$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa File: ab4f597b-f287-3f50-a41f-1e682204b46f.roa (raw, json) Hash identifier: /j/ermVYbZvTmig+KtLCHEdloBLwn1LiaP/k8DG2E8M= Subject key identifier: 44:07:1C:F0:4A:C5:26:4A:B0:CA:7E:C8:79:46:6F:76:E3:25:59:E8 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584ABEB0D6CF3851BDAB6A400BE0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 20001 IP address blocks: 139.177.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:d6:cf:38:51:bd:ab:6a:40:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=3afc473a-3da2-4d05-8661-285e886e55c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:00:f3:a0:14:09:e8:57:67:86:f4:bc:d9: cc:d4:16:2a:86:d9:f6:5f:69:f4:df:04:22:dc:79: 03:de:98:18:fb:91:9b:5a:b0:d5:1d:f6:6e:03:8f: 63:33:c2:69:7d:54:16:6b:2c:b3:70:13:ef:e7:e3: 27:ba:37:c6:01:d4:95:88:90:21:6c:0c:b6:f9:e8: 26:9a:f0:15:ea:3a:c4:3d:ba:ea:be:f3:60:f7:ec: 97:6a:9e:62:57:da:c0:df:0f:fc:54:c6:62:5c:18: 71:43:4d:56:f1:a6:b5:66:88:96:6c:8c:0d:1b:81: 9c:b5:13:eb:e7:4a:c0:ce:f3:c5:7a:43:15:ea:77: f6:fe:ae:f0:75:09:ce:ff:0d:be:9b:76:71:7e:23: 92:e0:36:cc:2d:5b:d4:53:29:c7:00:88:52:e2:f2: 9e:df:89:43:34:70:ee:6a:20:91:d9:48:c3:51:87: ea:8a:8e:c1:ec:6e:dc:11:99:4c:47:95:a4:50:ae: 53:ad:16:2b:b0:4a:42:18:35:19:6e:42:58:06:86: 06:51:14:cf:7c:f9:82:07:6e:bd:2b:f0:35:a6:67: 22:15:14:56:e6:04:c7:f2:23:7c:17:08:af:0f:3d: 26:58:c6:ae:1f:01:83:f4:72:dd:0a:2f:bb:2d:c9: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:1C:F0:4A:C5:26:4A:B0:CA:7E:C8:79:46:6F:76:E3:25:59:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ab4f597b-f287-3f50-a41f-1e682204b46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 139.177.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:50:ef:42:03:6b:f1:eb:f6:9e:89:50:76:b9:16:39:0d:86: 77:8c:d8:48:bc:56:0d:ad:e9:4a:1a:b1:ed:57:ba:58:aa:0e: 36:2a:89:b5:a6:19:07:22:b0:a2:2e:55:07:f4:98:17:28:b5: 74:db:af:80:83:a2:54:ad:95:ee:71:e0:4b:1a:7d:eb:b5:82: 31:5f:9c:91:19:ff:a5:8b:c1:ac:ab:30:32:42:04:25:56:77: c7:8d:43:3c:3e:73:a2:42:f6:32:d6:9d:9c:a4:62:1f:c8:64: 5f:5e:7a:82:2e:90:13:d0:f1:57:08:3b:91:2b:09:ea:d8:1e: 66:b1:c5:fc:38:8a:00:a9:86:18:b6:4c:f0:c6:5b:ea:6b:26: 47:a7:93:9f:8e:3b:c8:a6:12:f4:71:57:0e:3b:f1:2c:dd:1e: 0a:9b:fe:98:8b:3e:29:d1:b9:ba:27:54:6b:45:06:18:b7:7e: f1:c3:af:2a:92:7c:60:ce:d5:ee:08:c1:27:bf:11:6a:7b:27: 29:98:08:1f:1f:b3:46:fb:cc:e8:e1:5b:ca:ef:d2:e1:d4:1c: f2:90:ea:92:10:45:fe:11:c5:e8:4d:46:1a:2e:94:1d:20:9f: 09:43:67:7d:4c:09:bf:d6:4c:ab:ee:5a:ee:b0:7d:ca:bd:ad: f1:1c:a5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sNbPOFG9q2pAC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk M2FmYzQ3M2EtM2RhMi00ZDA1LTg2NjEtMjg1ZTg4NmU1NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjecA86AUCehXZ4b0vNnM1BYqhtn2X2n03wQi 3HkD3pgY+5GbWrDVHfZuA49jM8JpfVQWayyzcBPv5+MnujfGAdSViJAhbAy2+egm mvAV6jrEPbrqvvNg9+yXap5iV9rA3w/8VMZiXBhxQ01W8aa1ZoiWbIwNG4GctRPr 50rAzvPFekMV6nf2/q7wdQnO/w2+m3ZxfiOS4DbMLVvUUynHAIhS4vKe34lDNHDu aiCR2UjDUYfqio7B7G7cEZlMR5WkUK5TrRYrsEpCGDUZbkJYBoYGURTPfPmCB269 K/A1pmciFRRW5gTH8iN8FwivDz0mWMauHwGD9HLdCi+7LclfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQHHPBKxSZKsMp+yHlGb3bjJVnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYWI0ZjU5N2ItZjI4Ny0z ZjUwLWE0MWYtMWU2ODIyMDRiNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxQ70IDa/Hr9p6JUHa5FjkNhneM2Ei8Vg2t6Uoase1XuliqDjYqibWm GQcisKIuVQf0mBcotXTbr4CDolStle5x4Esafeu1gjFfnJEZ/6WLwayrMDJCBCVW d8eNQzw+c6JC9jLWnZykYh/IZF9eeoIukBPQ8VcIO5ErCerYHmaxxfw4igCphhi2 TPDGW+prJkenk5+OO8imEvRxVw478SzdHgqb/piLPinRubonVGtFBhi3fvHDryqS fGDO1e4IwSe/EWp7JymYCB8fs0b7zOjhW8rv0uHUHPKQ6pIQRf4RxehNRhoulB0g nwlDZ31MCb/WTKvuWu6wfcq9rfEcpWA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:44 2025 by rpki-client