$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/db0cc349-a276-3db0-92e4-3fca586b08d5.roa File: db0cc349-a276-3db0-92e4-3fca586b08d5.roa (raw, json) Hash identifier: QCR3t4h7oj8dbrmpxTrf8NbpKz0f+6r/wyd4AI6MvpQ= Subject key identifier: 49:A6:AB:00:DD:65:A1:84:EF:97:7D:51:C2:A2:B9:21:8D:5D:13:76 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584E82C4DD29506B42B6B20A3A80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/db0cc349-a276-3db0-92e4-3fca586b08d5.roa Signing time: Wed 15 Jul 2026 21:00:12 +0000 ROA not before: Wed 15 Jul 2026 21:00:12 +0000 ROA not after: Tue 13 Oct 2026 21:00:12 +0000 asID: 18701 IP address blocks: 138.32.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:c4:dd:29:50:6b:42:b6:b2:0a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jul 15 21:00:12 2026 GMT Not After : Oct 13 21:00:12 2026 GMT Subject: CN=4c9f0c53-a448-4d9a-be73-6d526b6fbc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:f0:9f:7f:df:d3:01:d2:52:b9:c2:c5:23: 23:ef:6c:00:44:e5:9a:e3:60:16:17:46:b4:5b:f5: 54:39:65:d3:9e:56:95:9b:8f:33:aa:6a:c0:6e:e7: 1b:07:4f:09:8e:74:05:e3:21:00:56:b1:62:2e:05: 8d:f2:c7:6b:66:6e:c0:3b:14:10:5b:68:cd:c2:b4: aa:1a:d7:ba:ce:88:05:91:55:8e:51:cf:ae:b6:97: 3c:59:07:12:fc:42:0f:50:43:ef:93:04:61:97:0b: f1:4c:a6:7c:ed:2d:5f:71:fb:fe:c2:e7:ba:c2:df: 38:b8:99:0c:c3:51:3a:68:d3:d7:92:52:4d:72:c3: 5f:1c:a1:86:94:68:d3:b7:60:a0:a1:bf:49:c0:ce: 03:09:c2:a1:04:82:38:19:ef:3a:47:93:ac:0f:91: 1a:98:1d:df:2f:28:a6:3a:f2:cb:31:99:8f:b7:e9: 33:6d:5e:fb:ad:42:aa:c4:e3:b0:c6:21:52:30:ea: ec:08:b5:84:60:01:21:27:f9:24:c7:74:9f:3f:dd: 88:e1:50:0e:ff:5f:1b:b0:5c:d4:40:12:5d:da:a7: 7d:b8:03:20:48:6a:8e:95:9d:a3:a4:f7:c2:ad:9f: ce:6c:00:26:88:d7:9d:da:d6:8e:f0:eb:93:39:0e: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:AB:00:DD:65:A1:84:EF:97:7D:51:C2:A2:B9:21:8D:5D:13:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/db0cc349-a276-3db0-92e4-3fca586b08d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:d8:d2:ad:78:d4:98:08:72:c1:98:76:a2:dd:eb:77:ca:9f: 67:97:4a:d1:24:45:0f:28:02:23:02:6e:a5:8a:c2:cc:56:44: 96:5e:7e:96:4f:b6:4c:80:1d:03:86:79:cf:af:dc:2d:e6:18: ab:3c:08:d8:19:d1:75:93:02:65:3e:0f:af:6f:d4:cb:2b:bb: df:7b:79:b2:cd:e7:97:8f:d8:bb:92:70:30:1b:20:a3:48:16: 0b:f8:41:bf:29:0c:3c:20:08:aa:5c:4b:07:37:63:55:12:25: 9a:52:26:6a:4e:b1:c0:4a:7c:39:d8:52:52:06:99:5e:2c:74: b4:b3:d0:4e:cc:12:d3:32:6e:94:67:4c:84:4a:a9:2e:89:b2: 54:a6:7f:8b:48:42:fe:b1:56:ea:23:3a:33:00:2d:52:d5:8f: 5b:a7:f2:57:b7:28:ea:50:54:05:80:f8:4f:35:79:49:39:17: db:7a:33:5a:c9:a2:f3:df:e4:78:7b:44:0f:df:ad:fa:36:3e: 3e:b2:f7:d9:f0:88:bb:82:bb:96:74:2a:42:4f:09:25:00:2c: 28:1e:34:63:91:62:72:00:0c:5f:d7:97:12:cf:1d:24:53:ca: 07:05:07:83:b9:cc:00:cf:e8:6d:c7:73:dc:03:95:31:f9:48: 59:bb:36:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN0pUGtCtrIKOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk NGM5ZjBjNTMtYTQ0OC00ZDlhLWJlNzMtNmQ1MjZiNmZiYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJnwn3/f0wHSUrnCxSMj72wAROWa42AWF0a0 W/VUOWXTnlaVm48zqmrAbucbB08JjnQF4yEAVrFiLgWN8sdrZm7AOxQQW2jNwrSq Gte6zogFkVWOUc+utpc8WQcS/EIPUEPvkwRhlwvxTKZ87S1fcfv+wue6wt84uJkM w1E6aNPXklJNcsNfHKGGlGjTt2Cgob9JwM4DCcKhBII4Ge86R5OsD5EamB3fLyim OvLLMZmPt+kzbV77rUKqxOOwxiFSMOrsCLWEYAEhJ/kkx3SfP92I4VAO/18bsFzU QBJd2qd9uAMgSGqOlZ2jpPfCrZ/ObAAmiNed2taO8OuTOQ4mswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmmqwDdZaGE75d9UcKiuSGNXRN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvZGIwY2MzNDktYTI3Ni0z ZGIwLTkyZTQtM2ZjYTU4NmIwOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDY0q141JgIcsGYdqLd63fKn2eXStEkRQ8oAiMCbqWKwsxWRJZefpZP tkyAHQOGec+v3C3mGKs8CNgZ0XWTAmU+D69v1Msru997ebLN55eP2LuScDAbIKNI Fgv4Qb8pDDwgCKpcSwc3Y1USJZpSJmpOscBKfDnYUlIGmV4sdLSz0E7MEtMybpRn TIRKqS6JslSmf4tIQv6xVuojOjMALVLVj1un8le3KOpQVAWA+E81eUk5F9t6M1rJ ovPf5Hh7RA/frfo2Pj6y99nwiLuCu5Z0KkJPCSUALCgeNGORYnIADF/XlxLPHSRT ygcFB4O5zADP6G3Hc9wDlTH5SFm7Nvk= -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:49 2026 by rpki-client