$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa File: 6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa (raw, json) Hash identifier: sbGqO6sV8dhXXEqhBRkKXxpqzOhxipoA01pKTeRzHys= Subject key identifier: DD:FC:F2:7D:BA:2C:32:E5:19:83:10:20:69:79:00:D6:B6:48:85:66 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F3E47E3C29300858E4E499700 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 25645 IP address blocks: 137.239.214.0/24 maxlen: 24 209.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e3:c2:93:00:85:8e:4e:49:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=17c57bdc-0a17-4e68-81fc-3d321ec8daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:8c:70:82:01:d3:93:36:3f:05:c9:84:25: 26:dc:10:00:6e:50:38:77:27:bd:fc:6a:08:e3:6c: d5:eb:d0:e0:41:57:97:41:56:78:09:e7:9b:85:60: 78:e3:57:ce:7f:98:1a:1b:c2:6c:1c:bb:a3:e7:4e: a5:83:b8:05:79:32:12:05:4b:e2:1f:3b:c0:73:2f: 64:8f:b3:55:81:3c:59:02:1f:21:b6:e1:e9:7f:1b: 06:4a:7d:8e:87:43:db:bf:26:0a:9b:da:10:3f:3e: 1e:f0:6a:eb:4b:fd:c2:bc:c4:49:81:2c:c6:6e:d7: 6a:e5:0e:ba:39:63:89:33:18:5b:a9:83:0a:0c:7d: c5:46:e6:1a:a8:ef:c1:33:03:10:52:98:8d:f1:2d: ce:98:5f:b1:00:df:28:f9:29:c8:98:fc:ac:dd:3f: 07:3f:44:b2:7b:56:8d:c1:34:ba:9b:5f:6d:8b:4f: 8e:9f:85:cd:74:05:2f:de:b1:9d:19:e9:be:f0:92: 8a:e8:b6:4c:e8:73:22:7a:34:96:84:f5:b2:f6:53: 32:e8:e3:d8:15:10:83:5a:ef:2f:a0:f1:f2:4a:81: dd:2c:30:e7:9f:f9:40:c0:36:5f:37:3c:1f:65:6f: b5:59:da:3c:7d:88:d9:19:d3:71:9f:56:ca:5a:02: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:F2:7D:BA:2C:32:E5:19:83:10:20:69:79:00:D6:B6:48:85:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 209.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f5:13:12:ed:40:b4:07:01:77:91:bf:c9:99:cd:34:16:11: f9:15:5f:39:7d:84:9c:67:20:ad:cb:e0:64:c4:45:4d:c6:e2: f7:0c:9a:c0:f7:1d:b8:53:11:6b:a3:92:24:79:70:15:cc:13: 18:b9:65:a8:4b:be:4e:86:ab:1f:a1:89:1d:63:be:45:4a:97: fe:f8:42:61:04:23:54:00:b9:0e:1d:8d:7e:aa:a3:68:b2:38: 02:fb:77:ba:ea:37:3b:f1:c4:70:71:a2:16:fb:d5:38:c8:8a: b9:7a:8b:97:87:5e:13:e6:1d:7e:1a:05:d2:c3:bf:28:45:ce: 1a:87:75:c8:10:a3:ab:91:4b:70:a4:15:c7:78:2b:d8:6a:b3: f2:24:96:4f:71:47:87:6d:ba:72:22:b1:b7:bb:8c:98:77:33: f1:55:08:46:6f:df:fd:1a:51:bd:a3:0c:b2:a8:af:f6:22:5d: 8e:1a:dd:0e:80:96:10:9f:30:f8:2e:43:7e:01:49:c1:56:5a: 02:07:3a:e0:9b:ed:0b:9c:5b:15:e9:fe:c3:95:60:ac:8c:36: 80:7a:42:d2:4b:14:f5:40:fd:ed:b9:be:ad:62:bd:92:6d:1b: 5c:22:6e:85:2e:13:6c:15:24:fe:32:4e:4a:da:a4:eb:d7:e7: 68:45:1a:f6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8+R+PCkwCFjk5JlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MTdjNTdiZGMtMGExNy00ZTY4LTgxZmMtM2QzMjFlYzhkYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0OMcIIB05M2PwXJhCUm3BAAblA4dye9/GoI 42zV69DgQVeXQVZ4CeebhWB441fOf5gaG8JsHLuj506lg7gFeTISBUviHzvAcy9k j7NVgTxZAh8htuHpfxsGSn2Oh0PbvyYKm9oQPz4e8GrrS/3CvMRJgSzGbtdq5Q66 OWOJMxhbqYMKDH3FRuYaqO/BMwMQUpiN8S3OmF+xAN8o+SnImPys3T8HP0Sye1aN wTS6m19ti0+On4XNdAUv3rGdGem+8JKK6LZM6HMiejSWhPWy9lMy6OPYFRCDWu8v oPHySoHdLDDnn/lAwDZfNzwfZW+1Wdo8fYjZGdNxn1bKWgJjRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN388n26LDLlGYMQIGl5ANa2SIVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNjkxNWNiNTEtYjg1MS0z YmY1LWFhZjUtYTg5ZWEzOWFkNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAie/WAwQA 0bL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH/1ExLtQLQHAXeRv8mZzTQWEfkVXzl9hJxnIK3L4GTERU3G 4vcMmsD3HbhTEWujkiR5cBXMExi5ZahLvk6Gqx+hiR1jvkVKl/74QmEEI1QAuQ4d jX6qo2iyOAL7d7rqNzvxxHBxohb71TjIirl6i5eHXhPmHX4aBdLDvyhFzhqHdcgQ o6uRS3CkFcd4K9hqs/Iklk9xR4dtunIisbe7jJh3M/FVCEZv3/0aUb2jDLKor/Yi XY4a3Q6AlhCfMPguQ34BScFWWgIHOuCb7QucWxXp/sOVYKyMNoB6QtJLFPVA/e25 vq1ivZJtG1wiboUuE2wVJP4yTkrapOvX52hFGvY= -----END CERTIFICATE-----Generated at Tue Oct 6 11:00:14 2026 by rpki-client