$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json) Hash identifier: cM3oeSUK/DTDfpCf/oV9csQEt9UyTOAFcqClIx01kjA= Subject key identifier: AE:A3:90:FD:FD:5C:85:B9:47:F0:FE:2D:42:EF:5C:27:62:12:62:5F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D7CCFD34402B6302BDF578980 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 25645 IP address blocks: 137.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d3:44:02:b6:30:2b:df:57:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=e79e2039-360f-47c6-81e6-e97bb3a26e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:eb:9b:63:2c:25:6b:d9:1f:53:9d:95:f8: 14:ce:80:91:32:8e:3c:ee:a7:cc:0f:5d:7b:39:94: 5a:39:7e:fc:6f:a2:42:5e:58:2e:a7:01:ca:0b:19: a8:d6:92:63:12:c9:55:81:64:d4:aa:f3:97:9a:72: cb:0b:8e:9f:ba:29:8f:77:4b:64:b7:d0:a8:6a:d0: 15:05:bb:c6:74:0b:aa:16:60:47:59:d0:7a:20:f5: a9:b4:aa:f2:68:6f:bb:a4:41:99:4f:8f:db:d1:e5: 2d:63:d6:32:42:1b:78:d0:68:27:80:d4:ed:f0:27: 66:be:a4:b1:a0:a8:fb:36:2e:6f:f5:2f:16:90:81: cd:9a:53:ec:30:5f:03:51:b4:2a:db:73:c8:ee:31: a9:98:f5:f9:3c:f7:e1:da:58:e9:e3:b7:96:eb:5a: 33:76:6a:8a:16:4d:89:95:39:fb:6f:1d:94:b3:50: 54:34:36:0f:a5:76:09:46:62:2d:3b:d6:59:c9:17: ba:53:6d:93:83:f3:d2:00:99:e5:ac:24:f9:a6:4d: 2a:c1:70:38:17:3a:45:da:31:68:36:5c:8a:e7:30: f6:2e:dc:db:fd:75:31:de:e5:71:08:c2:46:6e:93: ea:db:79:b5:7d:55:e7:0a:14:f0:6c:c0:34:d7:83: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:90:FD:FD:5C:85:B9:47:F0:FE:2D:42:EF:5C:27:62:12:62:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:29:aa:3e:6b:3f:9b:2a:3a:07:c1:e3:e5:f0:33:2b:20:75: 73:34:14:13:04:88:2f:2c:f4:04:51:c8:d0:a8:35:15:c7:93: fb:b5:4d:29:43:f8:37:3a:5f:d6:24:ab:09:58:95:66:d0:c3: ae:a3:a9:ad:61:31:68:1c:9a:17:04:9f:b5:87:bf:11:db:99: a0:67:51:d2:5c:8a:48:5f:25:82:d2:15:56:f4:85:a7:62:d2: 13:f4:50:33:1c:88:9f:9e:3a:ba:74:a0:6c:c6:72:90:49:ad: 15:57:d3:66:5f:6a:68:57:68:1e:5c:09:5f:20:bf:00:a7:2d: 61:62:76:2b:57:a7:76:7d:52:38:ba:62:2c:6c:e0:b0:2d:e5: 8b:0c:b8:36:9f:89:59:81:67:a2:02:b6:8d:3a:0d:eb:bc:70: 6e:2a:d4:eb:cd:98:ba:ed:b6:0e:91:b4:a3:1f:0e:f8:55:ed: 22:6c:1b:f3:50:9b:ea:2d:f4:68:fe:99:52:cc:3c:4d:24:a7: ff:e2:84:10:1d:14:34:c4:b0:ea:d2:1d:e4:8e:60:f8:98:90: c8:74:6d:88:22:a8:77:5a:0a:a4:80:bd:03:53:ed:89:f9:75: b7:94:55:63:b9:6a:4b:55:48:a2:af:76:67:09:34:c5:32:8e: b0:58:30:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9NEArYwK99XiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZTc5ZTIwMzktMzYwZi00N2M2LTgxZTYtZTk3YmIzYTI2ZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYrrm2MsJWvZH1OdlfgUzoCRMo487qfMD117 OZRaOX78b6JCXlgupwHKCxmo1pJjEslVgWTUqvOXmnLLC46fuimPd0tkt9CoatAV BbvGdAuqFmBHWdB6IPWptKryaG+7pEGZT4/b0eUtY9YyQht40GgngNTt8CdmvqSx oKj7Ni5v9S8WkIHNmlPsMF8DUbQq23PI7jGpmPX5PPfh2ljp47eW61ozdmqKFk2J lTn7bx2Us1BUNDYPpXYJRmItO9ZZyRe6U22Tg/PSAJnlrCT5pk0qwXA4FzpF2jFo NlyK5zD2Ltzb/XUx3uVxCMJGbpPq23m1fVXnChTwbMA014PgtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6jkP39XIW5R/D+LULvXCdiEmJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIpqj5rP5sqOgfB4+XwMysgdXM0FBMEiC8s9ARRyNCoNRXHk/u1TSlD +Dc6X9YkqwlYlWbQw66jqa1hMWgcmhcEn7WHvxHbmaBnUdJcikhfJYLSFVb0hadi 0hP0UDMciJ+eOrp0oGzGcpBJrRVX02ZfamhXaB5cCV8gvwCnLWFiditXp3Z9Uji6 Yixs4LAt5YsMuDafiVmBZ6ICto06Deu8cG4q1OvNmLrttg6RtKMfDvhV7SJsG/NQ m+ot9Gj+mVLMPE0kp//ihBAdFDTEsOrSHeSOYPiYkMh0bYgiqHdaCqSAvQNT7Yn5 dbeUVWO5aktVSKKvdmcJNMUyjrBYMJw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:34 2026 by rpki-client