$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json) Hash identifier: ocjr9WaeUU0oZhR1ln90m3l4HUhXOd8Biro3T2hA5as= Subject key identifier: 2A:A8:36:20:DE:B9:6F:6E:11:D1:8B:92:82:5B:A4:DB:1C:A6:28:B2 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584ADA9BC031754A6898A1CEBF80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 25645 IP address blocks: 137.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c0:31:75:4a:68:98:a1:ce:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=f2ce5db7-5392-478a-bbac-60d726a557a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:b3:9a:55:6d:ba:6c:71:9e:55:fd:6a:80: 4f:66:26:7c:7d:d0:be:62:ef:4f:77:89:c7:e8:c6: 83:4b:79:25:2b:64:a3:63:89:cf:a5:11:92:59:80: b5:af:00:83:6e:e7:ce:98:f8:53:7b:93:f1:88:d5: 6a:2b:f5:af:e9:93:98:12:89:39:8e:d7:fc:d1:9c: 24:c1:5f:5e:4d:2f:41:50:0b:5f:be:88:ff:67:15: 2e:1d:2b:e8:6e:79:c6:d2:69:dd:80:5f:1a:b4:fb: 6d:0f:86:52:8d:1b:a7:3e:f9:99:a8:c0:9f:8a:af: bc:f9:90:e5:a5:ef:48:de:66:8d:97:26:d4:64:f9: cb:82:e5:b4:0f:d8:14:b4:15:3e:33:f9:76:04:55: 6f:f9:24:56:8a:c1:12:31:9b:0e:09:81:ab:bc:dc: 44:5b:7e:a9:6f:3f:47:c4:fe:31:4d:8a:be:95:24: 4b:fe:23:1b:50:14:9a:54:19:a4:1d:32:0e:1c:02: 33:df:87:f2:ec:a3:dc:3b:23:7f:d6:e3:c8:42:17: 29:1e:b5:c1:d4:2a:aa:99:d3:d3:2e:f8:e9:0f:0e: 65:77:68:bb:67:32:71:9e:e3:f7:3c:5b:cd:c5:29: b2:4a:4a:f8:a8:52:9e:90:74:b3:4e:89:07:8e:a5: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:36:20:DE:B9:6F:6E:11:D1:8B:92:82:5B:A4:DB:1C:A6:28:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a5:31:83:7d:b0:f3:fd:d3:f3:74:94:5f:11:f4:07:b6:d1: 93:b9:ff:f7:2c:b6:1a:2f:1c:a8:2f:89:d2:f3:4b:69:35:27: 7b:ac:5e:5c:9f:48:54:cf:72:a3:c5:a0:86:40:48:3c:56:80: d3:51:ff:ab:59:ce:a9:db:09:6a:bd:8b:4f:f2:0c:2f:fb:bc: 03:6c:69:04:bf:20:cd:73:04:39:25:4b:49:2e:03:91:12:6e: 25:0d:d2:5c:99:70:e0:06:d5:80:25:5a:13:68:71:42:ca:dc: bf:a8:f2:5f:ba:fb:69:99:85:90:10:74:30:a6:8d:f9:ad:99: 85:fc:80:a1:ae:40:11:4c:aa:b4:89:e8:52:09:a7:24:e1:09: 94:e1:4e:41:32:df:6f:a9:02:18:65:82:d9:8b:4d:0a:f8:d4: 0d:ff:5b:b8:da:63:b0:f9:fa:12:69:d0:db:d7:4d:c2:87:f8: 33:95:b6:f6:e5:9e:27:1c:1f:57:7c:bc:1d:25:62:fb:5d:4a: 7d:33:f6:5b:9f:2f:49:d4:0f:eb:d2:eb:cc:9c:8a:1d:68:f5: 15:1a:6b:b6:6c:c6:54:0b:29:16:4e:5e:96:f5:0e:14:24:ec: 7d:05:54:a5:db:c1:ce:9e:6f:d6:94:95:be:6f:a4:1e:d4:cd: 11:bd:ba:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8AxdUpomKHOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZjJjZTVkYjctNTM5Mi00NzhhLWJiYWMtNjBkNzI2YTU1N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJOzmlVtumxxnlX9aoBPZiZ8fdC+Yu9Pd4nH 6MaDS3klK2SjY4nPpRGSWYC1rwCDbufOmPhTe5PxiNVqK/Wv6ZOYEok5jtf80Zwk wV9eTS9BUAtfvoj/ZxUuHSvobnnG0mndgF8atPttD4ZSjRunPvmZqMCfiq+8+ZDl pe9I3maNlybUZPnLguW0D9gUtBU+M/l2BFVv+SRWisESMZsOCYGrvNxEW36pbz9H xP4xTYq+lSRL/iMbUBSaVBmkHTIOHAIz34fy7KPcOyN/1uPIQhcpHrXB1CqqmdPT LvjpDw5ld2i7ZzJxnuP3PFvNxSmySkr4qFKekHSzTokHjqU1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqoNiDeuW9uEdGLkoJbpNscpiiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqlMYN9sPP90/N0lF8R9Ae20ZO5//csthovHKgvidLzS2k1J3usXlyf SFTPcqPFoIZASDxWgNNR/6tZzqnbCWq9i0/yDC/7vANsaQS/IM1zBDklS0kuA5ES biUN0lyZcOAG1YAlWhNocULK3L+o8l+6+2mZhZAQdDCmjfmtmYX8gKGuQBFMqrSJ 6FIJpyThCZThTkEy32+pAhhlgtmLTQr41A3/W7jaY7D5+hJp0NvXTcKH+DOVtvbl niccH1d8vB0lYvtdSn0z9lufL0nUD+vS68ycih1o9RUaa7ZsxlQLKRZOXpb1DhQk 7H0FVKXbwc6eb9aUlb5vpB7UzRG9ulM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:26 2025 by rpki-client