$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa File: 9929da4e-946a-3592-bfea-22b4659f8ef7.roa (raw, json) Hash identifier: g0zMYuNXq1C5jVRC7EsTuET2vtSuYpMpTcxB3pJ/Vhk= Subject key identifier: 67:93:47:EC:FE:8D:2E:1B:F4:C5:04:5D:DE:19:0E:EF:AD:5E:82:9B Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DBA3AF9729034581913544180 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 25645 IP address blocks: 137.239.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:f9:72:90:34:58:19:13:54:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=e823765e-ce48-4677-86b8-d7d82d5d4f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:07:19:41:51:70:c7:9b:cc:6c:e3:bf:b8: 27:31:86:ee:e4:6a:b0:c5:7a:18:ff:34:35:07:32: bf:6d:87:84:82:ee:a6:3f:4d:d0:3d:27:16:71:61: 94:bd:f3:c0:f2:f9:ee:42:08:c4:f8:9d:5a:0d:7b: 2e:eb:3b:de:60:d7:73:5b:75:ee:bb:ac:bd:6b:70: 71:d2:80:c2:cd:13:48:93:55:08:b8:db:af:5c:39: 4b:0b:ae:1c:27:bf:d4:49:0d:8e:71:46:11:0e:f5: c8:fd:4e:46:77:43:11:52:e1:e5:e9:c1:2b:1e:00: 12:e9:63:ff:50:59:54:15:69:a5:c5:95:3e:8d:b8: 2e:d0:4b:5b:9f:62:79:ea:29:75:2b:cc:4a:b6:b1: b2:fc:69:ea:a8:92:f3:64:3a:3d:bb:f2:44:b8:98: 40:f5:e0:d3:1b:3c:d5:9e:26:df:b9:3e:4e:59:8f: 77:db:48:7d:ef:79:50:f5:17:3b:21:da:af:98:0f: 04:43:64:a0:9e:93:2e:f1:fd:fd:05:f5:7b:10:b9: d8:14:6a:a3:68:9b:fe:8f:35:a2:66:20:9f:59:c4: 6d:63:d3:1f:1b:f0:42:28:f6:3f:29:69:3b:bb:91: c1:03:dc:1b:b0:ae:cb:78:65:12:39:ae:f7:19:58: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:93:47:EC:FE:8D:2E:1B:F4:C5:04:5D:DE:19:0E:EF:AD:5E:82:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f4:6a:cd:02:58:5e:52:d0:e6:33:cf:41:80:f2:20:e2:f5: c9:44:a8:81:41:b4:16:37:c1:8b:d8:cc:01:0d:b4:1e:3e:2c: 29:3b:84:88:e5:da:20:05:ee:25:ee:f6:00:65:71:87:83:1c: 53:23:db:b3:cd:f8:5e:52:ed:ac:ae:33:38:53:21:f2:0b:05: 47:72:90:82:b8:0a:03:86:d2:c7:e8:af:fd:61:1e:f3:de:33: 06:f3:86:14:4a:3c:ea:46:f1:05:55:19:8a:e3:cd:7b:7f:f0: e0:27:0d:df:8d:fc:5c:c8:21:d5:22:6e:80:26:ef:dc:f5:52: 44:27:30:2c:ad:e5:4f:79:76:5b:5c:17:c0:64:31:82:f6:8a: c0:73:90:59:f4:ca:13:ad:eb:7b:d4:d1:a7:c9:99:30:d4:f7: 79:09:5a:3e:c7:65:0f:f6:fe:06:a1:b6:e0:6c:6c:5d:eb:9f: 45:c5:86:2f:e5:ff:f7:f2:b3:0f:52:a3:2c:ac:d8:98:d2:30: ce:0d:49:24:d6:1c:75:ad:46:b0:0b:62:10:f4:7a:00:8b:ac: 0b:46:49:3b:80:49:4b:66:cb:af:af:fc:98:e4:53:fe:85:3e: 64:24:7d:d0:a4:c4:47:75:ef:75:a7:c6:15:00:89:5e:ce:a2: dc:0e:03:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvlykDRYGRNUQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk ZTgyMzc2NWUtY2U0OC00Njc3LTg2YjgtZDdkODJkNWQ0Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMIHGUFRcMebzGzjv7gnMYbu5GqwxXoY/zQ1 BzK/bYeEgu6mP03QPScWcWGUvfPA8vnuQgjE+J1aDXsu6zveYNdzW3Xuu6y9a3Bx 0oDCzRNIk1UIuNuvXDlLC64cJ7/USQ2OcUYRDvXI/U5Gd0MRUuHl6cErHgAS6WP/ UFlUFWmlxZU+jbgu0Etbn2J56il1K8xKtrGy/GnqqJLzZDo9u/JEuJhA9eDTGzzV nibfuT5OWY9320h973lQ9Rc7IdqvmA8EQ2SgnpMu8f39BfV7ELnYFGqjaJv+jzWi ZiCfWcRtY9MfG/BCKPY/KWk7u5HBA9wbsK7LeGUSOa73GVhirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeTR+z+jS4b9MUEXd4ZDu+tXoKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOTkyOWRhNGUtOTQ2YS0z NTkyLWJmZWEtMjJiNDY1OWY4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL0as0CWF5S0OYzz0GA8iDi9clEqIFBtBY3wYvYzAENtB4+LCk7hIjl 2iAF7iXu9gBlcYeDHFMj27PN+F5S7ayuMzhTIfILBUdykIK4CgOG0sfor/1hHvPe MwbzhhRKPOpG8QVVGYrjzXt/8OAnDd+N/FzIIdUiboAm79z1UkQnMCyt5U95dltc F8BkMYL2isBzkFn0yhOt63vU0afJmTDU93kJWj7HZQ/2/gahtuBsbF3rn0XFhi/l //fysw9Soyys2JjSMM4NSSTWHHWtRrALYhD0egCLrAtGSTuASUtmy6+v/JjkU/6F PmQkfdCkxEd173WnxhUAiV7OotwOAzc= -----END CERTIFICATE-----Generated at Wed May 13 09:59:24 2026 by rpki-client