$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa File: 1c6e5da0-1cd0-34a4-b335-4ca699606908.roa (raw, json) Hash identifier: e4gd6EDUF83KAIWKZzaUbWsKzTUyBNq3tpEtAkHZfWM= Subject key identifier: C8:FC:23:52:E1:EA:10:53:0D:8B:A9:E9:3A:2B:3E:E7:C1:D8:30:83 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584AECC1365BA6936309CB0D3700 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33059 IP address blocks: 137.239.201.0/24 maxlen: 24 137.239.202.0/24 maxlen: 24 137.239.203.0/24 maxlen: 24 137.239.204.0/24 maxlen: 24 137.239.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:36:5b:a6:93:63:09:cb:0d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ed069855-d4d4-4237-a58f-8cc01eabe3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:5a:b7:3d:3d:fa:1f:44:d8:ba:e3:36:6d: 4e:d3:86:1a:a8:c1:e8:c0:4b:eb:00:27:1a:c7:35: 18:15:1c:cc:43:55:fa:db:15:59:f3:44:29:29:ee: 45:2b:47:b4:f3:df:70:a3:6a:a0:22:81:c2:6e:30: ea:e1:88:62:dc:64:db:7e:fe:65:6c:60:fe:ff:1a: 3e:a0:4d:4b:46:21:d0:13:8d:ae:f7:c2:e9:4c:9f: de:92:ca:b9:4d:9e:30:7e:37:36:4a:e7:3a:c0:7e: 51:a3:25:3e:1e:2f:eb:c6:ff:c2:6c:f6:71:6a:2c: a2:c6:8d:97:74:e3:3e:79:90:dd:16:95:3d:c3:c2: ef:73:55:bf:32:c2:6d:a0:8a:94:1f:93:0b:5e:53: 6e:77:e0:05:b1:cf:14:06:23:b9:e7:3f:c0:e9:38: 49:26:6b:9f:01:65:7a:91:f6:5f:d8:d6:9b:c7:a9: b0:52:55:8a:fe:06:42:f0:17:59:d9:f9:80:74:a0: aa:6b:47:8b:30:8e:b3:d4:f9:33:3a:85:7e:60:a3: 03:62:d5:ad:53:4e:db:be:fb:85:28:fb:77:dd:19: 85:fa:cc:e2:db:2d:28:1b:85:a4:cd:f7:cb:6b:f2: 6f:e3:f9:0e:2b:af:70:97:68:94:35:bc:89:e3:50: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:23:52:E1:EA:10:53:0D:8B:A9:E9:3A:2B:3E:E7:C1:D8:30:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.201.0-137.239.205.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:59:b5:2a:76:54:92:9a:5e:83:2c:1a:e1:f2:d8:7b:59:9e: e5:97:dd:df:ff:40:da:55:64:50:2b:1b:90:9a:a8:33:51:75: 0e:e4:e0:67:6a:3f:35:af:52:99:48:9a:77:6f:f5:4f:2f:55: e5:86:83:af:0b:34:a3:b4:0b:12:1d:cb:bf:97:b2:13:4b:06: e3:0d:e4:0b:55:73:75:22:81:3c:79:f9:d2:f4:22:28:9e:15: 00:c4:5c:c8:12:db:98:3d:b9:10:9f:1e:e0:eb:5a:da:b1:24: 9e:ca:9e:44:5d:a3:75:86:b6:a8:c5:57:ac:e9:ab:2e:6a:bf: 3c:3e:30:8b:68:74:6a:35:0f:bc:98:21:2f:c9:4a:58:69:63: 2d:0d:60:03:58:8f:67:3c:38:f3:06:e7:ea:9b:c1:2c:94:71: 28:c1:aa:63:18:15:4c:b2:7a:33:67:6b:68:e0:62:86:ae:3f: 91:b3:73:96:0f:f5:2a:d6:e0:99:8d:39:f1:78:af:50:66:8e: 1d:53:2f:48:54:b7:6a:9e:1e:f9:f7:f5:07:68:74:56:a3:f1: 02:bd:bf:08:94:19:0c:de:d4:b5:69:8a:02:db:46:1f:55:b1: bb:41:f3:c1:fc:cc:c4:71:7a:c1:9a:fc:41:af:45:fd:28:8d: 91:e5:e8:92 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErswTZbppNjCcsNNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWQwNjk4NTUtZDRkNC00MjM3LWE1OGYtOGNjMDFlYWJlM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Ratz09+h9E2LrjNm1O04YaqMHowEvrACca xzUYFRzMQ1X62xVZ80QpKe5FK0e0899wo2qgIoHCbjDq4Yhi3GTbfv5lbGD+/xo+ oE1LRiHQE42u98LpTJ/eksq5TZ4wfjc2Suc6wH5RoyU+Hi/rxv/CbPZxaiyixo2X dOM+eZDdFpU9w8Lvc1W/MsJtoIqUH5MLXlNud+AFsc8UBiO55z/A6ThJJmufAWV6 kfZf2Nabx6mwUlWK/gZC8BdZ2fmAdKCqa0eLMI6z1PkzOoV+YKMDYtWtU07bvvuF KPt33RmF+szi2y0oG4WkzffLa/Jv4/kOK69wl2iUNbyJ41AxOwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMj8I1Lh6hBTDYup6TorPufB2DCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM2ZTVkYTAtMWNkMC0z NGE0LWIzMzUtNGNhNjk5NjA2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACJ78kD BAGJ78wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlVm1KnZUkppegywa4fLYe1me5Zfd3/9A2lVkUCsbkJqo M1F1DuTgZ2o/Na9SmUiad2/1Ty9V5YaDrws0o7QLEh3Lv5eyE0sG4w3kC1VzdSKB PHn50vQiKJ4VAMRcyBLbmD25EJ8e4Ota2rEknsqeRF2jdYa2qMVXrOmrLmq/PD4w i2h0ajUPvJghL8lKWGljLQ1gA1iPZzw48wbn6pvBLJRxKMGqYxgVTLJ6M2draOBi hq4/kbNzlg/1KtbgmY058XivUGaOHVMvSFS3ap4e+ff1B2h0VqPxAr2/CJQZDN7U tWmKAttGH1Wxu0HzwfzMxHF6wZr8Qa9F/SiNkeXokg== -----END CERTIFICATE-----Generated at Sun Aug 24 05:21:25 2025 by rpki-client