$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa File: 9929da4e-946a-3592-bfea-22b4659f8ef7.roa (raw, json) Hash identifier: +7rMCgQEwBpH0/Ndo/XGtbHvQbO42vefwo9fjgkshb0= Subject key identifier: 9C:8B:91:39:E7:AB:77:7C:3A:B1:83:CF:C4:9A:41:C3:3D:6F:4C:7D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B1806D42021E7242F20B04420 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 25645 IP address blocks: 137.239.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d4:20:21:e7:24:2f:20:b0:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=0516544e-a161-4fdb-a6fc-34d8fcc1ed86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:70:92:98:fb:e1:8f:aa:fa:d5:34:80:a1: 9f:12:25:92:52:ea:03:7c:04:c8:84:c6:87:a2:b3: 94:9e:f8:46:16:4e:5e:5a:f8:56:40:97:29:d2:51: 95:5a:58:30:8b:50:c9:b4:db:e3:89:ab:e8:e9:41: 7a:d3:d1:f0:9b:38:88:37:0b:c6:33:0c:2c:be:2f: b9:fe:c4:7f:22:57:7b:74:66:80:0b:3c:23:34:f2: e1:95:56:58:df:d9:f2:b4:77:da:35:25:df:4b:e2: d1:50:86:6d:47:ec:b0:b3:b4:98:08:44:5a:ca:72: 33:af:7b:c4:98:1c:4f:14:83:83:98:95:c2:90:df: e2:b4:a2:83:2c:3d:a4:d0:95:4e:c6:69:6f:b2:6f: 8f:b6:54:5e:09:3a:fc:2e:5d:53:b3:94:e8:29:f6: 78:0c:e8:33:88:da:75:ea:aa:71:b1:43:ef:44:a2: ae:1f:d1:35:c1:31:b8:7d:ab:b2:6e:24:9f:bc:e5: 15:4c:57:fd:e1:53:21:aa:02:09:6c:10:05:d4:df: cd:b5:35:f9:3f:5d:06:e3:c0:34:e4:08:1c:99:32: 3f:42:ac:81:25:d7:ac:c0:b0:82:d9:5b:06:80:fb: 87:cb:ce:03:e3:da:cb:a9:ec:66:4c:8d:6f:fb:fa: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:91:39:E7:AB:77:7C:3A:B1:83:CF:C4:9A:41:C3:3D:6F:4C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a2:bb:c3:be:96:1e:e3:d8:15:fc:e9:f0:37:72:4f:fa:ef: f0:db:9b:68:04:48:a6:4c:1a:04:f8:ea:3a:62:14:15:25:89: 10:e1:ac:af:b9:62:16:80:78:42:7c:9a:a4:cf:18:08:90:91: c0:bf:c5:ec:ad:fb:8b:55:91:3a:ec:57:4d:44:fe:e5:65:a3: 7f:9a:c9:20:8c:6c:be:95:a7:2e:f2:1a:d7:3c:48:82:91:37: 69:26:dc:2c:03:f0:99:36:0e:31:fc:fa:a7:da:dd:37:2b:40: ee:96:ba:e7:64:e9:0f:7f:66:fb:52:2f:a0:5a:be:69:75:3a: bb:42:89:41:e2:a6:3a:31:36:20:57:5b:b3:28:5b:d5:92:24: 5a:d7:43:be:18:3a:7c:21:0e:b7:a7:af:8e:bb:13:dc:46:2d: 2a:1c:0c:9d:6c:a1:4d:71:39:dd:44:40:8f:83:01:76:98:ac: be:1a:90:6b:88:39:c3:c5:5b:a0:db:ff:2b:98:31:5a:b3:65: 12:c7:20:42:09:d3:ae:1f:46:07:a3:0d:c9:07:f4:91:07:cd: 55:43:9c:bd:48:ca:d2:99:0b:5e:52:62:80:2f:fc:0d:bb:e7: 5a:5b:d5:26:99:62:77:54:a2:f5:fd:c2:8c:f4:67:61:c2:ef: 75:f3:e5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtQgIeckLyCwRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MDUxNjU0NGUtYTE2MS00ZmRiLWE2ZmMtMzRkOGZjYzFlZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZhwkpj74Y+q+tU0gKGfEiWSUuoDfATIhMaH orOUnvhGFk5eWvhWQJcp0lGVWlgwi1DJtNvjiavo6UF609HwmziINwvGMwwsvi+5 /sR/Ild7dGaACzwjNPLhlVZY39nytHfaNSXfS+LRUIZtR+yws7SYCERaynIzr3vE mBxPFIODmJXCkN/itKKDLD2k0JVOxmlvsm+PtlReCTr8Ll1Ts5ToKfZ4DOgziNp1 6qpxsUPvRKKuH9E1wTG4fauybiSfvOUVTFf94VMhqgIJbBAF1N/NtTX5P10G48A0 5AgcmTI/QqyBJdeswLCC2VsGgPuHy84D49rLqexmTI1v+/rJiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyLkTnnq3d8OrGDz8SaQcM9b0x9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOTkyOWRhNGUtOTQ2YS0z NTkyLWJmZWEtMjJiNDY1OWY4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOiu8O+lh7j2BX86fA3ck/67/Dbm2gESKZMGgT46jpiFBUliRDhrK+5 YhaAeEJ8mqTPGAiQkcC/xeyt+4tVkTrsV01E/uVlo3+aySCMbL6Vpy7yGtc8SIKR N2km3CwD8Jk2DjH8+qfa3TcrQO6Wuudk6Q9/ZvtSL6Bavml1OrtCiUHipjoxNiBX W7MoW9WSJFrXQ74YOnwhDrenr467E9xGLSocDJ1soU1xOd1EQI+DAXaYrL4akGuI OcPFW6Db/yuYMVqzZRLHIEIJ064fRgejDckH9JEHzVVDnL1IytKZC15SYoAv/A27 51pb1SaZYndUovX9woz0Z2HC73Xz5Tk= -----END CERTIFICATE-----Generated at Fri Sep 19 02:48:02 2025 by rpki-client