$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa File: 6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa (raw, json) Hash identifier: /vCvsahBoQbJLjYjfoNqVScNeiWT0uEI7GUFqz/wca4= Subject key identifier: 09:76:62:7A:86:8F:44:FC:11:96:08:49:9B:14:37:94:D3:C8:8D:EF Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DBBA04EE246335F0368E68530 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 25645 IP address blocks: 137.239.214.0/24 maxlen: 24 209.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:4e:e2:46:33:5f:03:68:e6:85:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=ea6de10f-4643-4d11-8aca-3f0b0c05229b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:ad:c3:ad:88:7c:2d:77:cf:d4:06:53:26: 5c:be:a2:89:f7:a2:d9:5c:d1:b3:a6:66:1c:b2:24: 15:69:f8:99:17:17:9d:4e:38:71:37:13:29:28:af: 0d:3b:bf:2b:6b:91:41:1a:34:f2:c4:e8:a0:5d:85: dd:ca:65:c1:24:a0:16:07:3c:22:36:8b:36:2c:dc: 63:7a:7a:a8:c9:0f:5e:96:70:80:14:77:fb:78:56: 2f:2e:3d:81:e0:c2:ef:07:61:55:74:dd:17:33:b4: ac:3f:69:5e:a2:7b:53:f1:47:3a:78:f5:41:35:97: 94:5e:80:c1:95:08:be:b7:6d:04:0e:46:52:fd:0b: 5e:7f:22:3d:0c:f6:d4:8e:68:7f:4b:a0:c8:ff:d8: db:8c:11:aa:c6:21:b7:85:73:0c:38:5b:bd:7e:2d: 91:01:a5:f7:d1:76:f2:8a:0c:8a:55:aa:b2:d6:58: be:75:d0:f1:3a:59:de:87:bb:2a:09:e5:02:4c:0b: b6:b4:18:39:70:77:8b:da:16:de:f5:71:01:6c:af: 65:24:d7:66:78:db:d3:a9:e8:db:7c:18:9e:3f:3d: c2:63:ad:6a:b3:24:44:50:49:28:74:e9:ff:92:29: a2:7f:b9:8f:ce:b1:9e:59:b5:15:4d:05:06:2d:ac: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:62:7A:86:8F:44:FC:11:96:08:49:9B:14:37:94:D3:C8:8D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 209.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:21:a1:e1:aa:c2:1a:02:ff:9c:fd:19:ae:e5:16:f0:4d:14: f6:40:50:a0:64:ee:94:d4:98:05:2d:ed:f8:13:07:44:5a:f9: b6:3e:4c:7b:bd:26:76:42:53:93:5b:8b:42:ec:c7:0c:75:5a: c2:0d:a7:d3:ee:6a:11:d8:ce:56:5d:61:42:9e:6b:e7:d9:71: ba:e6:72:ce:82:71:f1:ad:77:4b:c3:01:10:76:d3:51:8c:59: 5e:9e:c7:29:94:4a:55:9e:2c:21:0c:0c:18:64:a0:bf:a5:c5: 58:44:22:c3:01:8c:ac:97:3c:0b:4d:7c:fb:dc:91:15:d1:28: 6d:11:fa:42:07:e9:3b:5b:aa:40:3a:62:1d:1f:db:a2:8e:3e: 83:bc:f2:01:e0:f9:dd:82:09:56:e3:96:b5:1b:d2:fb:40:67: 6f:5b:5b:c4:6e:12:a5:60:98:21:89:fb:9d:70:90:a2:ca:b2: 60:89:e9:c7:9d:52:97:3b:84:79:b1:c8:3b:12:c2:6e:cc:0f: c6:20:f9:ab:a2:dd:10:25:55:7d:25:e5:09:8e:ac:79:66:a5: 80:63:e8:43:9c:60:de:9e:93:20:56:38:88:71:16:b5:0f:5f: 75:bc:44:96:b8:73:c9:fd:24:94:df:ef:a7:eb:10:83:2b:66: f6:15:c6:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE27oE7iRjNfA2jmhTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk ZWE2ZGUxMGYtNDY0My00ZDExLThhY2EtM2YwYjBjMDUyMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidatw62IfC13z9QGUyZcvqKJ96LZXNGzpmYc siQVafiZFxedTjhxNxMpKK8NO78ra5FBGjTyxOigXYXdymXBJKAWBzwiNos2LNxj enqoyQ9elnCAFHf7eFYvLj2B4MLvB2FVdN0XM7SsP2leontT8Uc6ePVBNZeUXoDB lQi+t20EDkZS/QtefyI9DPbUjmh/S6DI/9jbjBGqxiG3hXMMOFu9fi2RAaX30Xby igyKVaqy1li+ddDxOlneh7sqCeUCTAu2tBg5cHeL2hbe9XEBbK9lJNdmeNvTqejb fBiePz3CY61qsyREUEkodOn/kimif7mPzrGeWbUVTQUGLazm4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAl2YnqGj0T8EZYISZsUN5TTyI3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNjkxNWNiNTEtYjg1MS0z YmY1LWFhZjUtYTg5ZWEzOWFkNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAie/WAwQA 0bL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC4hoeGqwhoC/5z9Ga7lFvBNFPZAUKBk7pTUmAUt7fgTB0Ra +bY+THu9JnZCU5Nbi0Lsxwx1WsINp9PuahHYzlZdYUKea+fZcbrmcs6CcfGtd0vD ARB201GMWV6exymUSlWeLCEMDBhkoL+lxVhEIsMBjKyXPAtNfPvckRXRKG0R+kIH 6TtbqkA6Yh0f26KOPoO88gHg+d2CCVbjlrUb0vtAZ29bW8RuEqVgmCGJ+51wkKLK smCJ6cedUpc7hHmxyDsSwm7MD8Yg+aui3RAlVX0l5QmOrHlmpYBj6EOcYN6ekyBW OIhxFrUPX3W8RJa4c8n9JJTf76frEIMrZvYVxpM= -----END CERTIFICATE-----Generated at Wed May 13 12:11:40 2026 by rpki-client