$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: KqZtRsyqNbrDejHRlcIa5iej/Orz5LTVEN44snaXhjY= Subject key identifier: B9:39:64:A6:BB:8D:14:E3:AD:18:4B:B3:F5:DB:6D:50:A3:E4:05:EB Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DA11ABE53C00D1DC43FD90180 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:be:53:c0:0d:1d:c4:3f:d9:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=e304731b-822f-4557-a814-37f5712bf0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:5e:7f:a9:79:34:61:15:ef:92:53:0b:10: 3e:e2:e2:7e:6f:b0:73:a8:93:6c:12:dc:89:bf:cf: 25:f2:97:84:c8:f9:94:a7:98:9e:22:88:f8:ef:9a: e6:ef:9d:63:b0:f6:8c:e3:d2:7b:b5:b8:dc:8e:84: 2d:1f:c1:36:4c:f6:cd:a8:3e:48:9d:2a:d4:65:00: fa:38:e5:64:21:90:7a:c9:e6:13:13:9c:d6:f5:b4: ea:69:41:3b:96:c2:52:45:58:18:10:33:d7:5f:c1: 37:c6:c0:af:09:8d:94:5e:cb:7b:fd:9e:a3:34:d7: a1:3d:30:91:6b:fb:c5:42:f7:dd:46:d1:8a:3a:3d: 8e:43:f6:2d:0f:3a:a8:fb:43:11:ad:1c:f0:8e:81: f6:61:97:60:7e:1d:64:5b:59:e1:13:d5:e3:29:c9: 42:d9:59:de:95:47:6c:61:f4:fd:ae:39:c5:26:c6: 8e:7b:da:db:c0:3b:0b:36:01:95:88:b0:dd:75:5e: 0b:ec:97:b7:11:cf:92:0b:6c:4b:47:c4:dc:68:ba: 61:4b:bc:79:df:b9:6b:6c:d4:e1:47:ea:13:25:7a: 9a:a3:ab:13:04:c0:d8:16:ea:90:45:4f:f3:80:49: 88:c0:cf:c2:22:bb:01:00:ab:95:e2:fd:3c:96:30: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:64:A6:BB:8D:14:E3:AD:18:4B:B3:F5:DB:6D:50:A3:E4:05:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0d:0b:cf:3c:52:dd:8f:16:f6:67:83:66:00:93:d6:50:fb: c0:00:94:bd:ed:c2:3c:0e:cf:03:0e:f1:b9:6e:57:33:e7:62: 8a:9f:7f:17:f8:62:a4:d9:0e:ad:51:40:5a:fd:7e:0a:e2:5a: 72:ed:40:2e:74:96:cd:0d:d9:22:36:bf:ef:bf:bf:a1:a9:1e: d8:ab:a7:7e:69:bc:72:c1:ca:4f:eb:d4:34:91:6b:e3:2a:27: c0:f7:ac:a3:80:f2:f4:2d:b9:61:eb:e7:21:bd:f3:e3:e7:97: 37:60:29:8b:86:fe:be:b0:dc:4d:12:9e:90:73:29:85:83:f4: 3b:8b:55:0c:d9:a7:14:d1:6e:f8:5d:b3:91:17:7c:ff:1a:08: d1:d3:96:86:f9:13:90:e4:49:1e:85:c2:b0:ef:12:85:e7:7f: b9:cf:2f:32:b7:f3:0b:94:de:fe:14:70:28:e5:78:ab:51:51: 75:41:47:34:0f:b4:fa:58:e1:7b:24:58:01:c2:12:f1:db:26: 97:78:29:81:46:8e:73:45:e3:33:41:a3:63:24:d7:4b:b1:46: 4c:84:34:79:fc:1d:33:5e:00:47:5a:aa:0b:d6:e5:e7:c5:a0: 01:98:65:b9:cc:1b:5a:45:bd:3f:6f:c3:4b:64:bf:76:a3:7b: f3:2e:66:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGr5TwA0dxD/ZAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZTMwNDczMWItODIyZi00NTU3LWE4MTQtMzdmNTcxMmJmMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Fef6l5NGEV75JTCxA+4uJ+b7BzqJNsEtyJ v88l8peEyPmUp5ieIoj475rm751jsPaM49J7tbjcjoQtH8E2TPbNqD5InSrUZQD6 OOVkIZB6yeYTE5zW9bTqaUE7lsJSRVgYEDPXX8E3xsCvCY2UXst7/Z6jNNehPTCR a/vFQvfdRtGKOj2OQ/YtDzqo+0MRrRzwjoH2YZdgfh1kW1nhE9XjKclC2VnelUds YfT9rjnFJsaOe9rbwDsLNgGViLDddV4L7Je3Ec+SC2xLR8TcaLphS7x537lrbNTh R+oTJXqao6sTBMDYFuqQRU/zgEmIwM/CIrsBAKuV4v08ljBPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk5ZKa7jRTjrRhLs/XbbVCj5AXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKINC888Ut2PFvZng2YAk9ZQ+8AAlL3twjwOzwMO8bluVzPnYoqffxf4 YqTZDq1RQFr9fgriWnLtQC50ls0N2SI2v++/v6GpHtirp35pvHLByk/r1DSRa+Mq J8D3rKOA8vQtuWHr5yG98+PnlzdgKYuG/r6w3E0SnpBzKYWD9DuLVQzZpxTRbvhd s5EXfP8aCNHTlob5E5DkSR6FwrDvEoXnf7nPLzK38wuU3v4UcCjleKtRUXVBRzQP tPpY4XskWAHCEvHbJpd4KYFGjnNF4zNBo2Mk10uxRkyENHn8HTNeAEdaqgvW5efF oAGYZbnMG1pFvT9vw0tkv3aje/MuZpw= -----END CERTIFICATE-----Generated at Wed May 13 09:59:28 2026 by rpki-client