$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa File: 6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa (raw, json) Hash identifier: BfDSSFYwWlmYGsvs/La8iZ1g5H3lKzSvVbn4kmX0HoU= Subject key identifier: 26:7A:3C:2C:8F:B8:9D:FD:71:F5:87:DE:7A:E9:69:6B:6C:8F:A2:22 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B1AD18677152894F73821CF00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 25645 IP address blocks: 137.239.214.0/24 maxlen: 24 209.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:86:77:15:28:94:f7:38:21:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6fa3f446-6aff-4725-9dd6-2a65455c100d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:d9:81:20:34:40:d9:af:12:44:d6:e9:13: b2:d6:4c:dd:a0:ab:75:f5:09:71:86:1e:5e:09:23: a1:33:ec:7e:8e:23:62:ad:f5:88:84:4f:50:0e:76: 9d:bb:85:fa:3e:ea:c7:2b:97:98:2b:8f:33:02:e1: 74:b5:2c:37:23:ee:3f:d0:82:64:96:fd:10:25:3c: a0:70:15:fe:da:74:c5:95:f6:7d:01:f3:b2:f9:e6: 86:84:c5:b7:89:b3:5e:e3:dd:28:51:94:6a:4e:d2: 23:77:71:6a:e6:3e:47:6f:60:15:f8:e0:3e:ed:30: 62:fb:d9:b8:bb:15:ee:1d:65:a7:63:d5:75:74:33: 83:c7:c6:58:71:5a:dc:97:a3:d5:bd:ac:62:94:d0: 69:80:2f:20:d2:69:5b:48:5a:81:79:7f:53:fb:6a: 08:6a:42:72:e6:0e:c4:c3:e9:53:4e:32:73:15:cf: 09:7e:2c:d9:98:3f:98:56:68:a7:c0:09:cb:e2:a4: b8:11:5c:f0:90:d6:8e:8d:b0:9b:ff:9a:f0:22:65: 41:80:fd:1e:8d:85:16:ea:a1:d9:56:a7:d7:12:96: 2c:7e:c3:e2:f1:1f:45:59:2c:c3:18:ee:6b:89:ee: f4:b4:6f:27:9e:fe:75:bb:01:5b:27:c9:84:54:65: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7A:3C:2C:8F:B8:9D:FD:71:F5:87:DE:7A:E9:69:6B:6C:8F:A2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 209.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a6:94:d9:cb:98:5c:5f:ab:2e:3a:c5:a4:20:1d:5b:bb:a2: bb:31:27:59:6f:ea:d4:59:40:f0:db:6a:6d:a2:2b:52:a0:a2: ab:2c:72:c9:10:0e:41:18:93:d6:74:c9:48:86:65:9b:92:5f: 08:7c:1e:49:22:2b:65:9d:8c:ef:0a:54:d3:cb:db:90:be:05: a9:02:72:2d:8a:8b:28:a9:07:3f:0d:f0:51:05:3c:a9:7b:71: e0:b0:b4:0e:b4:be:3e:36:c1:dc:49:c0:57:3c:3b:c4:c6:a0: f4:c9:90:a2:65:8c:05:4c:3c:14:e8:89:17:59:a4:32:33:5d: cc:53:c6:9e:63:7e:61:88:51:10:b3:93:74:d3:a4:5f:04:7f: 1f:30:67:80:b6:70:7e:aa:88:49:04:a4:6f:15:6c:ca:02:15: 8e:e7:d1:23:03:42:f2:ca:98:4f:53:8a:5f:b6:79:c4:59:31: 66:c7:1d:c6:b1:dd:0a:af:1e:e2:7d:46:06:d2:81:52:c9:b6: 5e:c4:9a:62:9d:4b:f5:13:7f:a9:45:65:ca:3a:19:46:29:4b: a0:41:99:0f:65:f1:34:1e:46:b8:cb:fc:ac:0b:12:ee:e9:62: 58:4e:54:0a:ef:a4:e4:68:ef:4d:53:7b:e1:ab:a5:b6:a3:26: b1:4f:5e:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsa0YZ3FSiU9zghzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NmZhM2Y0NDYtNmFmZi00NzI1LTlkZDYtMmE2NTQ1NWMxMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3bZgSA0QNmvEkTW6ROy1kzdoKt19Qlxhh5e CSOhM+x+jiNirfWIhE9QDnadu4X6PurHK5eYK48zAuF0tSw3I+4/0IJklv0QJTyg cBX+2nTFlfZ9AfOy+eaGhMW3ibNe490oUZRqTtIjd3Fq5j5Hb2AV+OA+7TBi+9m4 uxXuHWWnY9V1dDODx8ZYcVrcl6PVvaxilNBpgC8g0mlbSFqBeX9T+2oIakJy5g7E w+lTTjJzFc8JfizZmD+YVminwAnL4qS4EVzwkNaOjbCb/5rwImVBgP0ejYUW6qHZ VqfXEpYsfsPi8R9FWSzDGO5rie70tG8nnv51uwFbJ8mEVGV40wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCZ6PCyPuJ39cfWH3nrpaWtsj6IiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNjkxNWNiNTEtYjg1MS0z YmY1LWFhZjUtYTg5ZWEzOWFkNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAie/WAwQA 0bL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHCmlNnLmFxfqy46xaQgHVu7orsxJ1lv6tRZQPDbam2iK1Kg oqsscskQDkEYk9Z0yUiGZZuSXwh8HkkiK2WdjO8KVNPL25C+BakCci2KiyipBz8N 8FEFPKl7ceCwtA60vj42wdxJwFc8O8TGoPTJkKJljAVMPBToiRdZpDIzXcxTxp5j fmGIURCzk3TTpF8Efx8wZ4C2cH6qiEkEpG8VbMoCFY7n0SMDQvLKmE9Til+2ecRZ MWbHHcax3QqvHuJ9RgbSgVLJtl7EmmKdS/UTf6lFZco6GUYpS6BBmQ9l8TQeRrjL /KwLEu7pYlhOVArvpORo701Te+GrpbajJrFPXnA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:18 2025 by rpki-client