$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json) Hash identifier: pxAAjYfjc6cFhO6u/GoOj3n6qIWzdV+0UtN+5W7Vzc4= Subject key identifier: A2:D2:6F:BC:0C:40:5F:06:71:3B:5E:14:F6:5F:0F:4E:56:72:71:D7 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584BBB758AB7D418050EFC7A0680 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 25645 IP address blocks: 137.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8a:b7:d4:18:05:0e:fc:7a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=20d6b277-8d89-4cf6-a8eb-0c6a07f632ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:41:bc:ad:61:20:78:71:64:33:87:96:d2: 7a:33:85:c6:0d:51:f3:12:fd:3f:25:b8:00:ca:57: 67:48:7b:50:09:1d:7f:87:71:39:de:20:f0:f0:a9: ab:67:13:04:d0:47:bf:9c:33:65:9c:48:18:f4:d0: 4f:9d:23:bd:17:14:8b:2c:25:54:07:9c:a5:11:50: 73:8e:72:da:95:38:6f:50:be:5d:dd:66:79:2f:dd: d8:85:4c:b0:51:df:7e:2f:dd:66:70:c8:0c:87:7a: bd:85:da:0c:6c:05:50:38:e3:b9:8f:bb:b9:1e:eb: 38:20:25:44:6a:3d:3d:11:fd:84:c4:7e:3d:8f:eb: ee:37:78:d1:9d:76:73:d1:a5:a8:1f:e0:78:11:af: ad:36:73:e8:39:98:ab:e5:98:21:76:d8:79:66:e4: 0d:81:61:ba:c0:76:34:b0:b6:93:28:45:14:9a:55: 52:10:b0:c7:15:f2:31:83:9c:af:d2:70:47:6c:8d: b3:69:9d:fd:06:37:e0:6d:f9:53:5b:4a:8c:00:de: ff:95:52:d5:67:00:f7:16:c7:87:0c:c9:08:fd:f2: 3d:b4:02:30:84:5b:93:be:0b:36:54:d6:1f:b7:fc: 57:4f:28:cc:58:00:ff:ab:b9:8f:40:81:0a:ee:e4: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D2:6F:BC:0C:40:5F:06:71:3B:5E:14:F6:5F:0F:4E:56:72:71:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:a1:10:d8:7a:50:08:ab:73:9e:99:73:95:0a:d4:15:2e: 0a:bf:9f:00:34:cf:12:fc:b9:8d:7b:d8:15:02:33:b5:72:68: ac:5b:e1:aa:03:c1:7f:82:68:51:09:d5:82:49:d0:a1:20:4a: e6:e3:48:27:90:ce:a6:2c:5b:22:0d:c5:08:da:ff:99:15:49: 08:22:5a:92:4d:41:9d:f1:95:45:76:c0:8b:80:91:73:b5:21: de:28:b2:05:32:e5:04:6d:85:72:75:2d:59:a8:e8:1c:7a:50: 1c:61:bb:1f:8e:95:d5:da:69:0d:f5:5d:07:d3:d3:72:7d:75: d1:4d:f1:ca:08:cb:a2:7c:92:d8:31:e2:e3:1f:50:ca:60:db: 1a:c2:1c:88:6a:4e:07:a9:cb:59:a2:38:e0:43:92:16:b4:b9: 56:d7:4d:ff:f4:81:d2:1a:46:d6:e6:28:c8:26:1a:bd:01:5e: de:e1:08:79:dd:22:85:53:84:96:f5:0a:dc:79:ab:62:b4:71: bb:64:7a:11:77:e5:21:69:e8:b6:43:fb:0e:4d:40:94:15:b0: e3:91:e2:c3:99:54:e4:0e:a2:b9:1e:31:ed:f2:04:fa:f2:49: 39:59:1f:1a:94:03:96:0e:67:d5:fe:dd:c1:e3:d5:fa:59:e5: 4e:3e:43:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYq31BgFDvx6BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjBkNmIyNzctOGQ4OS00Y2Y2LWE4ZWItMGM2YTA3ZjYzMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcxBvK1hIHhxZDOHltJ6M4XGDVHzEv0/JbgA yldnSHtQCR1/h3E53iDw8KmrZxME0Ee/nDNlnEgY9NBPnSO9FxSLLCVUB5ylEVBz jnLalThvUL5d3WZ5L93YhUywUd9+L91mcMgMh3q9hdoMbAVQOOO5j7u5Hus4ICVE aj09Ef2ExH49j+vuN3jRnXZz0aWoH+B4Ea+tNnPoOZir5Zghdth5ZuQNgWG6wHY0 sLaTKEUUmlVSELDHFfIxg5yv0nBHbI2zaZ39BjfgbflTW0qMAN7/lVLVZwD3FseH DMkI/fI9tAIwhFuTvgs2VNYft/xXTyjMWAD/q7mPQIEK7uQqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLSb7wMQF8GcTteFPZfD05WcnHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxoRDYelAIq3OemXOVCtQVLgq/nwA0zxL8uY172BUCM7VyaKxb4aoD wX+CaFEJ1YJJ0KEgSubjSCeQzqYsWyINxQja/5kVSQgiWpJNQZ3xlUV2wIuAkXO1 Id4osgUy5QRthXJ1LVmo6Bx6UBxhux+OldXaaQ31XQfT03J9ddFN8coIy6J8ktgx 4uMfUMpg2xrCHIhqTgepy1miOOBDkha0uVbXTf/0gdIaRtbmKMgmGr0BXt7hCHnd IoVThJb1Ctx5q2K0cbtkehF35SFp6LZD+w5NQJQVsOOR4sOZVOQOorkeMe3yBPry STlZHxqUA5YOZ9X+3cHj1fpZ5U4+Q/M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:00 2025 by rpki-client