$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21420fbb-6f30-3ca2-884d-982f0ad4288e.roa File: 21420fbb-6f30-3ca2-884d-982f0ad4288e.roa (raw, json) Hash identifier: xOFBVp/N6UCZCIITEPuFTWixQA8QcONy+jjJFmYAiBo= Subject key identifier: 73:17:D8:6E:AA:96:F3:9F:3C:8B:2F:7E:1A:ED:FC:1C:61:AA:95:FD Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584DF375E91E3B974AD2FACB7E80 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21420fbb-6f30-3ca2-884d-982f0ad4288e.roa Signing time: Mon 25 May 2026 13:00:31 +0000 ROA not before: Mon 25 May 2026 13:00:31 +0000 ROA not after: Sun 23 Aug 2026 13:00:31 +0000 asID: 53957 IP address blocks: 138.207.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:75:e9:1e:3b:97:4a:d2:fa:cb:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: May 25 13:00:31 2026 GMT Not After : Aug 23 13:00:31 2026 GMT Subject: CN=a043235f-6757-464e-b553-9fa417d99526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:ba:aa:a6:5c:00:a9:45:f2:df:52:b4:1d: c5:5f:76:d7:d9:ad:34:db:c2:87:2b:04:98:d8:8e: f8:c3:0c:59:6b:da:4f:38:05:31:4b:9d:fe:92:bb: f9:ca:a6:da:4c:9e:02:40:ad:1b:cf:af:1a:c8:40: 9b:36:cb:e9:71:be:f5:52:00:57:0f:07:49:b3:8e: cd:1f:84:82:35:90:8d:7d:df:42:2a:9a:db:37:79: 8a:91:2c:65:9c:5d:f5:18:4e:2e:a0:7c:69:82:ca: da:aa:b8:d0:e5:31:da:54:19:e0:47:40:4d:31:36: 61:be:6d:d6:24:cd:b2:1e:38:6a:b7:03:a6:8d:53: 05:67:78:db:b7:a0:fd:b3:75:7c:30:1a:c1:b3:b6: eb:69:54:e0:41:65:db:6a:00:93:86:1b:e5:c9:68: b5:04:48:3b:c0:75:fb:40:7f:64:85:2c:91:f9:67: 75:86:7e:80:a6:78:32:29:64:1d:34:36:d1:5b:bd: 7b:db:3f:73:f1:1a:c6:83:58:20:75:e5:18:76:a2: f5:99:00:b0:65:8d:90:9b:9a:fa:19:d0:14:c3:8b: 51:2c:5a:e2:f7:11:28:7b:47:8f:95:3e:1f:7b:2c: 3c:d0:87:25:6d:ff:45:d7:2f:5a:f5:89:a7:bb:d8: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:17:D8:6E:AA:96:F3:9F:3C:8B:2F:7E:1A:ED:FC:1C:61:AA:95:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/21420fbb-6f30-3ca2-884d-982f0ad4288e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 138.207.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d6:72:b3:d8:a7:55:3d:c3:95:53:c2:c8:08:94:89:4b:9a: 0a:78:f9:74:d3:81:e0:1c:e4:b4:6a:03:fa:1b:db:59:f4:af: df:6c:f1:c6:49:e8:40:d1:22:f1:92:d7:d2:62:8d:ae:f6:fd: d8:71:66:56:a3:6e:d8:b4:d4:ec:98:bd:82:43:9b:7a:5e:27: 8c:80:cc:4c:5c:04:e6:2d:9a:53:fc:ca:d7:6a:a6:b3:99:f4: 1e:0f:04:fe:1c:f5:42:73:f0:3b:86:70:7f:b9:4a:82:88:39: b0:da:72:f6:35:a0:a8:b2:be:78:4a:a4:03:37:e7:ae:98:22: 6f:6c:b5:13:5d:bf:63:e3:5e:8f:2b:8c:4b:98:f8:a9:50:45: 61:66:8a:0e:b2:5b:20:36:b1:62:62:aa:74:73:bc:1f:bf:08: 19:34:2c:c4:a2:e1:e4:42:61:bb:66:d8:92:5f:53:c6:88:58: ca:7b:17:f8:98:b6:c4:3d:61:de:be:5d:ea:f7:ca:a0:08:c8: 95:ee:de:fe:4a:0f:86:8c:7f:2f:02:73:83:f9:93:12:56:0c: 4d:d2:dc:21:e5:9c:3b:d3:f8:aa:22:21:57:49:9d:dd:be:72: b0:f5:4d:93:e8:1e:14:1e:20:e9:0d:f4:4f:33:5d:5b:d1:c2: 3a:68:ae:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zdekeO5dK0vrLfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDUyNTEzMDAzMVoXDTI2MDgyMzEzMDAzMVowLzEtMCsGA1UEAxMk YTA0MzIzNWYtNjc1Ny00NjRlLWI1NTMtOWZhNDE3ZDk5NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTq6qqZcAKlF8t9StB3FX3bX2a0028KHKwSY 2I74wwxZa9pPOAUxS53+krv5yqbaTJ4CQK0bz68ayECbNsvpcb71UgBXDwdJs47N H4SCNZCNfd9CKprbN3mKkSxlnF31GE4uoHxpgsraqrjQ5THaVBngR0BNMTZhvm3W JM2yHjhqtwOmjVMFZ3jbt6D9s3V8MBrBs7braVTgQWXbagCThhvlyWi1BEg7wHX7 QH9khSyR+Wd1hn6ApngyKWQdNDbRW7172z9z8RrGg1ggdeUYdqL1mQCwZY2Qm5r6 GdAUw4tRLFri9xEoe0ePlT4feyw80Iclbf9F1y9a9Ymnu9hFcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMX2G6qlvOfPIsvfhrt/BxhqpX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMjE0MjBmYmItNmYzMC0z Y2EyLTg4NGQtOTgyZjBhZDQyODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAis9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLWcrPYp1U9w5VTwsgIlIlLmgp4+XTTgeAc5LRqA/ob21n0r99s8cZJ 6EDRIvGS19Jija72/dhxZlajbti01OyYvYJDm3peJ4yAzExcBOYtmlP8ytdqprOZ 9B4PBP4c9UJz8DuGcH+5SoKIObDacvY1oKiyvnhKpAM3566YIm9stRNdv2PjXo8r jEuY+KlQRWFmig6yWyA2sWJiqnRzvB+/CBk0LMSi4eRCYbtm2JJfU8aIWMp7F/iY tsQ9Yd6+Xer3yqAIyJXu3v5KD4aMfy8Cc4P5kxJWDE3S3CHlnDvT+KoiIVdJnd2+ crD1TZPoHhQeIOkN9E8zXVvRwjporjM= -----END CERTIFICATE-----Generated at Sat Jun 13 21:00:18 2026 by rpki-client