$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: mg6xEYTdt/SOO1ZE5bdW9DnLfx0VRVqmfoG2A5fJe8A= Subject key identifier: 88:32:50:51:3B:5D:D3:4B:95:C9:EF:A5:C7:59:5B:FC:CC:AD:DD:F1 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B004BF1CE6E8D5532A77EEFB6 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:ce:6e:8d:55:32:a7:7e:ef:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=62d70516-afeb-44d3-8e1c-943b4bfda45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:e9:5e:09:00:41:73:e7:b2:0f:97:09:2a: ca:85:d9:43:ae:0b:14:47:3f:89:88:9c:8f:0a:02: d2:d9:15:fc:a4:6f:31:73:d0:54:87:1d:26:84:f6: ba:53:2c:64:c0:9a:1f:0e:66:26:ad:b6:e0:ed:67: f6:f4:9d:12:93:47:7d:4f:39:f0:b1:8a:6b:7f:6a: 80:be:13:30:ee:20:da:3d:68:2e:66:a7:5f:f4:23: 71:c7:5b:3e:ba:75:fb:5f:8c:71:af:47:4c:46:f8: a2:e5:22:44:3e:fd:f1:62:94:df:06:cd:77:a2:7c: bc:e1:8d:0f:f5:28:96:60:af:4a:7b:4d:86:71:2d: 8a:bf:e5:69:f0:39:bb:59:5b:e2:dd:98:d2:b8:19: 72:8f:32:97:74:fb:47:8d:7c:32:1c:1e:78:ee:a1: a2:38:48:b9:63:85:e1:8c:38:f4:93:29:52:7e:dd: 44:ff:7b:c7:99:88:3d:8a:e5:35:3f:20:9a:36:54: e3:e1:19:8a:3e:16:d3:bd:2f:67:35:c6:71:c1:94: 0f:2d:51:61:32:89:50:47:5a:13:97:14:15:d9:4b: 90:d0:ff:7e:61:c5:5f:d2:09:c0:4f:09:6c:e7:21: cc:f2:ee:e6:00:a5:d2:5a:7b:5d:ea:65:51:69:4e: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:50:51:3B:5D:D3:4B:95:C9:EF:A5:C7:59:5B:FC:CC:AD:DD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:78:d7:53:3f:4d:fc:45:de:3d:9a:f3:06:c2:2e:f9:07:7d: e0:ea:0c:dc:d4:d7:d0:ca:fa:13:32:f4:3c:da:0c:f7:33:39: 1a:a0:88:28:0d:d8:3f:12:38:bf:2b:6c:0e:0d:83:9f:bf:e8: 09:0a:23:95:1e:a9:db:8c:90:66:a1:7d:db:5d:54:09:2f:db: 48:c1:d1:81:cc:02:86:3b:eb:ce:47:9a:6d:f3:5c:82:4c:a8: 31:1e:25:db:63:83:ae:12:24:b0:82:39:93:c9:12:e1:b5:94: d7:d6:22:25:fb:6c:ce:e1:6a:25:ca:15:4e:ee:1b:3d:9f:8b: c9:ba:e5:9e:b2:1e:55:db:ac:d4:6a:a9:b3:47:ed:2d:5e:06: 74:cb:c3:d4:66:d8:d5:c8:0f:e2:1d:9e:a7:fa:5d:85:81:ff: 40:5f:3c:ae:9a:e9:b3:e9:15:c8:22:a1:87:5a:cb:37:fb:12: c3:ce:09:d0:07:9f:61:e6:c0:cf:1d:82:0e:9a:5a:90:f2:14: 27:0b:aa:1f:96:2b:ff:58:a4:8f:6e:c2:fb:64:aa:cd:c2:e1: b7:7f:26:92:e9:e3:8a:cb:78:2f:2e:37:52:da:7c:77:af:9b: dc:8e:bd:27:a0:c7:59:e0:f1:95:5d:80:d0:6b:8c:e7:89:8d: b7:2e:44:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/HObo1VMqd+77YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjJkNzA1MTYtYWZlYi00NGQzLThlMWMtOTQzYjRiZmRhNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgjpXgkAQXPnsg+XCSrKhdlDrgsURz+JiJyP CgLS2RX8pG8xc9BUhx0mhPa6UyxkwJofDmYmrbbg7Wf29J0Sk0d9TznwsYprf2qA vhMw7iDaPWguZqdf9CNxx1s+unX7X4xxr0dMRvii5SJEPv3xYpTfBs13ony84Y0P 9SiWYK9Ke02GcS2Kv+Vp8Dm7WVvi3ZjSuBlyjzKXdPtHjXwyHB547qGiOEi5Y4Xh jDj0kylSft1E/3vHmYg9iuU1PyCaNlTj4RmKPhbTvS9nNcZxwZQPLVFhMolQR1oT lxQV2UuQ0P9+YcVf0gnATwls5yHM8u7mAKXSWntd6mVRaU57bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgyUFE7XdNLlcnvpcdZW/zMrd3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp411M/TfxF3j2a8wbCLvkHfeDqDNzU19DK+hMy9DzaDPczORqgiCgN 2D8SOL8rbA4Ng5+/6AkKI5UeqduMkGahfdtdVAkv20jB0YHMAoY7685Hmm3zXIJM qDEeJdtjg64SJLCCOZPJEuG1lNfWIiX7bM7haiXKFU7uGz2fi8m65Z6yHlXbrNRq qbNH7S1eBnTLw9Rm2NXID+Idnqf6XYWB/0BfPK6a6bPpFcgioYdayzf7EsPOCdAH n2HmwM8dgg6aWpDyFCcLqh+WK/9YpI9uwvtkqs3C4bd/JpLp44rLeC8uN1LafHev m9yOvSegx1ng8ZVdgNBrjOeJjbcuRGQ= -----END CERTIFICATE-----Generated at Fri Sep 19 07:29:56 2025 by rpki-client