$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json) Hash identifier: tRzEvcJQPCN8DgzOoebwOxxCGtcMaMsRBPZh+bZuGXQ= Subject key identifier: E1:63:24:99:1D:BC:71:DE:9C:FF:96:5D:3C:BE:A6:17:12:5B:F9:71 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584FA1632AC7037C4D28B79F5DE0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 25645 IP address blocks: 137.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2a:c7:03:7c:4d:28:b7:9f:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=d6e07d61-7c1e-41b3-92f4-c2eb26014ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:af:e0:89:8c:74:90:9a:71:5f:79:46:79: 81:f3:03:36:bf:8b:cc:07:3b:18:14:1c:b6:f4:58: db:5b:52:a9:5d:fd:dc:84:95:33:82:f4:95:b5:45: 34:f6:72:e4:54:84:9f:0f:1d:dd:ea:3c:11:cc:c7: 6b:16:66:61:25:4e:b0:c7:8c:5e:6f:b5:07:96:12: ea:42:27:54:53:a5:28:0d:3f:da:c8:07:cf:1b:45: e6:99:e3:be:c6:86:a1:0c:76:a0:80:f8:16:56:3e: c9:64:96:b4:85:7c:d9:74:f7:36:c2:5f:65:7b:eb: 0c:d3:74:c6:25:1b:45:b4:70:32:e8:b5:eb:c6:71: 93:12:bf:4a:47:9c:90:b1:eb:94:2d:67:23:e1:ee: 99:5b:1e:d2:38:f9:22:23:fb:d6:68:5b:27:d0:86: c0:2e:8e:fb:4c:64:eb:37:63:95:89:3a:5f:8c:32: 41:23:32:d4:2e:c6:de:d8:98:a6:f1:f0:b7:49:c0: 2a:5a:c2:0f:d6:97:14:06:69:70:1a:20:dd:6b:13: 55:2d:76:d1:e9:f6:16:93:57:93:a2:5e:44:0a:6b: d4:aa:f3:13:eb:3a:3b:f7:c4:a8:69:ce:51:da:72: 64:48:ba:0b:33:80:ea:3c:81:63:9b:39:cf:63:ca: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:24:99:1D:BC:71:DE:9C:FF:96:5D:3C:BE:A6:17:12:5B:F9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:62:4a:9a:4f:27:ba:a1:fb:70:54:dd:73:7a:86:d3:ea:5d: 44:a1:36:35:58:29:2f:37:05:90:73:94:24:20:e7:a8:ae:a6: 4f:c7:64:ae:04:6a:dd:55:14:54:d2:bb:59:93:99:79:70:27: 3e:93:4e:d7:74:14:57:da:36:37:0a:27:ee:79:4c:7b:ae:a1: 03:bd:5c:74:a9:f5:7e:18:38:aa:d5:96:54:fb:4f:cd:86:dd: 13:ef:a6:ab:6b:fd:36:0c:dd:9d:0f:7b:cd:16:ae:f5:23:92: cd:81:67:91:35:2e:be:d6:28:7f:b0:93:bb:f0:3b:b0:07:18: 20:bb:8b:59:9d:b1:c2:21:c4:7e:73:d5:56:fb:1f:23:20:b9: 7b:ed:b5:9b:d1:5d:be:bb:0e:63:d7:24:73:03:a8:3b:b0:9c: cd:8d:81:64:37:8d:ce:f3:71:ed:3e:f1:20:37:d3:61:6e:c7: 5f:51:c5:0e:69:c2:f6:50:b6:92:23:de:68:2d:96:a3:0e:b8: 6f:dc:75:e6:55:dc:97:cc:46:5c:86:2d:f5:55:99:89:e6:7e: 82:2c:f7:f1:47:19:f3:84:7f:18:21:c9:a5:7b:54:42:eb:bb: df:34:6c:74:52:c0:88:32:58:55:a4:08:6c:13:83:d5:7f:55: 7e:18:94:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYyrHA3xNKLefXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZDZlMDdkNjEtN2MxZS00MWIzLTkyZjQtYzJlYjI2MDE0YWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdav4ImMdJCacV95RnmB8wM2v4vMBzsYFBy2 9FjbW1KpXf3chJUzgvSVtUU09nLkVISfDx3d6jwRzMdrFmZhJU6wx4xeb7UHlhLq QidUU6UoDT/ayAfPG0XmmeO+xoahDHaggPgWVj7JZJa0hXzZdPc2wl9le+sM03TG JRtFtHAy6LXrxnGTEr9KR5yQseuULWcj4e6ZWx7SOPkiI/vWaFsn0IbALo77TGTr N2OViTpfjDJBIzLULsbe2Jim8fC3ScAqWsIP1pcUBmlwGiDdaxNVLXbR6fYWk1eT ol5ECmvUqvMT6zo798Soac5R2nJkSLoLM4DqPIFjmznPY8oYuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFjJJkdvHHenP+WXTy+phcSW/lxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdiSppPJ7qh+3BU3XN6htPqXUShNjVYKS83BZBzlCQg56iupk/HZK4E at1VFFTSu1mTmXlwJz6TTtd0FFfaNjcKJ+55THuuoQO9XHSp9X4YOKrVllT7T82G 3RPvpqtr/TYM3Z0Pe80WrvUjks2BZ5E1Lr7WKH+wk7vwO7AHGCC7i1mdscIhxH5z 1Vb7HyMguXvttZvRXb67DmPXJHMDqDuwnM2NgWQ3jc7zce0+8SA302Fux19RxQ5p wvZQtpIj3mgtlqMOuG/cdeZV3JfMRlyGLfVVmYnmfoIs9/FHGfOEfxghyaV7VELr u980bHRSwIgyWFWkCGwTg9V/VX4YlNE= -----END CERTIFICATE-----Generated at Mon Oct 26 23:42:21 2026 by rpki-client