$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/eece35f7-c33b-3176-9b36-24be1723e7e3.roa File: eece35f7-c33b-3176-9b36-24be1723e7e3.roa (raw, json) Hash identifier: U5AIKeADjM2oysBZ0TnlQFWSBRsOK+BkChix1HuI7+A= Subject key identifier: B8:7B:FE:5C:EE:89:E2:AE:AA:D4:74:67:E9:39:07:6D:D7:73:2E:FA Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DE2B5EC9AC9DDDEA5164E2A40 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/eece35f7-c33b-3176-9b36-24be1723e7e3.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 25645 IP address blocks: 137.239.213.0/24 maxlen: 24 2605:8300:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ec:9a:c9:dd:de:a5:16:4e:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=cbcefbd4-3e06-4bba-ab01-1acdb0a2f862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0a:ce:27:75:e1:e1:23:0e:de:3b:29:d5:65: ec:09:11:23:15:90:3e:6c:2d:d1:5f:97:10:68:b0: 21:c2:09:1e:f1:27:32:7c:55:99:3f:c2:0f:88:4e: ed:51:b9:6a:8e:dd:2b:ee:05:f9:22:8b:dd:aa:cf: e9:ce:09:1d:eb:8c:24:17:21:94:6d:ad:73:3c:ff: 9a:b5:4b:fa:3d:15:b0:4f:ac:a1:68:62:b8:37:29: 1a:c5:b6:ad:d6:ee:a2:07:c1:47:c6:a1:9f:45:5b: 47:36:bb:86:11:39:b4:96:26:0a:60:b3:8c:b6:aa: 3f:01:c5:80:03:ed:e9:62:09:de:27:15:5b:4a:a5: e8:75:bd:8f:63:f0:5d:90:53:cd:79:29:f0:d0:06: 78:a9:51:b7:cb:ad:76:97:15:5b:ac:e7:44:8b:51: 31:00:d0:ed:fc:3e:1b:84:8d:4d:2c:20:bc:a9:86: ef:a3:c2:d4:ea:a4:84:52:98:ea:1d:f6:9f:f7:10: ed:a1:57:62:b6:a4:cc:5f:93:96:c8:ab:43:a3:2b: 35:9f:51:a4:73:00:fa:26:1a:06:35:54:e0:0e:ce: 0b:2a:a2:b0:ad:98:b5:c5:f2:0e:05:c5:c1:1b:41: 22:49:22:b3:19:b2:fd:62:f6:05:83:58:03:de:2f: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:FE:5C:EE:89:E2:AE:AA:D4:74:67:E9:39:07:6D:D7:73:2E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/eece35f7-c33b-3176-9b36-24be1723e7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.213.0/24 IPv6: 2605:8300:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:67:d5:db:b0:b2:ca:4d:f9:ce:c5:55:53:bd:8c:49:82:29: ba:e0:d3:06:9b:22:13:4e:df:29:da:99:71:21:4b:bc:d6:0e: 4e:7d:cf:a5:b8:c1:0c:8b:ff:ff:c3:b7:5e:64:49:6c:02:66: 9e:a0:97:de:1c:76:3d:7f:ad:b4:db:83:ad:98:54:54:79:47: dd:00:61:55:56:70:35:1b:b7:76:2b:1d:ed:01:27:95:fc:43: 0b:67:9a:48:0f:af:59:86:f5:84:07:d8:3b:d5:da:05:06:23: d5:4a:ec:a5:4a:3f:8c:1e:2c:9c:dc:00:e9:00:a1:3f:a9:4b: 47:86:f1:94:2e:80:58:e8:1c:df:cd:5a:f0:71:11:c2:9a:40: 04:da:eb:50:a4:d1:e5:cc:b1:2f:2b:be:b3:b5:dd:40:a1:59: fb:98:70:bb:a6:cc:36:cc:7d:1b:8c:8b:83:13:d4:60:04:ea: e4:0a:bc:6a:d2:a4:2b:52:eb:45:8b:cd:d9:b6:21:97:d0:a5: bf:5b:86:fc:d0:bf:9c:6b:63:1c:2e:c5:a9:9d:19:1f:a1:6c: b0:2d:96:fd:4b:82:59:7f:7c:15:d7:71:94:b8:cb:c8:46:e0: 1f:20:4d:2d:a0:57:78:c9:bf:0a:eb:8c:57:eb:f5:97:07:3a: be:ca:b5:22 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE3iteyayd3epRZOKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk Y2JjZWZiZDQtM2UwNi00YmJhLWFiMDEtMWFjZGIwYTJmODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wrOJ3Xh4SMO3jsp1WXsCREjFZA+bC3RX5cQ aLAhwgke8ScyfFWZP8IPiE7tUblqjt0r7gX5Iovdqs/pzgkd64wkFyGUba1zPP+a tUv6PRWwT6yhaGK4Nykaxbat1u6iB8FHxqGfRVtHNruGETm0liYKYLOMtqo/AcWA A+3pYgneJxVbSqXodb2PY/BdkFPNeSnw0AZ4qVG3y612lxVbrOdEi1ExANDt/D4b hI1NLCC8qYbvo8LU6qSEUpjqHfaf9xDtoVditqTMX5OWyKtDoys1n1GkcwD6JhoG NVTgDs4LKqKwrZi1xfIOBcXBG0EiSSKzGbL9YvYFg1gD3i+iOQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLh7/lzuieKuqtR0Z+k5B23Xcy76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZWVjZTM1ZjctYzMzYi0z MTc2LTliMzYtMjRiZTE3MjNlN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAie/VMA8E AgACMAkDBwAmBYMAABswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe2fV27Cyyk35zsVVU72MSYIpuuDTBpsi E07fKdqZcSFLvNYOTn3PpbjBDIv//8O3XmRJbAJmnqCX3hx2PX+ttNuDrZhUVHlH 3QBhVVZwNRu3disd7QEnlfxDC2eaSA+vWYb1hAfYO9XaBQYj1UrspUo/jB4snNwA 6QChP6lLR4bxlC6AWOgc381a8HERwppABNrrUKTR5cyxLyu+s7XdQKFZ+5hwu6bM Nsx9G4yLgxPUYATq5Aq8atKkK1LrRYvN2bYhl9Clv1uG/NC/nGtjHC7FqZ0ZH6Fs sC2W/UuCWX98FddxlLjLyEbgHyBNLaBXeMm/CuuMV+v1lwc6vsq1Ig== -----END CERTIFICATE-----Generated at Wed May 27 17:21:10 2026 by rpki-client