$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa File: 3c45f564-e010-32f9-9e47-024f8feaf419.roa (raw, json) Hash identifier: BdE4DYKrAEXZTYAUj2O7LqLXeAVPcBXmT/I7ocpbBlw= Subject key identifier: 28:45:3A:4D:7B:AF:FF:C6:DB:2A:1B:E7:9C:40:2E:E7:3F:5F:75:47 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584EA788986D93ED5200CFE25500 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25645 IP address blocks: 137.239.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:98:6d:93:ed:52:00:cf:e2:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=43aa8b2c-72b3-4ea0-a25b-a7426684ac59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:5f:68:4f:7a:82:c3:eb:85:b8:6e:db:e9: d8:2b:03:75:bd:c1:3d:d3:9b:02:a2:12:1c:91:4a: 75:66:7c:65:e9:e8:b3:53:dd:aa:80:90:2b:bf:7b: 4c:02:5a:1f:d2:16:9a:c1:89:e4:92:84:f2:12:6f: 2e:2f:bd:44:2b:09:8d:df:9c:d4:47:a1:21:28:18: af:0d:f7:f1:8d:7e:4a:a2:01:97:07:01:a4:45:35: 93:10:ed:9e:2c:c5:62:6c:2f:34:5f:dc:d4:ec:d9: ad:f5:ce:de:db:ba:cc:d7:5e:6a:44:07:b9:13:01: a5:41:12:f9:1e:26:bd:47:a3:98:f7:28:33:f5:39: f0:65:6e:a4:e8:26:49:d1:43:ab:64:36:4b:5d:f5: 19:0e:85:ff:0f:75:bc:ff:1c:2d:90:a1:c1:a1:b2: 59:ca:ac:4c:83:12:b5:35:22:c9:88:9f:82:27:bb: 70:b1:28:1c:af:49:c1:a7:6c:0e:3f:6a:e8:02:3b: 68:5c:ff:e2:85:40:3b:16:60:d3:86:64:81:9d:0e: 48:cd:36:8e:3a:8d:1b:f4:74:ba:82:bf:35:9b:6b: ce:39:ce:d4:83:79:36:f9:d7:ef:32:07:6c:19:b9: 12:9d:bf:01:16:0b:14:57:db:27:91:af:be:96:2d: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:45:3A:4D:7B:AF:FF:C6:DB:2A:1B:E7:9C:40:2E:E7:3F:5F:75:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:48:b4:16:3b:23:39:bc:2d:65:b8:66:26:5c:d1:5c:86:98: 40:c2:86:82:4b:ee:ca:23:e0:8a:d9:32:6f:13:ab:89:24:f2: 03:54:4e:2c:c4:1d:43:79:f9:38:45:07:14:91:a9:86:5e:ac: 1a:69:a1:93:93:82:58:ca:46:d9:22:20:bb:24:12:5d:97:4a: ec:86:4c:8d:f4:87:b5:29:62:1e:a3:f2:11:f1:20:2d:4c:dc: b6:43:87:7f:fc:03:68:74:9e:e9:f7:02:3f:2f:36:c4:e9:bc: eb:b9:ee:9f:c9:23:92:e4:29:8f:f6:02:61:8e:05:66:88:6c: c6:32:9a:49:44:27:1c:73:b7:73:2f:7e:15:1f:9c:4c:7a:a2: 88:fd:44:7f:fe:85:c4:5d:7f:81:d7:91:ea:87:58:af:4d:b8: fa:86:22:74:3c:97:79:df:b4:c4:6d:06:c8:98:14:cb:d8:bf: 96:38:65:74:a3:9b:7b:40:34:f0:e5:55:e1:90:8c:be:17:7a: 5c:9b:d9:34:02:76:88:eb:97:e9:eb:19:f9:37:ff:ad:52:29: 92:26:0e:1d:73:16:2f:52:58:f5:ea:93:a5:07:77:e4:12:47: 46:76:87:96:3f:d1:dc:50:b6:69:c3:03:e3:da:21:c7:f3:1e: bd:c5:14:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJhtk+1SAM/iVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDNhYThiMmMtNzJiMy00ZWEwLWEyNWItYTc0MjY2ODRhYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFlfaE96gsPrhbhu2+nYKwN1vcE905sCohIc kUp1Znxl6eizU92qgJArv3tMAlof0haawYnkkoTyEm8uL71EKwmN35zUR6EhKBiv DffxjX5KogGXBwGkRTWTEO2eLMVibC80X9zU7Nmt9c7e27rM115qRAe5EwGlQRL5 Hia9R6OY9ygz9TnwZW6k6CZJ0UOrZDZLXfUZDoX/D3W8/xwtkKHBobJZyqxMgxK1 NSLJiJ+CJ7twsSgcr0nBp2wOP2roAjtoXP/ihUA7FmDThmSBnQ5IzTaOOo0b9HS6 gr81m2vOOc7Ug3k2+dfvMgdsGbkSnb8BFgsUV9snka++li0crwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChFOk17r//G2yob55xALuc/X3VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvM2M0NWY1NjQtZTAxMC0z MmY5LTllNDctMDI0ZjhmZWFmNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZItBY7Izm8LWW4ZiZc0VyGmEDChoJL7soj4IrZMm8Tq4kk8gNUTizE HUN5+ThFBxSRqYZerBppoZOTgljKRtkiILskEl2XSuyGTI30h7UpYh6j8hHxIC1M 3LZDh3/8A2h0nun3Aj8vNsTpvOu57p/JI5LkKY/2AmGOBWaIbMYymklEJxxzt3Mv fhUfnEx6ooj9RH/+hcRdf4HXkeqHWK9NuPqGInQ8l3nftMRtBsiYFMvYv5Y4ZXSj m3tANPDlVeGQjL4Xelyb2TQCdojrl+nrGfk3/61SKZImDh1zFi9SWPXqk6UHd+QS R0Z2h5Y/0dxQtmnDA+PaIcfzHr3FFAc= -----END CERTIFICATE-----Generated at Wed Jul 29 07:05:14 2026 by rpki-client