$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa File: 7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json) Hash identifier: xJkqXP2rVI4/po16X4v8xP43hRJdBUtSRBfoLU5gnuc= Subject key identifier: 73:EA:FE:26:E3:6E:41:86:E1:4E:B3:F2:38:BB:58:03:73:EB:37:FC Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B715CBC2269318F1CE573BFA0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 25645 IP address blocks: 137.239.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bc:22:69:31:8f:1c:e5:73:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=49bf1407-094d-494c-8e38-ab387baed244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:07:b4:b3:80:69:bb:1f:b4:23:71:e7:4c: 9f:4f:d6:8f:75:09:83:69:59:5c:a2:15:bb:ec:a9: b0:13:36:b8:32:cc:da:3d:1b:bc:34:b2:f3:47:45: 02:f7:17:29:14:52:35:4a:f7:6c:a7:95:1e:ef:38: b7:87:d5:61:d5:00:5b:8f:e5:a4:21:91:7e:67:de: 1e:8c:d1:3a:56:8c:2a:2d:fd:cd:f0:62:5c:cf:8c: 75:16:13:21:7a:a6:86:ba:89:82:c9:97:82:73:1b: 5e:6f:f4:d8:9d:f3:10:f4:84:2e:57:53:9a:74:b1: bd:22:09:d6:b3:3e:85:76:7c:8d:5d:d9:0c:3f:7d: 1a:65:4d:e1:3d:34:69:d4:18:9a:50:60:2e:8c:05: 4c:23:16:fb:db:ac:d1:39:8d:b0:c3:09:b9:d3:88: a9:2d:9f:91:15:b1:46:b3:75:45:91:d6:a2:f3:57: 48:8e:8c:0c:b4:8a:ba:09:32:32:9b:b0:40:31:8c: ff:6a:50:4b:c2:ab:39:7c:bc:81:9f:12:25:57:5b: 78:5a:09:9d:0c:83:28:35:48:77:e4:03:fc:46:ee: fe:a8:02:d9:c2:d1:46:cd:d3:dd:b0:66:af:6b:f7: a3:8d:70:06:0f:0b:4c:2d:b4:0d:9d:41:2d:11:d6: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EA:FE:26:E3:6E:41:86:E1:4E:B3:F2:38:BB:58:03:73:EB:37:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:47:d8:a5:9b:e0:5d:16:86:8c:aa:b3:a0:ea:66:2d:2f:b8: b6:fe:27:25:ca:a2:ce:d0:9d:6a:72:28:80:33:f8:5e:25:0e: 67:3b:69:77:84:0e:6e:4b:c3:4e:ab:32:11:c3:7b:f9:59:6c: a1:8f:10:95:51:f5:12:32:d9:d4:65:52:31:81:1f:f5:d6:24: d0:b7:6f:93:63:16:6b:54:90:67:be:5b:ff:fd:4c:b4:f3:11: 70:3b:cc:a2:0a:80:d8:ce:9b:39:89:3a:cd:ab:b4:2c:9c:ee: c8:2b:e7:65:8b:af:5d:58:ca:ff:ab:71:7f:e7:bd:e3:84:ac: 60:05:ce:24:33:03:c7:bd:3b:13:e3:f5:5f:c5:4d:56:96:f1: 56:d0:97:49:de:28:4b:f9:82:e9:b3:1d:8c:e4:dd:25:1d:5a: c7:bc:56:56:37:31:80:51:a1:fa:6d:a0:d3:59:7b:5b:dc:58: 4b:44:9d:4a:e2:9e:aa:51:7e:ac:75:cf:3e:ea:bb:e7:d6:aa: 40:ef:ff:f7:41:61:f2:d3:e2:05:7a:e0:eb:3b:19:77:86:95: 9d:fa:cb:ba:21:3b:1e:69:20:38:06:3d:7c:b5:32:1a:22:5e: ce:d5:6b:1a:61:5e:5b:b0:71:8d:47:1a:e3:2b:73:a0:fc:08: 1b:81:57:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLwiaTGPHOVzv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDliZjE0MDctMDk0ZC00OTRjLThlMzgtYWIzODdiYWVkMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T4HtLOAabsftCNx50yfT9aPdQmDaVlcohW7 7KmwEza4MszaPRu8NLLzR0UC9xcpFFI1Svdsp5Ue7zi3h9Vh1QBbj+WkIZF+Z94e jNE6VowqLf3N8GJcz4x1FhMheqaGuomCyZeCcxteb/TYnfMQ9IQuV1OadLG9IgnW sz6FdnyNXdkMP30aZU3hPTRp1BiaUGAujAVMIxb726zROY2wwwm504ipLZ+RFbFG s3VFkdai81dIjowMtIq6CTIym7BAMYz/alBLwqs5fLyBnxIlV1t4WgmdDIMoNUh3 5AP8Ru7+qALZwtFGzdPdsGava/ejjXAGDwtMLbQNnUEtEdab6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPq/ibjbkGG4U6z8ji7WANz6zf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvN2E4ODgwNDMtYmViMC0z MWM1LTlkMDctOTM2Mzk2YzhkMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJH2KWb4F0Whoyqs6DqZi0vuLb+JyXKos7QnWpyKIAz+F4lDmc7aXeE Dm5Lw06rMhHDe/lZbKGPEJVR9RIy2dRlUjGBH/XWJNC3b5NjFmtUkGe+W//9TLTz EXA7zKIKgNjOmzmJOs2rtCyc7sgr52WLr11Yyv+rcX/nveOErGAFziQzA8e9OxPj 9V/FTVaW8VbQl0neKEv5gumzHYzk3SUdWse8VlY3MYBRofptoNNZe1vcWEtEnUri nqpRfqx1zz7qu+fWqkDv//dBYfLT4gV64Os7GXeGlZ36y7ohOx5pIDgGPXy1Mhoi Xs7VaxphXluwcY1HGuMrc6D8CBuBV/o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:38 2025 by rpki-client