$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa File: fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa (raw, json) Hash identifier: Jo43k2Go/T8XxnThlM8wQJDzitkndC6B0/oX+ZlX5u4= Subject key identifier: 0E:05:68:45:5B:7D:80:9A:84:47:85:61:C5:F7:F5:68:60:13:7C:20 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D07ACEB83384546202083CB40 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 26502 IP address blocks: 137.239.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:eb:83:38:45:46:20:20:83:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=c6845e7c-34fc-4617-ae9d-302dee51157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:a0:99:d6:b4:a6:53:ff:45:4e:72:07:37: ef:06:2b:a2:6e:1a:5b:f2:12:d0:5f:f7:e1:8c:96: 92:a0:ab:9a:6a:46:ab:21:64:76:84:b6:ef:35:17: 7d:9d:16:5c:10:c6:a2:c7:d1:fa:42:45:c9:23:59: 49:30:ac:e6:f4:fe:1f:c1:9e:75:39:2c:3b:ca:46: b9:c9:00:b9:ee:48:27:5e:b4:bb:5c:e6:cb:79:d7: 43:c9:56:e5:dc:4f:d3:9b:fe:d7:64:ff:82:b2:4e: b5:01:94:3d:4e:6c:b5:b2:d1:4d:53:67:8f:ed:b7: 4d:b7:69:ab:45:87:8e:71:a8:02:2d:c4:74:b1:e1: 12:a2:c6:c9:51:4c:e1:48:51:87:0b:db:9c:71:50: 69:40:68:6e:d4:8f:8e:da:b7:f1:c2:a1:e4:ad:12: 50:4a:1e:af:f6:e1:08:3a:9c:75:62:67:40:5a:77: 36:c0:2b:52:e2:10:8d:fb:b8:9a:e8:9a:5e:c7:89: 68:84:cc:01:83:68:b8:d5:6d:37:93:e1:70:cd:76: 04:ad:38:ce:f9:f4:0f:69:ec:fb:6b:87:a1:6e:37: 1c:eb:c7:26:1c:8d:78:90:01:6c:7d:7b:98:31:ef: f5:b0:82:91:6a:3b:a3:ff:6b:9c:c7:ef:a2:7a:f5: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:68:45:5B:7D:80:9A:84:47:85:61:C5:F7:F5:68:60:13:7C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fe:a9:29:6e:5a:3f:b3:45:af:7a:0b:02:ff:ce:a6:c2:67: a2:f3:0c:08:47:2f:70:57:78:18:2a:13:69:a0:c8:b0:d1:95: 95:c0:8b:d3:6c:92:ec:bb:2e:b4:32:6d:fe:18:ed:a1:9a:a4: b9:72:55:e3:b1:91:45:31:a9:6b:be:0b:41:f0:88:a6:3b:e4: d1:cf:83:27:57:81:37:43:58:4b:49:29:e0:8c:c3:b3:09:01: e1:09:ae:59:89:7f:44:17:05:45:49:13:f2:71:f4:b3:36:e4: bb:1a:fe:bc:9b:34:64:e4:73:19:d7:9d:81:6e:06:7b:cd:b5: bc:80:df:6d:be:7a:42:86:2f:25:4c:71:48:fb:f4:93:ee:22: 0f:d2:11:6f:dc:7a:20:3c:86:9a:ea:90:8b:cb:38:6b:af:85: 29:5d:34:a0:7e:61:06:4c:a7:a0:59:78:3f:da:48:58:dd:5e: 2b:d0:95:54:3e:5d:83:9b:96:49:1c:a9:45:cb:7a:68:8c:b9: 3d:e9:64:4f:65:58:18:2a:49:15:30:76:0e:a9:e1:7c:3c:f0: c7:9c:e7:4e:67:57:3e:56:b8:92:fb:62:cc:e0:07:d7:ab:29: b7:51:43:4e:8d:db:fb:1c:aa:a8:cf:30:4e:88:ca:82:3c:15: e7:50:e5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOuDOEVGICCDy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YzY4NDVlN2MtMzRmYy00NjE3LWFlOWQtMzAyZGVlNTExNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfegmda0plP/RU5yBzfvBiuibhpb8hLQX/fh jJaSoKuaakarIWR2hLbvNRd9nRZcEMaix9H6QkXJI1lJMKzm9P4fwZ51OSw7yka5 yQC57kgnXrS7XObLeddDyVbl3E/Tm/7XZP+Csk61AZQ9Tmy1stFNU2eP7bdNt2mr RYeOcagCLcR0seESosbJUUzhSFGHC9uccVBpQGhu1I+O2rfxwqHkrRJQSh6v9uEI Opx1YmdAWnc2wCtS4hCN+7ia6Jpex4lohMwBg2i41W03k+FwzXYErTjO+fQPaez7 a4ehbjcc68cmHI14kAFsfXuYMe/1sIKRajuj/2ucx++ievWYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4FaEVbfYCahEeFYcX39WhgE3wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmM5MTMxNjYtNWI5Yy0z NzU3LWJiM2EtNmVkNWFkOTgzZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb+qSluWj+zRa96CwL/zqbCZ6LzDAhHL3BXeBgqE2mgyLDRlZXAi9Ns kuy7LrQybf4Y7aGapLlyVeOxkUUxqWu+C0HwiKY75NHPgydXgTdDWEtJKeCMw7MJ AeEJrlmJf0QXBUVJE/Jx9LM25Lsa/rybNGTkcxnXnYFuBnvNtbyA322+ekKGLyVM cUj79JPuIg/SEW/ceiA8hprqkIvLOGuvhSldNKB+YQZMp6BZeD/aSFjdXivQlVQ+ XYOblkkcqUXLemiMuT3pZE9lWBgqSRUwdg6p4Xw88Mec505nVz5WuJL7YszgB9er KbdRQ06N2/scqqjPME6IyoI8FedQ5e8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:25 2026 by rpki-client