$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c188dab-ce8f-3f14-bfb7-126e7b1fbf74.roa File: 4c188dab-ce8f-3f14-bfb7-126e7b1fbf74.roa (raw, json) Hash identifier: J6wF7bRmD79V88k1PlsQvBGal6agWjLp5jHn+tUagzA= Subject key identifier: D4:D5:CD:37:51:FF:4C:FD:16:34:48:90:AB:DE:CF:9A:33:C9:8A:68 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D667A4A17D3BF88B40235B9C0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c188dab-ce8f-3f14-bfb7-126e7b1fbf74.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 33059 IP address blocks: 137.239.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:4a:17:d3:bf:88:b4:02:35:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=dc1b847a-6dae-4628-8978-adead750f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:33:f9:44:0d:25:a1:8b:bf:96:4c:7b:84: 9b:3a:92:a0:c6:a7:52:a7:10:64:f8:1e:b2:ed:85: 82:85:ee:c0:7d:d0:6f:e8:cd:ba:76:f6:ba:d7:dc: 1c:8f:99:17:2d:90:c3:a8:57:37:39:29:8e:d2:e8: a8:7d:16:6c:57:04:d6:aa:5e:83:a4:13:d2:2c:50: 2a:46:70:84:8e:60:10:24:94:4d:8a:8f:ec:d7:0b: e2:bd:68:46:e7:6f:59:4f:84:a4:05:7c:64:c0:ed: 33:6d:9e:75:2d:2a:a6:aa:44:44:b6:23:7e:21:fd: ef:2b:61:55:4f:0e:80:48:29:bb:cb:69:16:a2:f5: e1:f2:2a:d9:49:9d:8c:54:16:72:e7:e1:0d:5c:07: 6e:ad:76:7a:06:b2:23:54:2e:e1:6f:a9:e9:01:26: 6b:1f:cf:53:43:3e:52:4e:ad:e0:76:06:c4:dc:ce: e8:39:c3:9e:fa:1e:43:9d:a0:41:90:80:bb:13:fa: a1:e7:71:73:14:55:c1:5a:7e:01:dd:5d:95:7a:f6: 72:6e:90:e7:4e:78:af:7e:08:d2:3a:34:84:f0:b2: ce:32:ad:f9:31:af:b4:ff:03:fb:9d:b9:00:b5:a2: bf:8e:40:21:11:37:a3:03:ee:39:11:3d:fd:95:c1: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:CD:37:51:FF:4C:FD:16:34:48:90:AB:DE:CF:9A:33:C9:8A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c188dab-ce8f-3f14-bfb7-126e7b1fbf74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:40:3a:bf:b7:ef:e5:7e:9f:f2:71:76:22:50:7a:0a:96:3a: 93:49:00:b2:66:3f:c3:0f:07:e0:80:be:d0:54:ec:1a:00:d0: c3:ee:44:9d:50:97:88:72:ea:96:ce:d9:ae:0c:f5:81:44:b0: ee:64:62:82:8b:93:f0:9d:a2:a2:dc:74:4e:7b:eb:e8:0a:26: 02:d3:45:ac:8e:19:42:01:b3:0d:f0:92:17:33:fd:21:52:0e: 91:97:bd:12:80:db:7a:96:db:dd:2d:c1:fe:fa:1a:52:8e:df: f5:20:2e:c8:bc:59:28:5a:bf:a8:cc:31:46:04:54:b1:96:ab: f2:3b:0b:5c:6d:19:76:70:97:1c:0f:f5:85:9a:55:56:83:bf: 5f:d7:26:b2:bf:fd:5d:e7:6f:1d:31:08:ed:f0:58:d5:c9:d5: 60:04:ef:40:61:9d:c6:91:73:b5:e5:49:ba:f2:b2:1b:cd:bd: 55:a5:0a:78:f7:e5:27:80:40:ce:9b:fd:e6:59:a9:9c:8e:c7: 10:b8:db:06:4b:22:9a:a0:bb:eb:42:f7:f3:9d:b2:59:55:0d: ad:16:4c:8a:e4:09:61:07:8f:eb:32:1a:b8:8b:5e:cc:2f:89: 86:96:47:79:f2:2c:d7:77:25:26:b7:bb:c2:8f:9e:cb:8c:ad: c9:98:32:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1mekoX07+ItAI1ucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZGMxYjg0N2EtNmRhZS00NjI4LTg5NzgtYWRlYWQ3NTBmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuIz+UQNJaGLv5ZMe4SbOpKgxqdSpxBk+B6y 7YWChe7AfdBv6M26dva619wcj5kXLZDDqFc3OSmO0uiofRZsVwTWql6DpBPSLFAq RnCEjmAQJJRNio/s1wvivWhG529ZT4SkBXxkwO0zbZ51LSqmqkREtiN+If3vK2FV Tw6ASCm7y2kWovXh8irZSZ2MVBZy5+ENXAdurXZ6BrIjVC7hb6npASZrH89TQz5S Tq3gdgbE3M7oOcOe+h5DnaBBkIC7E/qh53FzFFXBWn4B3V2VevZybpDnTnivfgjS OjSE8LLOMq35Ma+0/wP7nbkAtaK/jkAhETejA+45ET39lcGgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTVzTdR/0z9FjRIkKvez5ozyYpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGMxODhkYWItY2U4Zi0z ZjE0LWJmYjctMTI2ZTdiMWZiZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9AOr+37+V+n/JxdiJQegqWOpNJALJmP8MPB+CAvtBU7BoA0MPuRJ1Q l4hy6pbO2a4M9YFEsO5kYoKLk/CdoqLcdE576+gKJgLTRayOGUIBsw3wkhcz/SFS DpGXvRKA23qW290twf76GlKO3/UgLsi8WShav6jMMUYEVLGWq/I7C1xtGXZwlxwP 9YWaVVaDv1/XJrK//V3nbx0xCO3wWNXJ1WAE70BhncaRc7XlSbryshvNvVWlCnj3 5SeAQM6b/eZZqZyOxxC42wZLIpqgu+tC9/OdsllVDa0WTIrkCWEHj+syGriLXswv iYaWR3nyLNd3JSa3u8KPnsuMrcmYMmQ= -----END CERTIFICATE-----Generated at Wed Apr 8 02:00:17 2026 by rpki-client