$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa File: 28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json) Hash identifier: XltDIxVrRpj2BvGXoCCxsn13mlhejDRP2kZTFf2cikU= Subject key identifier: 05:82:C8:D5:60:D7:B3:A7:78:5B:1A:D5:2A:EB:36:C3:14:0F:42:F7 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584D93254C6CD6AE8539EDDBC540 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8075 IP address blocks: 138.32.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4c:6c:d6:ae:85:39:ed:db:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=4b82b0d2-502c-40a8-b0c6-f08f1a66803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:bb:a9:1b:ae:49:c9:c6:86:93:2a:18:48: 19:e8:f7:c9:d4:58:2e:5f:1c:fa:7b:6a:46:6e:51: b8:c8:17:01:1b:dc:bb:d4:bb:2a:04:dd:27:1b:63: e2:0b:56:25:b8:a8:b1:d7:1d:42:85:31:84:31:c4: 0c:5a:1b:a2:87:e6:fb:b8:e6:f3:fe:3a:f1:ef:94: ab:91:06:67:91:e0:44:05:c0:b5:4d:f5:b9:c2:a9: 95:16:00:67:06:73:94:05:aa:ad:bb:ef:87:c6:2e: 2f:de:5e:33:f4:9b:54:70:8f:4f:c8:a8:56:54:7b: 44:ca:11:fd:aa:ea:4d:ef:bc:35:ce:88:e1:96:41: ae:d6:61:8e:6b:1b:12:6c:b3:d0:b8:88:1b:75:f0: a8:bc:47:31:88:2d:e3:fe:c7:08:8b:88:fe:6b:d4: 2e:fb:99:9e:d3:d0:65:d0:54:44:ff:37:79:3d:7d: 6f:59:af:fb:20:21:c4:0e:ed:74:a6:e2:26:58:cf: 0f:55:7b:8f:ba:1c:50:09:a7:42:a8:60:75:c3:37: c9:17:ff:02:c6:98:f5:04:ff:c6:59:79:5a:bd:64: 87:ea:05:38:71:ff:01:77:15:e8:f8:d7:97:7d:97: 14:25:34:5d:4d:6f:2e:3b:59:e2:5f:6c:ee:74:5f: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:C8:D5:60:D7:B3:A7:78:5B:1A:D5:2A:EB:36:C3:14:0F:42:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7c:f5:a5:3b:e1:b6:be:41:a8:be:f8:2d:de:22:75:be:23: 3f:66:54:be:56:45:86:e1:ea:fb:c6:dd:2c:11:ab:e1:cf:e0: f6:02:a9:dc:d4:0f:d1:51:f5:1f:6a:76:6d:3e:d7:ca:0d:16: 4d:b1:d4:33:7f:14:cf:51:c0:cd:e7:e9:0a:05:8f:70:3a:3d: ff:23:55:90:dc:82:ea:15:7d:ee:31:92:26:25:15:00:55:e2: 1b:cc:4a:79:66:26:fb:8d:12:c0:a3:6f:61:a2:51:a5:c1:e4: 92:dd:b4:cc:1d:1c:37:8f:7b:fe:e6:c9:05:fe:c5:2a:8e:21: d5:fa:ad:30:c9:e7:62:21:96:81:f5:3b:e1:01:4e:90:bb:f7: 0e:57:2f:8b:15:ea:6c:cc:5f:aa:cf:2e:f2:82:e6:6b:08:92: 83:8b:42:54:62:b4:e9:81:1d:e7:39:9a:82:c5:64:22:b5:03: 1a:1d:1d:fd:5e:94:aa:77:6f:30:54:c4:de:e1:0c:22:20:8c: 7a:b9:dd:73:8f:49:2c:d3:e9:e9:77:f4:50:d6:60:6f:ee:ed: a7:9f:a5:cc:ea:7d:46:63:36:ed:86:9c:04:ae:4a:82:e4:d8: fa:ef:ce:43:3f:1c:01:ad:b4:ff:b7:67:a3:c1:10:39:84:dc: cb:cb:92:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUxs1q6FOe3bxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGI4MmIwZDItNTAyYy00MGE4LWIwYzYtZjA4ZjFhNjY4MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHG7qRuuScnGhpMqGEgZ6PfJ1FguXxz6e2pG blG4yBcBG9y71LsqBN0nG2PiC1YluKix1x1ChTGEMcQMWhuih+b7uObz/jrx75Sr kQZnkeBEBcC1TfW5wqmVFgBnBnOUBaqtu++Hxi4v3l4z9JtUcI9PyKhWVHtEyhH9 qupN77w1zojhlkGu1mGOaxsSbLPQuIgbdfCovEcxiC3j/scIi4j+a9Qu+5me09Bl 0FRE/zd5PX1vWa/7ICHEDu10puImWM8PVXuPuhxQCadCqGB1wzfJF/8Cxpj1BP/G WXlavWSH6gU4cf8BdxXo+NeXfZcUJTRdTW8uO1niX2zudF89nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWCyNVg17OneFsa1SrrNsMUD0L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvMjg3MzUzNDgtNmNkYS0z NzRhLTk3OGEtYTJhYWJmNjU5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD989aU74ba+Qai++C3eInW+Iz9mVL5WRYbh6vvG3SwRq+HP4PYCqdzU D9FR9R9qdm0+18oNFk2x1DN/FM9RwM3n6QoFj3A6Pf8jVZDcguoVfe4xkiYlFQBV 4hvMSnlmJvuNEsCjb2GiUaXB5JLdtMwdHDePe/7myQX+xSqOIdX6rTDJ52IhloH1 O+EBTpC79w5XL4sV6mzMX6rPLvKC5msIkoOLQlRitOmBHec5moLFZCK1AxodHf1e lKp3bzBUxN7hDCIgjHq53XOPSSzT6el39FDWYG/u7aefpczqfUZjNu2GnASuSoLk 2PrvzkM/HAGttP+3Z6PBEDmE3MvLkkE= -----END CERTIFICATE-----Generated at Wed May 13 14:21:54 2026 by rpki-client