$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa File: 7cf648ea-5883-37ed-91f7-e62410a00147.roa (raw, json) Hash identifier: K1Q8D997PKlKVmwozZOs5kMwQIxZ2++wx8WEoLdWaow= Subject key identifier: 24:9B:A4:37:C4:C6:47:10:2B:FB:06:2E:EB:BD:3B:D5:3F:75:52:B3 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B477C76DA488F8AEE06701A3C Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 33059 IP address blocks: 137.239.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:76:da:48:8f:8a:ee:06:70:1a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=0af0b9e8-8642-44f1-8623-dda59e2778b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:18:52:e4:52:5c:5e:bd:0a:34:94:72:87: 1f:70:87:5a:26:de:ed:4a:da:0b:fc:c1:62:16:2b: 7f:4f:37:4c:27:7b:4b:41:bf:3f:ec:a7:08:c0:58: fb:87:6f:42:e8:36:35:1e:02:27:b7:dd:e9:42:f7: a1:5e:7b:41:0a:63:61:f8:f8:b7:9f:73:9e:76:fc: aa:4f:92:cb:c3:23:3d:6a:c7:89:05:97:92:75:41: b8:30:51:a8:cf:83:c6:74:85:f4:bb:06:cc:7e:46: 93:df:a3:1b:10:9b:82:bd:4c:26:1b:5c:2b:91:e0: d5:50:61:46:e6:85:41:57:64:31:51:d8:e5:a3:15: eb:98:03:bb:0b:f8:1c:82:34:29:c9:c4:94:53:d2: a4:61:96:90:f4:53:15:8a:ff:be:57:5a:bf:f7:e1: 43:62:5a:8f:92:b1:75:60:aa:9d:79:6a:0e:86:7f: 2d:b4:df:bf:d4:2f:f3:39:fb:94:71:f8:75:50:20: 1e:84:21:76:f0:d7:ab:54:7b:97:4b:dd:d4:d8:f0: da:ca:9a:0a:a3:43:2a:ae:4a:38:fb:fc:0b:82:57: 37:56:c2:70:da:61:a0:ec:f4:e6:56:50:0b:68:1a: 6b:4b:62:88:09:d1:28:7b:89:40:2e:fb:a7:26:39: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9B:A4:37:C4:C6:47:10:2B:FB:06:2E:EB:BD:3B:D5:3F:75:52:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7cf648ea-5883-37ed-91f7-e62410a00147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e7:31:c2:ef:9b:b5:ee:d2:84:a2:5e:a0:24:f1:0b:bb:97: 80:18:2d:d8:b8:e9:74:8b:85:08:5e:f9:d0:0b:e9:ef:cf:3b: 50:0b:04:40:63:3e:be:29:ac:2a:90:2c:ed:80:90:75:8f:9f: d8:ac:46:88:26:c7:06:de:fa:63:c5:b7:8f:4b:fd:7b:f1:a8: f0:7d:a5:26:50:8e:39:6d:9e:3a:8b:ce:60:79:52:b3:e0:8f: 62:26:81:75:67:54:f0:10:b7:64:ce:1b:73:e3:85:9f:36:ff: 93:e7:96:41:1b:23:f3:77:1f:26:1a:61:34:fd:bc:9c:74:05: f6:8a:33:b9:20:ac:34:e1:df:76:ac:50:68:a7:f3:ef:60:54: 95:d0:79:9e:49:1b:7c:2d:21:f9:6f:d0:28:37:67:43:05:77: c8:ff:9f:ae:81:5f:48:52:5f:5c:cb:b4:99:1c:e9:8a:83:16: e8:e7:6d:e3:83:04:fa:fc:cc:2e:7a:bb:37:f3:bd:67:0e:99: 96:b6:ca:04:72:6e:a0:bf:78:1e:78:bf:b0:eb:79:42:3c:f9: 02:dc:de:e1:40:e0:32:8e:c0:71:f8:ac:bc:eb:66:b7:62:c6: d1:ba:fd:5f:b7:22:60:b4:4f:c3:06:99:7b:24:ce:ae:d8:51: 07:a4:1c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHbaSI+K7gZwGjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MGFmMGI5ZTgtODY0Mi00NGYxLTg2MjMtZGRhNTllMjc3OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33kYUuRSXF69CjSUcocfcIdaJt7tStoL/MFi Fit/TzdMJ3tLQb8/7KcIwFj7h29C6DY1HgInt93pQvehXntBCmNh+Pi3n3Oedvyq T5LLwyM9aseJBZeSdUG4MFGoz4PGdIX0uwbMfkaT36MbEJuCvUwmG1wrkeDVUGFG 5oVBV2QxUdjloxXrmAO7C/gcgjQpycSUU9KkYZaQ9FMViv++V1q/9+FDYlqPkrF1 YKqdeWoOhn8ttN+/1C/zOfuUcfh1UCAehCF28NerVHuXS93U2PDaypoKo0Mqrko4 +/wLglc3VsJw2mGg7PTmVlALaBprS2KICdEoe4lALvunJjk+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSbpDfExkcQK/sGLuu9O9U/dVKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvN2NmNjQ4ZWEtNTg4My0z N2VkLTkxZjctZTYyNDEwYTAwMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDnMcLvm7Xu0oSiXqAk8Qu7l4AYLdi46XSLhQhe+dAL6e/PO1ALBEBj Pr4prCqQLO2AkHWPn9isRogmxwbe+mPFt49L/XvxqPB9pSZQjjltnjqLzmB5UrPg j2ImgXVnVPAQt2TOG3PjhZ82/5PnlkEbI/N3HyYaYTT9vJx0BfaKM7kgrDTh33as UGin8+9gVJXQeZ5JG3wtIflv0Cg3Z0MFd8j/n66BX0hSX1zLtJkc6YqDFujnbeOD BPr8zC56uzfzvWcOmZa2ygRybqC/eB54v7DreUI8+QLc3uFA4DKOwHH4rLzrZrdi xtG6/V+3ImC0T8MGmXskzq7YUQekHAI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:45 2025 by rpki-client