04: 1f:ee:a6:08:cb:7b:29:f1:a4:9b:e7:e1:f8:a1:0d:b5:56:d6: 87:71:64:be:68:95:03:a5:2c:96:af:93:1b:75:34:8b:fc:2f: 62:56:60:09:95:2f:eb:4c:c8:fd:3e:62:b3:db:57:99:ce:91: 5d:b0:91:92:0b:27:ac:b0:00:c6:6d:60:bd:32:13:b9:92:69: 8a:25:b9:d7:f0:7a:d5:12:b2:f8:5c:73:f5:bc:ac:9c:38:c5: d7:13:c7:b6:6b:5c:da:c2:34:d6:2a:c6:1f:21:aa:2d:ab:e9: 8f:ef:24:13:07:04:b3:6d:44:48:a1:ad:be:a4:c4:da:9b:47: 64:69:04:b7:18:71:22:4c:da:e4:96:bf:10:ee:fe:16:ed:2c: 6d:5c:1e:34:2d:b7:79:e4:a4:4d:95:ed:48:24:1b:67:2d:e2: 3d:db:a5:cb:39:d6:b9:e1:24:13:a9:be:b1:0f:97:fa:46:51: 30:b1:e4:c0:8c:b5:bc:0e:7e:82:a4:f2:1d:64:5c:83:f6:69: 08:e1:9f:c6:16:19:2d:83:28:5b:04:28:09:e9:43:42:5e:b1: ee:45:49:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HJUcqOtxwYn3BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NWU3MjQ4NjUtZTUzYy00MGQ1LTkwNzQtNDMyNTI4ZDVhNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDERKIfqSWNEN7sDjdRs+/nYbWWMsOp4M0Aa FGUqSZleC2HzydQ1pamHLR8ldTi8CIsQ6JWnbuZlmDI4QrQXmnBNTY884P+YcBk5 UOZC1YhwB4+QPO2wMHk582E3/D9lCdRZ5IspCI4AU4xeIdi/+Ty86k4W6acGfrJI zSViSGIzraJ4nhzft7s24N2GODl6YQa5tunFl6fwVwHbtiYFkF8LH4lt4TsJ8HFm +aAzjFCuNJSrbpTgWVVwes5/uNS/oiGctWnztmmuZjDUi9SR3cAT4HxyED6Q1y54 94B4g6giKvinorHoQAk4z41XOgGgo+RORj/GH6LtUigxelfhZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIV/MP0Y1H8NlQQyLgvoy2ypWDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYzk1ZmI1YzMtMjE0NC0z OThlLTg1ZmUtYzE1MjZhZjU0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITIvgb+86XJbW6sb6Zu2W7oxB9XJNr7mUSHQrCDkJfiDTsGBB/upgjL eynxpJvn4fihDbVW1odxZL5olQOlLJavkxt1NIv8L2JWYAmVL+tMyP0+YrPbV5nO kV2wkZILJ6ywAMZtYL0yE7mSaYoludfwetUSsvhcc/W8rJw4xdcTx7ZrXNrCNNYq xh8hqi2r6Y/vJBMHBLNtREihrb6kxNqbR2RpBLcYcSJM2uSWvxDu/hbtLG1cHjQt t3nkpE2V7UgkG2ct4j3bpcs51rnhJBOpvrEPl/pGUTCx5MCMtbwOfoKk8h1kXIP2 aQjhn8YWGS2DKFsEKAnpQ0Jese5FSR8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:27:52 2026 by rpki-client