$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa File: d0057656-9498-3ff4-a98a-a3e443f57ded.roa (raw, json) Hash identifier: 73izTyA7Hnkn2etJ7/5iVF5uyTfhlhuBXueXOZ/Ia/g= Subject key identifier: EB:30:1D:5B:D6:DD:87:70:D6:26:8F:0C:D5:1C:AB:85:44:C1:64:C1 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584E736A250929747BAC2576CF80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 8075 IP address blocks: 138.32.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:25:09:29:74:7b:ac:25:76:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=4b3a8e25-5d63-4315-8163-466eeebb7246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3d:30:e7:7f:1a:33:f7:6c:76:dd:c0:8b:f5: dd:8f:bd:61:a3:68:f2:9a:49:05:25:fa:6e:2c:5a: fa:91:50:37:3f:84:a1:c1:12:de:10:17:03:6d:d2: 66:07:6b:4d:c0:c6:a8:98:6d:8d:58:13:95:6c:c1: 0e:33:23:4b:cb:e6:31:b1:66:5b:7d:48:06:3d:12: 19:3d:7c:96:35:e4:65:cf:cd:f5:6b:84:91:e5:70: a5:09:04:d9:aa:a9:f9:70:4d:fa:76:d6:8c:02:34: a2:fc:ee:63:53:d5:20:7d:6c:60:ff:4c:c8:63:72: 2c:a8:30:8e:4d:cd:7c:29:c5:d2:1b:eb:02:f9:37: a6:bc:ef:5d:df:ce:55:b4:22:b5:7b:49:33:02:00: f6:a1:ea:6b:b9:9e:dc:c8:28:3e:d9:7d:5a:99:c4: 0d:6c:da:d3:f5:7e:b5:30:89:6e:d3:42:9e:8d:61: 37:52:0b:fb:29:1e:28:4b:47:e0:71:46:6d:1e:1c: c9:5f:a8:40:f7:e4:1e:c0:b1:77:69:68:f5:d3:6e: c7:18:f2:d0:70:5a:ed:28:d8:7e:60:46:77:0c:14: 43:d4:c0:2e:07:42:86:52:e0:23:63:17:68:9f:00: 17:5c:ee:98:5e:0c:8e:82:70:59:42:24:f8:e0:45: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:1D:5B:D6:DD:87:70:D6:26:8F:0C:D5:1C:AB:85:44:C1:64:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:80:f7:48:f4:47:c7:09:10:d7:8a:6d:b7:b0:2b:eb:dc:09: b9:74:b8:be:db:05:8b:d3:66:a3:14:96:89:aa:98:ed:a6:0d: f1:62:d3:29:1c:91:57:6d:d8:ad:c7:6c:da:1e:b8:c2:de:dc: 26:be:8d:77:8b:11:bd:d4:a8:bd:8e:ad:7a:dc:65:c5:9f:47: 87:2a:d0:0b:1a:32:1f:2b:99:70:5d:cb:67:70:8d:3a:c7:7d: 49:16:94:df:33:2a:51:8e:9f:26:fd:68:34:46:1d:64:ea:80: 87:25:d0:6f:5d:57:53:8e:66:84:15:9f:3c:85:54:0c:42:9b: 80:4c:ab:64:a4:4e:2e:4b:6e:1c:01:ee:0b:54:ee:c8:f0:97: b4:0c:98:e0:e9:bd:e1:f1:07:b2:42:f6:8c:e6:52:d6:c2:b3: 1b:2c:06:75:d1:ba:0e:d4:2a:98:08:66:94:05:27:4a:0c:d8: 4d:67:b4:ce:ce:e4:4e:01:17:2b:17:70:e7:7a:e6:d0:55:5c: 56:a3:75:38:25:a3:d9:aa:7c:c5:a2:c3:77:ec:2c:00:3c:a0: be:cb:92:ed:08:a2:f0:ae:f0:85:40:16:f9:a9:08:6d:26:49: 7e:74:f3:3e:b5:4c:c7:71:07:ae:b1:8f:f7:3a:71:d1:6e:f8: 1e:97:2d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiUJKXR7rCV2z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NGIzYThlMjUtNWQ2My00MzE1LTgxNjMtNDY2ZWVlYmI3MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj0w538aM/dsdt3Ai/Xdj71ho2jymkkFJfpu LFr6kVA3P4ShwRLeEBcDbdJmB2tNwMaomG2NWBOVbMEOMyNLy+YxsWZbfUgGPRIZ PXyWNeRlz831a4SR5XClCQTZqqn5cE36dtaMAjSi/O5jU9UgfWxg/0zIY3IsqDCO Tc18KcXSG+sC+TemvO9d385VtCK1e0kzAgD2oepruZ7cyCg+2X1amcQNbNrT9X61 MIlu00KejWE3Ugv7KR4oS0fgcUZtHhzJX6hA9+QewLF3aWj1027HGPLQcFrtKNh+ YEZ3DBRD1MAuB0KGUuAjYxdonwAXXO6YXgyOgnBZQiT44EX7SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOswHVvW3Ydw1iaPDNUcq4VEwWTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvZDAwNTc2NTYtOTQ5OC0z ZmY0LWE5OGEtYTNlNDQzZjU3ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWA90j0R8cJENeKbbewK+vcCbl0uL7bBYvTZqMUlomqmO2mDfFi0ykc kVdt2K3HbNoeuMLe3Ca+jXeLEb3UqL2OrXrcZcWfR4cq0AsaMh8rmXBdy2dwjTrH fUkWlN8zKlGOnyb9aDRGHWTqgIcl0G9dV1OOZoQVnzyFVAxCm4BMq2SkTi5LbhwB 7gtU7sjwl7QMmODpveHxB7JC9ozmUtbCsxssBnXRug7UKpgIZpQFJ0oM2E1ntM7O 5E4BFysXcOd65tBVXFajdTglo9mqfMWiw3fsLAA8oL7Lku0IovCu8IVAFvmpCG0m SX508z61TMdxB66xj/c6cdFu+B6XLec= -----END CERTIFICATE-----Generated at Fri Jul 24 11:59:08 2026 by rpki-client