$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: 8ehNewtmFrfUH7HA3m3FrDQ+kijGCEJqjDiKTmCAngg= Subject key identifier: BB:C9:B6:CD:4D:9E:0E:A7:81:07:10:E5:5A:75:3D:C3:C5:EC:9E:37 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B004BF25EAB65F03FD6E3BC00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f2:5e:ab:65:f0:3f:d6:e3:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=2e0a420f-0fa1-4302-ac94-2cfe18f90ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:9a:6b:25:ea:b2:d6:cf:ab:d0:ee:56:0b: 75:08:1a:a3:20:8a:c4:fa:ea:fa:a9:47:73:4d:50: 2e:bf:df:a1:3a:e8:f4:e1:b2:d8:05:7b:5c:82:58: 7e:12:19:a3:28:06:7a:65:60:39:8d:df:1f:c5:a0: f4:48:dd:42:db:69:34:76:4a:dd:0e:ea:70:32:af: 3f:87:f6:42:fb:c8:2b:ef:2b:1d:77:43:54:0d:5f: 95:83:12:14:e6:1c:3a:33:88:9f:27:94:84:18:18: d2:a6:29:62:fe:b3:e8:cb:c3:1c:0b:e8:9b:52:8a: 62:27:2d:58:c5:4c:3b:88:cd:d0:8d:c5:ef:35:65: 75:43:7c:09:0d:ce:93:9f:c1:cd:e2:2d:77:43:12: 66:ac:1b:ad:74:51:3c:8e:e5:cc:19:01:a7:dc:fc: c5:75:bb:b2:0a:a7:cd:e1:f4:2d:7c:03:c4:f6:de: 49:87:6b:d4:b6:4a:f6:03:4a:53:50:d6:29:59:3e: 47:cd:bc:d8:b5:d3:b4:41:28:19:b8:2c:05:a4:88: ca:9c:1e:67:20:6e:cb:b9:d6:01:24:c0:57:76:b9: c5:5d:13:93:e9:fc:f6:ad:22:9b:c6:92:97:43:73: e4:e0:9e:b9:62:95:c5:a0:15:a8:26:e1:c3:0d:4e: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:B6:CD:4D:9E:0E:A7:81:07:10:E5:5A:75:3D:C3:C5:EC:9E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f5:70:ef:61:4d:57:18:a2:f3:0c:de:75:77:12:48:8a:b1: 2a:06:6b:8b:0a:55:56:d1:7d:35:f4:45:aa:ce:d3:85:0f:92: de:4c:7a:eb:b3:17:3e:97:23:85:34:80:e2:5e:f9:33:c7:56: 13:c2:9a:7b:2f:b3:b5:27:0f:fe:9c:f7:37:41:3b:70:4f:fa: 1c:ef:71:36:f5:6d:de:33:e4:a3:96:69:16:d6:75:59:64:09: d9:50:36:99:6b:69:15:07:f0:b8:cf:b7:85:a8:6b:67:e0:f8: 52:a7:c6:84:c7:2e:00:79:06:16:73:6e:6e:e8:52:7b:f1:8f: a4:61:6d:52:c1:11:fa:83:46:37:a3:79:36:07:c2:71:95:0d: 2e:6f:e0:16:8f:a3:82:a7:bc:d8:9f:e5:71:85:31:6a:da:96: bf:ff:9d:17:45:c3:72:96:44:08:78:7b:47:02:e5:0f:80:56: 3c:f3:2a:ee:20:4e:6e:39:1d:79:d9:e1:c4:86:0d:5f:6d:35: 6e:6f:85:41:02:de:fc:11:45:1a:b3:8c:f6:38:74:18:12:81: c5:80:07:69:b7:eb:2a:14:c8:0d:28:17:49:f9:a7:30:0a:bb: 5a:3c:33:4a:ab:67:49:a0:d0:bd:aa:57:e3:47:38:e4:29:2d: 8d:a2:4c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/Jeq2XwP9bjvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmUwYTQyMGYtMGZhMS00MzAyLWFjOTQtMmNmZTE4ZjkwYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT6aayXqstbPq9DuVgt1CBqjIIrE+ur6qUdz TVAuv9+hOuj04bLYBXtcglh+EhmjKAZ6ZWA5jd8fxaD0SN1C22k0dkrdDupwMq8/ h/ZC+8gr7ysdd0NUDV+VgxIU5hw6M4ifJ5SEGBjSpili/rPoy8McC+ibUopiJy1Y xUw7iM3QjcXvNWV1Q3wJDc6Tn8HN4i13QxJmrButdFE8juXMGQGn3PzFdbuyCqfN 4fQtfAPE9t5Jh2vUtkr2A0pTUNYpWT5HzbzYtdO0QSgZuCwFpIjKnB5nIG7LudYB JMBXdrnFXROT6fz2rSKbxpKXQ3Pk4J65YpXFoBWoJuHDDU4i2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvJts1Nng6ngQcQ5Vp1PcPF7J43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn1cO9hTVcYovMM3nV3EkiKsSoGa4sKVVbRfTX0RarO04UPkt5Meuuz Fz6XI4U0gOJe+TPHVhPCmnsvs7UnD/6c9zdBO3BP+hzvcTb1bd4z5KOWaRbWdVlk CdlQNplraRUH8LjPt4Woa2fg+FKnxoTHLgB5BhZzbm7oUnvxj6RhbVLBEfqDRjej eTYHwnGVDS5v4BaPo4KnvNif5XGFMWralr//nRdFw3KWRAh4e0cC5Q+AVjzzKu4g Tm45HXnZ4cSGDV9tNW5vhUEC3vwRRRqzjPY4dBgSgcWAB2m36yoUyA0oF0n5pzAK u1o8M0qrZ0mg0L2qV+NHOOQpLY2iTFY= -----END CERTIFICATE-----Generated at Fri Sep 19 01:21:45 2025 by rpki-client