$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa File: 1c6e5da0-1cd0-34a4-b335-4ca699606908.roa (raw, json) Hash identifier: Rhw+scrYwTci/TXMC4HxBVssDsP2lqyWYb1nSBELfT8= Subject key identifier: 82:0D:6B:44:49:AB:2E:B9:C2:3B:07:53:17:A9:B5:A9:73:D3:C0:2B Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F119D0605958E39D7CEE70F70 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33059 IP address blocks: 137.239.201.0/24 maxlen: 24 137.239.202.0/24 maxlen: 24 137.239.203.0/24 maxlen: 24 137.239.204.0/24 maxlen: 24 137.239.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:06:05:95:8e:39:d7:ce:e7:0f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=acee2a88-c567-4448-af63-7448d8006454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:14:cf:98:4a:b6:a7:ba:99:87:d3:a1:35: f5:14:d4:8b:e4:2b:21:bd:6f:3b:96:84:56:dc:6f: 48:be:a6:87:98:be:f4:69:62:d0:4c:e8:25:f6:2e: 7f:02:62:f3:55:41:55:2c:a3:46:ae:66:9c:60:d4: 79:23:0e:b9:ea:73:7a:a3:35:a9:21:dc:65:2f:ec: ae:d0:dd:49:53:c6:fc:00:f3:f6:c6:4f:c0:5d:c0: 90:de:54:25:b9:a2:5c:09:51:45:7c:bc:34:f6:a1: 40:45:a9:0e:7e:2d:09:11:e8:ae:22:59:7f:42:4a: b5:37:1f:79:f0:83:c7:95:65:de:b2:2b:ea:6d:03: 81:dc:56:87:80:8c:d5:12:d6:39:b6:6c:b8:06:84: 88:e9:0f:2c:28:57:51:35:be:da:09:89:82:3f:43: de:b8:43:51:23:6f:3a:8d:73:d8:e5:41:a8:71:0a: 78:2b:5e:6e:3c:69:75:14:3c:d3:5e:67:c4:88:04: 9d:76:e1:09:de:d0:79:e7:8d:ca:fd:b5:6e:7c:38: ef:84:49:8a:f7:ef:aa:eb:85:7a:48:65:99:1c:9e: 28:98:48:28:b4:64:9d:53:19:31:9f:a1:94:b3:51: ec:d9:53:b9:2f:f5:c6:cd:d9:5c:dd:9b:8f:2a:5d: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:6B:44:49:AB:2E:B9:C2:3B:07:53:17:A9:B5:A9:73:D3:C0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.201.0-137.239.205.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:60:5c:3b:e9:87:80:e4:3f:54:67:5c:54:b8:b4:60:69:1c: 5f:2e:c5:7d:15:fe:b9:f4:de:a6:09:87:ff:d4:6f:f3:83:a9: 5f:a0:25:f1:8c:15:07:25:b0:5a:f6:b1:7d:e3:b4:61:83:20: 1c:44:26:44:d0:bd:06:b2:10:50:5c:9a:f1:57:28:f1:db:7e: 21:e9:30:af:00:c5:82:f0:e8:87:62:58:d2:28:0d:f2:c8:5e: c2:d3:e0:8a:de:9c:cb:04:6c:dd:b3:df:47:25:ed:b8:92:6a: 86:34:85:23:5f:fb:ad:ed:03:82:db:3b:1a:35:ec:d7:1b:71: 95:ad:19:7c:93:e6:02:44:3f:26:22:64:ea:19:71:ab:d7:e9: af:c4:9a:d8:19:92:0c:24:ac:14:c6:9f:d5:c4:38:84:27:5c: 67:47:99:58:21:fb:78:98:d7:7c:db:6b:5b:37:3f:19:c0:ba: f2:0d:b9:21:f5:43:2e:b0:74:52:98:39:67:29:87:fc:04:50: b4:79:d8:4b:dc:a6:86:be:47:fd:ef:b9:d4:54:23:7f:eb:16: b5:9b:32:68:11:39:e7:79:12:c7:50:98:9b:17:2f:9a:64:ad: dd:00:9a:40:ad:42:96:27:af:d6:12:be:ad:e0:35:05:e1:7b: 1d:af:74:09 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8RnQYFlY45187nD3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YWNlZTJhODgtYzU2Ny00NDQ4LWFmNjMtNzQ0OGQ4MDA2NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAIUz5hKtqe6mYfToTX1FNSL5CshvW87loRW 3G9IvqaHmL70aWLQTOgl9i5/AmLzVUFVLKNGrmacYNR5Iw656nN6ozWpIdxlL+yu 0N1JU8b8APP2xk/AXcCQ3lQluaJcCVFFfLw09qFARakOfi0JEeiuIll/Qkq1Nx95 8IPHlWXesivqbQOB3FaHgIzVEtY5tmy4BoSI6Q8sKFdRNb7aCYmCP0PeuENRI286 jXPY5UGocQp4K15uPGl1FDzTXmfEiASdduEJ3tB5543K/bVufDjvhEmK9++q64V6 SGWZHJ4omEgotGSdUxkxn6GUs1Hs2VO5L/XGzdlc3ZuPKl1BCQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIINa0RJqy65wjsHUxeptalz08ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM2ZTVkYTAtMWNkMC0z NGE0LWIzMzUtNGNhNjk5NjA2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACJ78kD BAGJ78wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnWBcO+mHgOQ/VGdcVLi0YGkcXy7FfRX+ufTepgmH/9Rv 84OpX6Al8YwVByWwWvaxfeO0YYMgHEQmRNC9BrIQUFya8Vco8dt+IekwrwDFgvDo h2JY0igN8shewtPgit6cywRs3bPfRyXtuJJqhjSFI1/7re0Dgts7GjXs1xtxla0Z fJPmAkQ/JiJk6hlxq9fpr8Sa2BmSDCSsFMaf1cQ4hCdcZ0eZWCH7eJjXfNtrWzc/ GcC68g25IfVDLrB0Upg5ZymH/ARQtHnYS9ymhr5H/e+51FQjf+sWtZsyaBE553kS x1CYmxcvmmSt3QCaQK1Cliev1hK+reA1BeF7Ha90CQ== -----END CERTIFICATE-----Generated at Mon Oct 5 22:56:58 2026 by rpki-client