$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json) Hash identifier: 6UHZ95DTtmqKwCIVIu/AyI5zn/OpuW6vofxYhzWRyA0= Subject key identifier: 37:69:D4:EB:73:D7:71:1C:7E:18:25:5E:04:91:4D:17:EA:5E:69:9C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A9D30EB70D99271110B753B00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 25645 IP address blocks: 137.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:eb:70:d9:92:71:11:0b:75:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=bff1d5fc-6723-4298-85e6-cfe1e54b9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:65:3a:f0:4f:49:77:43:39:79:d1:95:e9: ed:61:9c:bf:96:79:1b:10:8e:7e:62:6f:5a:d8:bd: 41:3f:39:8f:ed:47:0b:ec:d1:d6:f8:9b:bd:f6:45: 83:d8:83:f2:f8:cb:e7:75:7e:44:96:ae:b6:6d:45: 6e:90:ac:a8:a4:92:8f:b9:21:da:94:e7:09:dc:4a: 0c:0c:13:c7:71:be:b0:cb:6e:a9:9f:1a:67:5d:88: 62:dd:b9:e0:71:d2:ae:f7:b7:87:8c:1e:97:3c:d4: 2d:a9:7d:92:14:9b:df:2f:57:6b:a5:bc:d3:76:38: 09:f2:a6:8d:82:01:c2:60:44:ed:e8:29:21:90:13: cd:40:4e:72:6a:ca:e3:0c:c6:24:e5:45:6c:69:cd: 15:63:7f:55:c8:29:ab:53:af:31:80:0d:2d:4f:cf: 72:6e:d8:c8:9f:5e:6b:55:58:c7:40:3e:ac:b1:a2: 8e:d0:6c:93:93:5a:9c:97:f1:ca:35:98:fd:dc:07: 9a:e2:54:bb:aa:f3:43:50:ab:3b:55:c7:7b:95:72: 59:30:a6:1f:3b:9c:f6:c8:34:6c:88:ef:25:df:5e: a1:4c:27:36:9d:fe:6d:99:94:8e:be:0a:16:c1:31: 70:f2:8a:6e:5e:f3:32:be:7f:28:13:e7:46:f1:35: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:69:D4:EB:73:D7:71:1C:7E:18:25:5E:04:91:4D:17:EA:5E:69:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8e:84:53:9c:03:9b:ac:b9:af:a6:a2:d6:72:44:b8:5a:a5: 51:e9:ce:d3:2c:6e:32:82:d6:4d:36:19:ce:cd:11:5e:47:1a: 1e:b7:17:b9:44:fd:b0:de:44:e3:29:0a:4d:91:5c:c2:63:ac: e9:96:63:11:d4:65:56:3c:9c:26:de:1e:e5:8d:e9:0b:c6:5d: e6:db:32:7d:cc:f7:39:85:a5:80:8b:73:ef:86:56:a3:79:8d: 86:20:0c:a0:3d:b8:7a:8a:b9:b8:c9:fb:77:fa:fc:01:aa:97: e5:c5:7f:dd:2f:7b:20:ca:ae:38:8e:60:03:6b:c3:75:8c:4e: d2:46:80:37:0e:ae:23:1c:c0:8b:f8:bd:04:7d:f2:fa:da:8a: 8e:53:72:26:17:07:87:4a:4f:73:6a:05:7a:f1:45:3f:b4:5d: 54:42:e6:24:11:82:bc:e7:3c:cb:73:29:ca:8e:ae:ee:2d:3e: c4:ca:0a:7d:f6:21:1b:64:f0:15:da:1a:04:1c:20:4d:1d:35: 00:45:c2:36:ce:11:97:d2:df:2c:f4:ca:07:f8:85:ba:89:a0: 69:2d:c6:51:dd:9f:4d:03:2e:54:48:7b:6f:ba:73:f1:e2:8b: 39:13:05:ed:cf:d5:3a:af:d0:12:ef:b9:56:19:39:76:dd:41: 7b:79:40:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOtw2ZJxEQt1OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YmZmMWQ1ZmMtNjcyMy00Mjk4LTg1ZTYtY2ZlMWU1NGI5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQplOvBPSXdDOXnRlentYZy/lnkbEI5+Ym9a 2L1BPzmP7UcL7NHW+Ju99kWD2IPy+MvndX5Elq62bUVukKyopJKPuSHalOcJ3EoM DBPHcb6wy26pnxpnXYhi3bngcdKu97eHjB6XPNQtqX2SFJvfL1drpbzTdjgJ8qaN ggHCYETt6CkhkBPNQE5yasrjDMYk5UVsac0VY39VyCmrU68xgA0tT89ybtjIn15r VVjHQD6ssaKO0GyTk1qcl/HKNZj93Aea4lS7qvNDUKs7Vcd7lXJZMKYfO5z2yDRs iO8l316hTCc2nf5tmZSOvgoWwTFw8opuXvMyvn8oE+dG8TX4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdp1Otz13EcfhglXgSRTRfqXmmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqOhFOcA5usua+motZyRLhapVHpztMsbjKC1k02Gc7NEV5HGh63F7lE /bDeROMpCk2RXMJjrOmWYxHUZVY8nCbeHuWN6QvGXebbMn3M9zmFpYCLc++GVqN5 jYYgDKA9uHqKubjJ+3f6/AGql+XFf90veyDKrjiOYANrw3WMTtJGgDcOriMcwIv4 vQR98vraio5TciYXB4dKT3NqBXrxRT+0XVRC5iQRgrznPMtzKcqOru4tPsTKCn32 IRtk8BXaGgQcIE0dNQBFwjbOEZfS3yz0ygf4hbqJoGktxlHdn00DLlRIe2+6c/Hi izkTBe3P1Tqv0BLvuVYZOXbdQXt5QIo= -----END CERTIFICATE-----Generated at Fri Aug 1 18:12:46 2025 by rpki-client