$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa File: bf933f39-3d1b-3b4e-a17f-f9d650858405.roa (raw, json) Hash identifier: ti8wweWsdFbF/olt3HCr/k2sF2ybOW9wslYU4Eie81A= Subject key identifier: 2B:0C:D2:25:32:33:8D:A9:D3:B9:9D:0C:52:EA:3A:D5:A1:70:56:1A Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584E82C4DCFC4E4354BB3C947DE0 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa Signing time: Wed 15 Jul 2026 21:00:12 +0000 ROA not before: Wed 15 Jul 2026 21:00:12 +0000 ROA not after: Tue 13 Oct 2026 21:00:12 +0000 asID: 18701 IP address blocks: 138.32.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:c4:dc:fc:4e:43:54:bb:3c:94:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jul 15 21:00:12 2026 GMT Not After : Oct 13 21:00:12 2026 GMT Subject: CN=0d93183e-f445-42da-b45d-916355c81d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:47:ec:49:12:1c:08:3a:f3:47:b5:6e:a5: 75:75:38:b3:63:c5:56:8b:9f:2d:39:1e:0b:a2:e3: e8:84:a0:fc:aa:6f:a1:cd:39:82:e1:f4:9e:a9:d1: 51:0c:d9:f5:18:e3:17:ea:39:18:b0:ea:d5:91:09: a5:f7:67:d3:29:3a:d2:02:74:c1:ef:de:7c:83:0a: 6e:36:df:0a:e0:85:21:29:b1:39:ba:04:94:21:a9: 9c:1d:ec:5a:7c:f9:a3:64:16:fd:67:64:08:17:72: 98:71:10:4c:1b:78:e4:55:58:af:68:89:d8:66:be: 42:5b:57:51:59:58:8d:2b:91:10:f5:3d:db:83:7e: 83:94:06:ca:bf:12:35:0e:aa:01:a0:1c:8e:49:d1: f1:d3:03:eb:d8:28:b7:b8:da:24:05:d8:1a:cb:0b: b3:e6:ae:77:98:f8:52:3c:be:42:08:3b:48:6f:ef: f1:9b:10:bb:45:6a:32:d2:34:bf:21:96:b3:37:ee: 36:4e:65:dc:33:82:20:37:f5:f1:a4:bb:c4:63:4e: 89:28:ba:ba:42:8f:e5:7b:3b:7b:1f:55:50:43:a9: 47:7d:c4:0d:2f:fa:de:a7:a0:4b:38:ae:69:d7:c7: 32:a8:f9:0e:bd:1e:9d:27:ab:cf:08:d9:7d:dd:fe: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:D2:25:32:33:8D:A9:D3:B9:9D:0C:52:EA:3A:D5:A1:70:56:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/bf933f39-3d1b-3b4e-a17f-f9d650858405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cd:f4:e1:5d:ea:36:89:76:e3:2f:b7:40:5d:e5:db:00:f7: ba:d5:07:d4:92:c7:a8:ce:a8:46:15:5c:4a:2a:86:d6:3e:c8: 2c:7d:64:61:90:fc:ee:1f:91:33:35:bf:2d:d3:e3:12:41:51: 02:de:90:b3:cf:bd:4c:f6:8c:45:1c:de:71:cb:29:a5:68:0d: 0a:26:c6:0f:e4:fd:3d:34:d9:14:f0:ee:79:c3:01:f8:dd:40: dc:24:f3:c0:a5:c7:ae:48:cf:6b:ac:7b:5b:1e:6f:3e:d5:dd: 04:22:8d:6d:fb:6b:19:2a:ba:6b:71:63:36:51:d7:ec:1c:92: 9c:df:b3:04:32:d9:dc:d3:e2:5e:a5:13:48:1d:3b:96:f3:a7: 14:a5:c9:ff:ed:6c:07:ea:64:cf:3e:f6:61:99:b8:c2:f0:48: fb:72:7e:51:10:02:02:68:8f:66:f0:54:82:5e:79:26:6a:55: 60:ac:fa:f5:4e:fe:51:4c:b6:22:98:5d:ed:b3:5f:10:90:2d: 13:ef:12:46:19:a5:fc:43:3e:ec:4f:9b:c6:e6:c4:be:a0:57: 59:ec:07:4d:0d:df:c9:74:92:bf:6c:04:1c:06:42:65:a9:35: b2:b5:89:fe:34:2c:d0:22:e9:1f:e5:2b:2f:82:45:9c:b2:a6: fc:ee:8c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxNz8TkNUuzyUfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk MGQ5MzE4M2UtZjQ0NS00MmRhLWI0NWQtOTE2MzU1YzgxZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivlH7EkSHAg680e1bqV1dTizY8VWi58tOR4L ouPohKD8qm+hzTmC4fSeqdFRDNn1GOMX6jkYsOrVkQml92fTKTrSAnTB7958gwpu Nt8K4IUhKbE5ugSUIamcHexafPmjZBb9Z2QIF3KYcRBMG3jkVVivaInYZr5CW1dR WViNK5EQ9T3bg36DlAbKvxI1DqoBoByOSdHx0wPr2Ci3uNokBdgaywuz5q53mPhS PL5CCDtIb+/xmxC7RWoy0jS/IZazN+42TmXcM4IgN/XxpLvEY06JKLq6Qo/lezt7 H1VQQ6lHfcQNL/rep6BLOK5p18cyqPkOvR6dJ6vPCNl93f6ofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsM0iUyM42p07mdDFLqOtWhcFYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYmY5MzNmMzktM2QxYi0z YjRlLWExN2YtZjlkNjUwODU4NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHN9OFd6jaJduMvt0Bd5dsA97rVB9SSx6jOqEYVXEoqhtY+yCx9ZGGQ /O4fkTM1vy3T4xJBUQLekLPPvUz2jEUc3nHLKaVoDQomxg/k/T002RTw7nnDAfjd QNwk88Clx65Iz2use1sebz7V3QQijW37axkqumtxYzZR1+wckpzfswQy2dzT4l6l E0gdO5bzpxSlyf/tbAfqZM8+9mGZuMLwSPtyflEQAgJoj2bwVIJeeSZqVWCs+vVO /lFMtiKYXe2zXxCQLRPvEkYZpfxDPuxPm8bmxL6gV1nsB00N38l0kr9sBBwGQmWp NbK1if40LNAi6R/lKy+CRZyypvzujLg= -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:48 2026 by rpki-client