$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: ltp5/50VnmBezBKzrN57pRFmPKqmk01wzDvs2bP6KYA= Subject key identifier: B4:B8:6C:37:ED:A8:98:DD:92:F0:6E:36:FC:74:35:A7:B6:9A:D7:35 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584E815F9625CCFA9BA66145A270 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:96:25:cc:fa:9b:a6:61:45:a2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=7601d4b6-b6f1-4842-8d02-9056dd040e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a8:e1:82:b5:3d:89:2c:44:66:a8:ac:a5:58: b5:b0:29:79:92:a5:c0:da:82:dc:4a:1a:0a:a6:3e: 0d:84:33:ba:aa:05:38:be:74:86:da:c7:dc:ed:d6: fc:a8:43:e0:84:d8:4b:5b:ea:89:95:84:e9:0f:56: 15:fa:ea:de:5f:47:f7:c7:b8:d9:7e:c2:b2:04:6b: be:d6:15:80:64:19:6b:70:09:f8:3c:a7:b2:44:1e: 69:57:b4:f2:96:65:0f:b9:d0:ae:f7:3a:0b:7a:fd: 70:0e:4e:ab:e0:57:e7:eb:ff:77:e3:a0:74:34:3c: 9a:8a:30:ff:f2:a9:e9:7b:15:1a:e0:70:32:8f:71: 8e:41:45:b0:f0:c3:c8:f1:49:91:9d:ca:e2:ed:06: a4:43:af:02:74:74:88:3d:c1:ab:17:b1:0e:24:2c: b9:3c:71:c6:15:77:7e:4d:48:67:4b:e1:fc:c2:24: f8:a8:e4:9b:7a:35:b5:a2:57:31:a9:df:57:d3:c9: a3:2e:fb:f0:b8:06:bf:63:cd:0d:ed:13:a7:60:7c: 6d:60:06:78:e7:53:02:b2:a0:cb:ca:49:e0:2c:0f: c3:ec:a0:02:a4:ba:a4:d6:bb:74:fa:c3:65:72:e7: fb:8a:e6:2b:bc:f0:34:28:16:ab:c7:2a:e9:b8:ef: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B8:6C:37:ED:A8:98:DD:92:F0:6E:36:FC:74:35:A7:B6:9A:D7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2a:99:48:b3:b7:f9:a7:3d:04:96:b1:10:e9:59:5b:af:83: 52:3d:98:87:e7:a7:64:94:30:ba:50:9b:8e:43:d6:7a:31:a3: df:90:e1:e8:9c:12:8a:b9:ff:4d:5d:80:b7:bb:21:5b:f8:63: c7:14:77:28:36:4c:b9:1a:1e:9f:39:c6:8a:f5:a8:fb:0a:be: 6b:03:86:46:9e:43:24:fa:83:f7:7b:7e:cc:17:3a:19:44:af: bb:90:03:f3:b7:1f:30:97:97:b5:ed:9b:32:2e:9e:b0:78:da: e4:29:3a:17:ae:cc:10:fe:f7:41:28:33:2b:2d:07:26:ae:4c: ce:c9:ee:3b:f4:84:76:a1:c1:8f:79:47:d0:ca:69:4d:d3:d3: 83:51:fa:91:a6:47:ba:ae:46:2f:55:d5:37:2d:1a:c0:45:44: 6d:ec:11:4d:64:ba:be:76:8b:16:fb:a7:34:88:59:cc:a3:bd: 0d:64:bc:45:09:c4:88:12:3f:92:97:a3:12:66:e0:da:08:c9: 5b:d2:3a:7c:35:3f:31:d4:03:9b:30:10:5f:df:84:6a:ff:c1: 5c:9a:5a:7a:37:a1:a5:c9:5f:da:df:b4:f0:f1:4b:73:2c:77: 44:2a:20:44:55:07:01:02:af:1c:88:bc:0e:e6:bf:fb:a7:47: cf:75:74:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5YlzPqbpmFFonAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk NzYwMWQ0YjYtYjZmMS00ODQyLThkMDItOTA1NmRkMDQwZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6jhgrU9iSxEZqispVi1sCl5kqXA2oLcShoK pj4NhDO6qgU4vnSG2sfc7db8qEPghNhLW+qJlYTpD1YV+ureX0f3x7jZfsKyBGu+ 1hWAZBlrcAn4PKeyRB5pV7TylmUPudCu9zoLev1wDk6r4Ffn6/9346B0NDyaijD/ 8qnpexUa4HAyj3GOQUWw8MPI8UmRncri7QakQ68CdHSIPcGrF7EOJCy5PHHGFXd+ TUhnS+H8wiT4qOSbejW1olcxqd9X08mjLvvwuAa/Y80N7ROnYHxtYAZ451MCsqDL ykngLA/D7KACpLqk1rt0+sNlcuf7iuYrvPA0KBarxyrpuO9pkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS4bDftqJjdkvBuNvx0Nae2mtc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcqmUizt/mnPQSWsRDpWVuvg1I9mIfnp2SUMLpQm45D1noxo9+Q4eic Eoq5/01dgLe7IVv4Y8cUdyg2TLkaHp85xor1qPsKvmsDhkaeQyT6g/d7fswXOhlE r7uQA/O3HzCXl7XtmzIunrB42uQpOheuzBD+90EoMystByauTM7J7jv0hHahwY95 R9DKaU3T04NR+pGmR7quRi9V1TctGsBFRG3sEU1kur52ixb7pzSIWcyjvQ1kvEUJ xIgSP5KXoxJm4NoIyVvSOnw1PzHUA5swEF/fhGr/wVyaWno3oaXJX9rftPDxS3Ms d0QqIERVBwECrxyIvA7mv/unR891dJw= -----END CERTIFICATE-----Generated at Thu Jul 16 05:21:54 2026 by rpki-client