$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/fbffce89-0db5-3b56-aa88-02a6d406c57d.roa File: fbffce89-0db5-3b56-aa88-02a6d406c57d.roa (raw, json) Hash identifier: FwyDLcz96WZffBTbOlp2+6Xm2JpRTKDOveOHASnGRtk= Subject key identifier: 03:4A:6F:B3:F3:0F:D8:88:81:2B:87:B2:75:82:C1:66:5D:6B:D7:2E Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584D4BC302B0BB7CDB5825E03C88 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/fbffce89-0db5-3b56-aa88-02a6d406c57d.roa Signing time: Thu 26 Mar 2026 11:20:07 +0000 ROA not before: Thu 26 Mar 2026 11:20:07 +0000 ROA not after: Wed 24 Jun 2026 11:20:07 +0000 asID: 12025 IP address blocks: 138.207.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:c3:02:b0:bb:7c:db:58:25:e0:3c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Mar 26 11:20:07 2026 GMT Not After : Jun 24 11:20:07 2026 GMT Subject: CN=b40bcce6-9f79-46af-87c9-3ff1c0d0cf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:57:90:fc:7a:3e:3d:62:a5:4b:8e:95:82: 65:e3:78:62:dc:b3:ab:14:fc:0d:aa:06:cc:29:17: ea:03:30:03:4b:3f:89:eb:72:3b:7a:8c:b9:f5:51: 64:0a:d4:cf:6b:4c:86:9f:fc:2e:da:36:dd:6c:79: b9:c1:a7:f5:e5:e9:33:36:c9:7e:2e:76:6c:5c:dc: 07:1a:21:56:ed:a4:76:e3:19:b6:73:20:ea:26:36: 00:f2:da:62:e6:86:1c:43:b6:77:b4:d6:3f:e7:68: d2:65:6f:4c:4b:96:75:f3:7b:94:ee:66:8b:14:b7: 11:29:22:54:62:04:35:d7:02:45:ca:db:48:de:a2: 2b:e5:ec:03:d9:45:02:7b:69:28:97:75:9d:8a:4e: f4:40:bc:dd:e5:9d:ad:91:d9:48:82:da:6a:1d:64: 97:a3:67:52:cf:a4:aa:7c:9e:0e:bc:8a:34:a5:58: 34:af:a4:1d:90:33:18:e9:7a:7d:93:b5:d2:c7:d1: 32:c5:f6:ab:3a:4b:76:56:88:43:14:8a:e5:31:8f: 28:1f:cd:b3:86:7e:4a:d6:44:7b:e7:6f:95:b2:f1: b6:74:48:3c:e4:ee:fe:0d:3c:4f:a0:aa:27:ab:57: 5b:13:d1:77:02:5a:06:1a:14:44:02:8b:95:05:51: de:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:6F:B3:F3:0F:D8:88:81:2B:87:B2:75:82:C1:66:5D:6B:D7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/fbffce89-0db5-3b56-aa88-02a6d406c57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 138.207.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8f:b7:c0:e2:ff:5e:af:1b:20:5f:cd:f7:0c:08:1b:d7:b9: bc:18:98:bb:9c:7b:77:7e:50:7f:e1:b3:22:23:cd:dd:81:65: f7:7a:63:52:0e:86:d2:6a:37:d5:19:62:f8:9e:77:cb:1e:7b: c4:6e:05:2b:11:2d:a4:fb:88:bf:bd:bc:90:ce:6b:a7:08:d8: 3e:8d:db:a6:08:cf:b8:88:92:17:4c:8f:05:bf:81:ed:fe:38: b6:56:19:51:3c:ec:67:ab:f5:06:a3:df:a3:c3:af:79:fa:f1: 5a:47:b7:00:66:cf:63:b6:e2:c5:0b:75:98:4d:f9:f0:a8:02: d4:68:76:f3:51:0f:50:8a:34:a1:27:5d:ca:70:e7:64:78:33: a4:6e:ce:86:aa:37:6a:c4:fa:16:08:a1:8f:a1:14:ad:32:ad: a9:85:ea:eb:48:2b:33:ea:a3:bb:6c:2b:d4:85:2d:80:4f:d8: 35:38:a1:a5:f0:e9:38:3e:49:cf:2c:60:c6:7d:ca:0a:b9:8e: ba:19:be:97:a9:94:44:98:7a:6e:8f:d4:73:60:04:0a:18:16: 79:b7:34:c5:fa:c3:41:e2:66:f4:06:86:77:ad:d6:3a:a5:86: 4a:65:ba:40:5a:c7:d7:6d:7c:d2:e5:fb:9e:b1:e1:b6:ef:c1: fe:97:d8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1LwwKwu3zbWCXgPIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI2MDMyNjExMjAwN1oXDTI2MDYyNDExMjAwN1owLzEtMCsGA1UEAxMk YjQwYmNjZTYtOWY3OS00NmFmLTg3YzktM2ZmMWMwZDBjZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI9XkPx6Pj1ipUuOlYJl43hi3LOrFPwNqgbM KRfqAzADSz+J63I7eoy59VFkCtTPa0yGn/wu2jbdbHm5waf15ekzNsl+LnZsXNwH GiFW7aR24xm2cyDqJjYA8tpi5oYcQ7Z3tNY/52jSZW9MS5Z183uU7maLFLcRKSJU YgQ11wJFyttI3qIr5ewD2UUCe2kol3Wdik70QLzd5Z2tkdlIgtpqHWSXo2dSz6Sq fJ4OvIo0pVg0r6QdkDMY6Xp9k7XSx9EyxfarOkt2VohDFIrlMY8oH82zhn5K1kR7 52+VsvG2dEg85O7+DTxPoKonq1dbE9F3AloGGhREAouVBVHeWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANKb7PzD9iIgSuHsnWCwWZda9cuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvZmJmZmNlODktMGRiNS0z YjU2LWFhODgtMDJhNmQ0MDZjNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAis9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSPt8Di/16vGyBfzfcMCBvXubwYmLuce3d+UH/hsyIjzd2BZfd6Y1IO htJqN9UZYvied8see8RuBSsRLaT7iL+9vJDOa6cI2D6N26YIz7iIkhdMjwW/ge3+ OLZWGVE87Ger9Qaj36PDr3n68VpHtwBmz2O24sULdZhN+fCoAtRodvNRD1CKNKEn Xcpw52R4M6RuzoaqN2rE+hYIoY+hFK0yramF6utIKzPqo7tsK9SFLYBP2DU4oaXw 6Tg+Sc8sYMZ9ygq5jroZvpeplESYem6P1HNgBAoYFnm3NMX6w0HiZvQGhnet1jql hkplukBax9dtfNLl+56x4bbvwf6X2B8= -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:24 2026 by rpki-client