$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json) Hash identifier: AXjLfnR6E/CoplVzFM2Nnj6G36hVnpyy3jW1xXTiXUU= Subject key identifier: 7A:65:E5:A7:FC:30:4A:2D:A7:34:41:54:25:82:37:E4:5E:C1:06:B4 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D3DFFB0C86D4737C20194D180 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 25645 IP address blocks: 137.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b0:c8:6d:47:37:c2:01:94:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=76d85709-a932-46d5-9986-30ed4e6004e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:b0:90:a8:a9:a5:f4:78:85:c5:f9:41:1e: e2:f6:14:e8:ce:12:9c:2f:5e:64:31:a5:6f:97:52: 97:3a:44:de:dd:f4:41:b7:4b:64:ed:33:ca:63:07: e4:16:17:7e:c9:a9:60:7e:30:5b:47:8b:bb:a2:cd: a3:de:19:ae:b0:06:41:66:e9:f0:3d:72:e7:f5:c0: b5:d5:8d:24:f1:a8:84:01:99:3b:fc:4c:bd:33:13: 03:83:1f:ac:04:ea:f5:9e:10:39:19:4c:ca:fe:3f: e0:20:f3:1f:94:39:21:a7:27:d9:40:ad:85:8c:fe: a0:e5:03:bf:c6:70:24:6b:f4:69:1d:0e:5d:fe:49: e6:44:20:5e:1f:ab:dc:ed:cb:fa:dd:9a:e1:21:9e: 8a:0f:d9:aa:bf:1e:0c:75:7f:d2:32:c8:b8:e8:6b: 95:ca:42:79:01:63:4c:dc:f7:9c:7e:b7:da:e2:7b: 0e:a3:3c:65:79:70:73:19:17:c5:b8:7b:4d:e4:56: c7:7b:5a:a3:11:fa:f8:ca:8d:cd:0a:08:79:75:5d: d1:04:73:a3:5b:e8:e0:87:ff:61:a5:f8:a6:c9:3d: 93:0b:e8:5e:7f:aa:f4:a4:ac:c7:72:8b:9d:eb:47: 3e:21:75:96:1e:e1:69:3d:fc:59:c0:c8:af:60:04: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:E5:A7:FC:30:4A:2D:A7:34:41:54:25:82:37:E4:5E:C1:06:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:07:9d:5e:fa:0e:5c:fe:bb:18:41:d1:93:52:e1:77:21:84: 74:1c:59:90:dd:72:45:f6:6a:d4:9b:cc:d1:77:2d:47:02:c1: ca:4e:0f:4b:19:db:88:d4:df:de:ab:02:1b:3a:3e:73:4b:2b: 34:8e:64:0d:bc:16:b6:6d:e6:5f:33:e7:a9:9b:dd:f8:12:a1: 57:19:6b:62:67:75:41:5a:f8:1d:8e:ee:1b:95:2b:83:4a:32: f7:e0:f8:ab:c3:67:4e:8c:06:08:bb:b4:eb:ab:5f:de:86:97: 2b:22:87:51:5d:45:ae:d7:43:67:0c:00:78:ab:e9:e3:7d:d8: eb:1b:d8:18:2e:d6:f9:aa:ce:9a:de:83:3d:62:51:59:e6:97: 4d:3e:e9:fb:a0:41:8b:c2:bf:f8:d0:e1:6e:82:26:38:bc:d3: 39:43:4b:13:2a:52:45:c6:23:cb:eb:12:dc:be:6c:97:1b:a5: 08:ef:1f:b6:d4:3c:49:8e:b7:d0:b9:ea:6b:a1:8c:5f:6c:1c: 69:c8:cb:1f:29:9b:5d:9f:5b:dc:45:20:92:54:7e:c1:fc:96: 03:00:13:b3:12:a8:80:7e:21:48:df:ef:8c:ca:2c:7c:f2:bf: c3:d1:b8:4d:b1:1c:e9:4a:3d:f2:bc:fa:84:5f:95:15:00:24: 59:bf:ef:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7DIbUc3wgGU0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzZkODU3MDktYTkzMi00NmQ1LTk5ODYtMzBlZDRlNjAwNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGwkKippfR4hcX5QR7i9hTozhKcL15kMaVv l1KXOkTe3fRBt0tk7TPKYwfkFhd+yalgfjBbR4u7os2j3hmusAZBZunwPXLn9cC1 1Y0k8aiEAZk7/Ey9MxMDgx+sBOr1nhA5GUzK/j/gIPMflDkhpyfZQK2FjP6g5QO/ xnAka/RpHQ5d/knmRCBeH6vc7cv63ZrhIZ6KD9mqvx4MdX/SMsi46GuVykJ5AWNM 3Pecfrfa4nsOozxleXBzGRfFuHtN5FbHe1qjEfr4yo3NCgh5dV3RBHOjW+jgh/9h pfimyT2TC+hef6r0pKzHcoud60c+IXWWHuFpPfxZwMivYAT4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpl5af8MEotpzRBVCWCN+RewQa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAHnV76Dlz+uxhB0ZNS4XchhHQcWZDdckX2atSbzNF3LUcCwcpOD0sZ 24jU396rAhs6PnNLKzSOZA28FrZt5l8z56mb3fgSoVcZa2JndUFa+B2O7huVK4NK Mvfg+KvDZ06MBgi7tOurX96Glysih1FdRa7XQ2cMAHir6eN92Osb2Bgu1vmqzpre gz1iUVnml00+6fugQYvCv/jQ4W6CJji80zlDSxMqUkXGI8vrEty+bJcbpQjvH7bU PEmOt9C56muhjF9sHGnIyx8pm12fW9xFIJJUfsH8lgMAE7MSqIB+IUjf74zKLHzy v8PRuE2xHOlKPfK8+oRflRUAJFm/76o= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:30 2026 by rpki-client