$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: 4IK8bqclEYRDVxnKPuDofAlGSJWFWftN8cisOAFAwKY= Subject key identifier: 8F:32:F6:76:3A:94:64:18:94:C0:61:7A:D3:DC:FD:99:50:98:EE:A0 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F23C25D449A9D2A0364967700 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5d:44:9a:9d:2a:03:64:96:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=5add5da8-5af9-402e-8a29-c3aa1b5986c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:0e:7b:ad:d3:9c:4c:3a:4b:76:8c:54:0c: e7:8a:40:e3:49:10:fc:32:c8:d0:a2:d2:aa:73:3a: 71:d2:82:ac:fe:8e:f3:e3:b2:f0:f2:99:66:df:2d: 4a:0e:42:7f:a9:b4:81:de:e6:5b:6b:45:85:42:d3: e1:d2:49:6f:90:a1:af:c7:71:46:e2:3c:5c:60:a3: 4a:1f:77:f6:e8:12:06:dc:d7:4d:f9:63:78:a8:e3: dc:76:4b:e1:22:5d:d1:bd:64:85:0c:37:62:5b:34: ca:96:79:ec:87:70:65:46:bd:5a:44:51:94:3a:25: bd:42:76:a4:63:7b:78:b5:1a:3c:33:6b:f6:37:48: a5:bd:1c:35:f4:74:ce:d3:9c:15:cd:be:dc:b3:5e: 6d:cc:3e:37:4c:88:11:48:a8:91:e7:be:5f:ca:45: a4:7d:81:52:3a:ab:51:f0:fe:03:aa:76:08:cb:99: 07:36:76:d3:32:5b:a8:af:ed:7b:62:46:73:25:f6: d5:5b:9b:13:c8:07:1a:74:ab:3f:5f:2c:4a:46:aa: d7:dd:2a:50:c2:ed:97:a4:2c:f4:34:e8:64:82:8c: e5:56:a3:72:fd:88:c6:66:c3:1c:9b:32:d4:79:10: f5:46:4d:b8:b2:b2:0b:bd:32:ab:9e:c8:fe:cc:20: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:F6:76:3A:94:64:18:94:C0:61:7A:D3:DC:FD:99:50:98:EE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3f:66:8b:cd:6e:73:3a:03:05:cd:cd:23:ed:b2:e0:8f:09: d3:89:79:a1:b9:81:f6:60:21:a1:e3:b5:86:15:6e:62:28:42: de:fa:58:d4:87:ed:26:da:35:49:d7:e0:11:50:fa:59:94:0b: d1:13:88:a3:e5:db:68:d8:28:55:ce:be:af:d1:91:f8:d4:71: cb:3b:93:8f:37:09:e3:a5:7d:63:6d:d7:8f:5b:93:df:e1:27: 66:a6:20:2f:5f:55:c2:91:0f:db:d7:a2:0d:df:aa:7a:ea:a9: bd:be:a0:25:df:29:0d:4a:c3:e5:59:4d:af:04:74:ab:df:7d: b4:7e:dc:d8:5e:cf:b6:1b:df:18:9b:1a:f3:18:bb:ee:80:98: a0:3d:fe:09:28:3b:09:cd:41:5f:96:06:47:11:0b:0a:78:c5: 78:04:4f:1b:e6:29:ee:21:38:03:ff:4a:47:6e:10:56:ba:23: 10:a1:41:1c:7b:83:c4:6c:de:eb:15:9e:59:79:f0:16:f3:7f: f9:b0:56:05:29:ae:cc:f8:85:78:64:dd:a0:dd:2d:5f:13:9c: d5:50:c2:74:7d:d8:1e:cf:f3:39:c3:f4:4f:16:2b:b4:6d:b0: 01:e4:c6:c7:ad:eb:9e:21:30:1d:68:c6:e6:a0:1e:72:31:4b: 24:5b:67:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl1Emp0qA2SWdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NWFkZDVkYTgtNWFmOS00MDJlLThhMjktYzNhYTFiNTk4NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cgOe63TnEw6S3aMVAznikDjSRD8MsjQotKq czpx0oKs/o7z47Lw8plm3y1KDkJ/qbSB3uZba0WFQtPh0klvkKGvx3FG4jxcYKNK H3f26BIG3NdN+WN4qOPcdkvhIl3RvWSFDDdiWzTKlnnsh3BlRr1aRFGUOiW9Qnak Y3t4tRo8M2v2N0ilvRw19HTO05wVzb7cs15tzD43TIgRSKiR575fykWkfYFSOqtR 8P4DqnYIy5kHNnbTMluor+17YkZzJfbVW5sTyAcadKs/XyxKRqrX3SpQwu2XpCz0 NOhkgozlVqNy/YjGZsMcmzLUeRD1Rk24srILvTKrnsj+zCBUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8y9nY6lGQYlMBhetPc/ZlQmO6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4/ZovNbnM6AwXNzSPtsuCPCdOJeaG5gfZgIaHjtYYVbmIoQt76WNSH 7SbaNUnX4BFQ+lmUC9ETiKPl22jYKFXOvq/RkfjUccs7k483CeOlfWNt149bk9/h J2amIC9fVcKRD9vXog3fqnrqqb2+oCXfKQ1Kw+VZTa8EdKvffbR+3Nhez7Yb3xib GvMYu+6AmKA9/gkoOwnNQV+WBkcRCwp4xXgETxvmKe4hOAP/SkduEFa6IxChQRx7 g8Rs3usVnll58Bbzf/mwVgUprsz4hXhk3aDdLV8TnNVQwnR92B7P8znD9E8WK7Rt sAHkxset654hMB1oxuagHnIxSyRbZ7w= -----END CERTIFICATE-----Generated at Tue Sep 22 21:05:51 2026 by rpki-client