$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json) Hash identifier: gUv7dVL5ea1I7bePLRkXG/p8/G1ukL3NaTM339P2QlQ= Subject key identifier: D8:0A:83:25:EB:A9:9C:F2:FD:CB:03:AE:13:22:88:89:95:F8:DA:E0 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584E1E4453744FE9F95F2BD44F40 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 25645 IP address blocks: 137.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:53:74:4f:e9:f9:5f:2b:d4:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=4dc1fe79-8a47-49b2-9ce3-2b460d6d734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:a9:68:5a:36:f9:30:dc:d7:7b:c5:e4:2d: aa:7c:4c:e7:85:56:07:93:12:b0:16:9d:12:26:79: 3b:7a:bc:ed:ff:d1:29:9d:f9:08:ef:93:60:87:25: 0b:0c:16:2c:dd:b9:68:50:87:30:57:75:53:5f:09: ed:dc:0f:16:17:a8:31:00:18:ae:db:0d:da:4c:88: 24:23:74:da:a5:0d:60:4f:31:ba:2c:9b:66:99:81: c7:54:77:ef:b2:b2:76:c9:22:e8:d2:5a:d7:65:b0: d6:a0:84:da:3e:eb:f4:b5:55:43:2c:97:4f:98:39: 86:82:95:5e:69:9f:5b:d8:61:6b:71:c1:6f:41:a5: 5c:69:c1:35:df:d6:b1:d9:fa:92:16:50:25:c4:8d: e6:0e:48:5a:d0:2d:b4:14:da:71:a9:09:f8:bf:70: 64:82:df:f0:c0:3d:b5:9a:93:e3:fb:43:93:24:67: bc:e1:8c:b7:2a:92:76:49:61:56:63:82:59:d1:56: 5f:ba:7c:14:4d:84:58:9c:1a:c8:86:92:d4:06:df: 1e:2b:af:a9:74:b2:2c:9f:50:15:b4:04:c3:f9:72: fc:9c:68:23:7b:28:d3:58:a9:7e:6f:9e:79:c7:b0: 33:0f:1f:06:3f:d8:99:15:f6:a8:51:7d:c1:dc:7f: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:83:25:EB:A9:9C:F2:FD:CB:03:AE:13:22:88:89:95:F8:DA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:fd:dc:70:39:65:a2:77:cb:a7:4d:e3:24:bc:7c:52:3a:9a: cb:88:36:ee:3c:74:a5:e1:c4:ca:de:d3:33:9c:59:7b:67:8b: 1e:90:de:e9:36:a5:e6:1b:d5:06:84:d5:83:2e:be:60:b5:f3: bc:78:b9:31:19:4f:e4:ff:b3:c0:53:b7:8d:3d:1d:9a:43:57: 85:fb:51:f1:8c:d9:e9:72:44:7a:10:41:42:4a:c8:17:98:6e: a6:10:2b:a5:89:96:3d:0e:b9:ca:df:63:47:80:9a:47:a0:4a: b7:a4:22:73:2a:e0:c0:96:d2:07:7a:a2:d4:4f:16:d8:dd:f5: c0:52:b7:9e:25:fd:7f:ed:1a:21:0c:b4:c8:12:5c:b0:bb:09: 50:05:60:de:bb:24:7f:32:63:8c:2e:88:9c:a0:85:5f:38:cb: d9:fb:4f:96:01:19:a7:2a:65:1f:b3:81:dd:f5:d5:84:92:e0: 7f:64:80:c7:85:f6:41:2b:d0:0b:f3:eb:07:2a:a2:90:5b:f1: ce:c9:ff:be:a6:45:9c:0c:e6:55:d6:e0:92:19:c0:ca:e2:8f: 62:ec:19:67:e4:8a:22:11:41:3f:4f:08:59:0e:d9:d5:ce:ba: d5:83:79:dc:21:da:8c:0d:17:60:72:00:57:8e:1c:3b:dd:d4: 3a:fd:74:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFN0T+n5XyvUT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NGRjMWZlNzktOGE0Ny00OWIyLTljZTMtMmI0NjBkNmQ3MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCypaFo2+TDc13vF5C2qfEznhVYHkxKwFp0S Jnk7erzt/9EpnfkI75NghyULDBYs3bloUIcwV3VTXwnt3A8WF6gxABiu2w3aTIgk I3TapQ1gTzG6LJtmmYHHVHfvsrJ2ySLo0lrXZbDWoITaPuv0tVVDLJdPmDmGgpVe aZ9b2GFrccFvQaVcacE139ax2fqSFlAlxI3mDkha0C20FNpxqQn4v3Bkgt/wwD21 mpPj+0OTJGe84Yy3KpJ2SWFWY4JZ0VZfunwUTYRYnBrIhpLUBt8eK6+pdLIsn1AV tATD+XL8nGgjeyjTWKl+b555x7AzDx8GP9iZFfaoUX3B3H/AlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgKgyXrqZzy/csDrhMiiImV+NrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn93HA5ZaJ3y6dN4yS8fFI6msuINu48dKXhxMre0zOcWXtnix6Q3uk2 peYb1QaE1YMuvmC187x4uTEZT+T/s8BTt409HZpDV4X7UfGM2elyRHoQQUJKyBeY bqYQK6WJlj0OucrfY0eAmkegSrekInMq4MCW0gd6otRPFtjd9cBSt54l/X/tGiEM tMgSXLC7CVAFYN67JH8yY4wuiJyghV84y9n7T5YBGacqZR+zgd311YSS4H9kgMeF 9kEr0Avz6wcqopBb8c7J/76mRZwM5lXW4JIZwMrij2LsGWfkiiIRQT9PCFkO2dXO utWDedwh2owNF2ByAFeOHDvd1Dr9dK0= -----END CERTIFICATE-----Generated at Sat Jun 13 23:06:57 2026 by rpki-client