$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa File: 8e420350-e2b0-3816-8128-47e843fb8fae.roa (raw, json) Hash identifier: sDH2Tneh7oOW6gpiQO/WuoWL4hf5SJXSnwsqh9GSNzs= Subject key identifier: C1:09:D5:D8:AD:D8:EA:A2:47:74:71:09:69:68:AB:9C:AD:3A:65:65 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DA11ABEB77E83A98501AADB80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 33059 IP address blocks: 137.239.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:be:b7:7e:83:a9:85:01:aa:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=f2912528-5d67-448b-8010-6e9088adda0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:46:b1:84:4a:0e:3c:46:15:f9:fc:5a:fa: b8:cc:9a:6c:82:9c:85:11:b3:56:c3:4e:06:49:07: 91:ad:86:46:61:da:6e:ff:de:d5:e3:ec:2d:6c:69: 78:2e:26:31:d9:97:8f:a4:6c:19:48:1a:55:71:44: 3f:c5:34:26:d9:0d:85:28:92:ef:e5:53:e7:be:fb: 9c:b7:1b:6b:b4:40:ce:27:19:c5:03:c5:fb:75:76: 9e:37:f3:41:a8:71:f4:db:de:4c:e3:a9:ec:61:a3: a3:f3:b3:ea:78:37:17:03:71:04:3d:c6:6a:9e:79: 75:6e:7f:fd:08:2a:06:0a:f8:f7:11:60:03:87:4a: c0:9f:7d:83:4d:81:8b:c1:68:d4:b2:cc:09:37:fd: af:c3:e9:64:1e:e0:ce:5a:bb:26:4b:f7:7b:64:7d: c7:fd:1e:e3:5d:f9:b7:a7:cf:da:05:c6:c4:07:9c: a8:7b:bd:79:22:89:74:64:e7:55:b1:60:be:6e:e4: af:e8:31:3c:e7:23:61:0c:57:06:9c:1d:c3:39:da: 9b:13:c1:56:65:56:11:22:ab:a6:bd:52:53:be:50: 4c:16:63:2b:44:82:f2:f3:31:2e:5d:7f:59:84:9c: ce:0f:ec:3f:fb:ec:49:bb:c9:4b:44:2f:b1:aa:8a: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:D5:D8:AD:D8:EA:A2:47:74:71:09:69:68:AB:9C:AD:3A:65:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e6:82:cb:c1:76:a7:10:19:c4:a0:fc:99:19:45:93:c3:79: 5d:ec:42:2d:68:b9:d2:ab:7a:66:7b:9e:e5:91:1f:3d:94:2d: 8c:19:7a:a0:e0:af:d2:67:97:78:b1:a7:f7:e9:bd:0a:eb:48: 1d:61:21:4f:c0:91:b7:ae:16:44:e5:94:6e:7e:e5:94:cc:13: 5d:8e:69:ad:13:4b:1a:10:2e:92:ea:66:b8:a2:a7:0a:4b:a7: 21:b7:a1:e6:2f:b9:25:43:46:19:72:2b:ba:74:a4:6a:f8:3d: e0:c6:95:c5:03:77:01:89:de:be:50:e2:3f:15:81:0d:cf:aa: fd:67:a9:35:9b:1c:61:6f:31:49:0b:8d:0e:8a:6e:ef:cc:a3: c5:b9:7e:ea:f2:26:b8:e0:d3:76:b8:b0:d5:88:63:a2:be:6e: 70:2e:2c:52:f7:40:7f:97:0b:37:a4:47:f3:cd:1e:8b:ba:30: cb:03:5e:99:a4:4a:43:5d:62:36:97:fd:ac:f4:75:89:cf:1b: a4:44:69:c7:4f:25:38:1f:b9:f7:e2:9d:89:61:6a:49:08:db: aa:b1:af:81:1f:02:43:bc:5f:e5:eb:55:33:aa:86:36:00:96: 30:22:6d:2a:a7:b3:d8:d3:2a:30:b4:3f:9f:86:38:1f:69:7d: 38:15:35:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGr63foOphQGq24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjI5MTI1MjgtNWQ2Ny00NDhiLTgwMTAtNmU5MDg4YWRkYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcRGsYRKDjxGFfn8Wvq4zJpsgpyFEbNWw04G SQeRrYZGYdpu/97V4+wtbGl4LiYx2ZePpGwZSBpVcUQ/xTQm2Q2FKJLv5VPnvvuc txtrtEDOJxnFA8X7dXaeN/NBqHH0295M46nsYaOj87PqeDcXA3EEPcZqnnl1bn/9 CCoGCvj3EWADh0rAn32DTYGLwWjUsswJN/2vw+lkHuDOWrsmS/d7ZH3H/R7jXfm3 p8/aBcbEB5yoe715Iol0ZOdVsWC+buSv6DE85yNhDFcGnB3DOdqbE8FWZVYRIqum vVJTvlBMFmMrRILy8zEuXX9ZhJzOD+w/++xJu8lLRC+xqoo2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJ1dit2OqiR3RxCWloq5ytOmVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOGU0MjAzNTAtZTJiMC0z ODE2LTgxMjgtNDdlODQzZmI4ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/mgsvBdqcQGcSg/JkZRZPDeV3sQi1oudKremZ7nuWRHz2ULYwZeqDg r9Jnl3ixp/fpvQrrSB1hIU/AkbeuFkTllG5+5ZTME12Oaa0TSxoQLpLqZriipwpL pyG3oeYvuSVDRhlyK7p0pGr4PeDGlcUDdwGJ3r5Q4j8VgQ3Pqv1nqTWbHGFvMUkL jQ6Kbu/Mo8W5furyJrjg03a4sNWIY6K+bnAuLFL3QH+XCzekR/PNHou6MMsDXpmk SkNdYjaX/az0dYnPG6REacdPJTgfuffinYlhakkI26qxr4EfAkO8X+XrVTOqhjYA ljAibSqns9jTKjC0P5+GOB9pfTgVNbc= -----END CERTIFICATE-----Generated at Wed May 13 11:09:36 2026 by rpki-client