$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa File: 42912333-afc3-37c3-8220-48f78f67a106.roa (raw, json) Hash identifier: EBR7OM2KQlMkJ1Naq651ZRSpr6x7nZjUAkixDkEY1yo= Subject key identifier: 70:C4:7F:81:AB:35:DA:5C:A2:93:90:16:86:A8:95:25:AC:13:2F:D4 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D06A8F0ADC632F0574540 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:a8:f0:ad:c6:32:f0:57:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=94235aa0-fcae-4ff6-b039-8f5d6189043f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:1b:9f:7b:4f:a0:21:82:72:f3:ea:ac:8d: a7:75:5f:2e:79:2a:41:8a:ed:ce:b4:7c:c4:95:b8: ed:28:a6:f3:71:61:f4:21:e8:0d:02:71:0c:eb:df: 56:d9:df:1a:48:10:a9:da:ad:83:87:08:99:65:40: 95:30:b1:fb:5d:9e:0c:4e:37:2b:b2:4d:f8:e2:72: ed:0d:cd:a7:82:dc:af:c7:f3:69:aa:dc:27:63:98: f4:25:2b:58:c4:38:86:10:97:e4:61:13:1e:f0:a6: 86:db:5c:b4:9e:e8:5d:3d:83:cd:13:f7:b3:80:09: 93:91:c2:b2:9d:d4:7c:bf:41:17:0d:a0:50:66:77: 61:07:2b:b1:81:55:fb:5e:fa:cc:34:a6:51:ac:84: 72:e9:e0:2e:66:82:2e:99:b2:44:31:9f:3b:e7:01: 6c:0e:0f:09:ca:f8:42:3d:03:d0:ad:34:33:73:97: 77:ed:9b:a0:3c:50:4f:f4:25:4e:50:e0:5e:39:ba: f4:26:c9:65:1e:58:7d:8b:40:b6:19:3e:57:4a:db: 86:34:10:3e:31:80:2a:5f:68:75:06:49:2a:67:b1: f2:ce:6b:80:f8:d4:fd:45:43:90:b7:31:ee:ab:ac: f2:97:f9:ed:cd:b4:e6:74:91:d0:39:9c:b3:e1:bd: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:7F:81:AB:35:DA:5C:A2:93:90:16:86:A8:95:25:AC:13:2F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/42912333-afc3-37c3-8220-48f78f67a106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cb:5a:f2:4a:30:78:9a:53:ef:34:7c:2b:78:29:9c:0f:6e: 1e:a4:55:11:7d:c8:5f:5b:6a:ed:7b:77:63:27:ee:02:a1:78: 17:dd:f5:e7:d5:7a:93:0b:1c:63:91:6d:1a:b9:c1:4f:48:fe: 6b:92:26:c1:31:a0:1c:94:4a:a3:1f:00:bb:11:03:19:0f:e0: 87:47:be:f9:55:ca:99:73:a9:4f:e2:5d:8a:78:21:b8:d7:67: 39:f3:b0:4f:e9:7e:ac:24:96:be:7a:6f:17:66:06:06:71:91: 43:bb:2f:b8:52:1c:41:70:8a:62:5c:a0:3a:a0:76:18:1a:2d: a0:37:f6:96:07:67:51:3b:82:c2:98:ea:cc:eb:67:ab:2b:50: 45:8c:4e:70:3e:0f:2b:18:bf:e4:92:10:ea:e2:37:70:fd:f5: a9:22:df:0d:53:eb:48:79:ca:72:05:9b:c6:76:4a:25:ac:85: 82:fe:f6:d0:ad:88:06:ab:5f:2b:4f:1d:eb:b0:1a:a8:17:8e: 86:db:3b:9a:8b:3f:bd:3e:4e:12:59:9b:ca:a7:19:68:a8:67: 28:04:01:2c:9f:71:84:99:34:5c:2b:2e:4a:a9:c2:c6:e4:19: 20:af:ea:59:10:bd:3f:be:9a:7d:20:71:69:45:42:31:e9:61: e6:29:90:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQao8K3GMvBXRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTQyMzVhYTAtZmNhZS00ZmY2LWIwMzktOGY1ZDYxODkwNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK4bn3tPoCGCcvPqrI2ndV8ueSpBiu3OtHzE lbjtKKbzcWH0IegNAnEM699W2d8aSBCp2q2DhwiZZUCVMLH7XZ4MTjcrsk344nLt Dc2ngtyvx/NpqtwnY5j0JStYxDiGEJfkYRMe8KaG21y0nuhdPYPNE/ezgAmTkcKy ndR8v0EXDaBQZndhByuxgVX7XvrMNKZRrIRy6eAuZoIumbJEMZ875wFsDg8JyvhC PQPQrTQzc5d37ZugPFBP9CVOUOBeObr0JsllHlh9i0C2GT5XStuGNBA+MYAqX2h1 BkkqZ7HyzmuA+NT9RUOQtzHuq6zyl/ntzbTmdJHQOZyz4b0FCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDEf4GrNdpcopOQFoaolSWsEy/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5MTIzMzMtYWZjMy0z N2MzLTgyMjAtNDhmNzhmNjdhMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXLWvJKMHiaU+80fCt4KZwPbh6kVRF9yF9bau17d2Mn7gKheBfd9efV epMLHGORbRq5wU9I/muSJsExoByUSqMfALsRAxkP4IdHvvlVyplzqU/iXYp4IbjX ZznzsE/pfqwklr56bxdmBgZxkUO7L7hSHEFwimJcoDqgdhgaLaA39pYHZ1E7gsKY 6szrZ6srUEWMTnA+DysYv+SSEOriN3D99aki3w1T60h5ynIFm8Z2SiWshYL+9tCt iAarXytPHeuwGqgXjobbO5qLP70+ThJZm8qnGWioZygEASyfcYSZNFwrLkqpwsbk GSCv6lkQvT++mn0gcWlFQjHpYeYpkBQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:32 2025 by rpki-client