$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa File: 429c2c19-e860-3ce9-8432-d4cd3f987677.roa (raw, json) Hash identifier: tc5zNqnNPuD9daaIckTZzKk6c1xqIJuACo1I9n3QAn0= Subject key identifier: B4:9E:0D:37:2E:A6:E8:AB:6C:E6:4B:DA:62:AA:BE:88:47:50:4E:DC Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D06970C880108E5E56EC0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:97:0c:88:01:08:e5:e5:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0132321b-e9f5-4f7c-9a5a-9d1b8a078476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:71:53:db:e5:a6:e7:fc:50:2f:82:c6:71: d3:72:ac:c0:1b:2b:99:97:df:f1:ff:1e:9f:45:89: cb:af:92:65:dc:15:d4:c5:59:4f:99:37:f4:71:16: e8:1a:ab:e6:67:9a:a7:b8:d2:c3:c1:9d:03:0c:83: 81:18:b2:2e:b1:84:3e:7a:2a:4a:ca:a4:88:ea:3f: d3:34:5e:c8:97:95:97:81:28:39:aa:69:59:f0:02: 50:d0:12:34:90:1e:27:98:82:55:13:a2:be:2d:79: 16:3a:27:ad:93:27:8d:13:65:c7:10:ae:f7:0c:34: e3:cf:87:a7:8c:ee:a0:8a:29:de:87:6b:53:a2:1a: 17:11:f2:22:73:96:73:0c:75:90:c3:33:d7:35:f5: dd:cf:30:45:0b:5f:1f:b8:19:18:7f:07:63:bc:70: fa:6e:c8:5c:de:3e:4c:e7:24:78:b8:a7:c7:95:79: c0:4a:69:95:9f:17:01:49:50:b0:c5:c6:30:c9:04: c5:91:7d:41:62:d0:6f:7a:14:52:d1:77:94:be:43: d2:1d:38:df:c0:9c:30:c6:13:8b:cd:8f:48:fa:30: 29:ef:99:17:da:f1:1e:96:0a:19:ca:80:6a:5c:aa: 0e:83:39:f4:48:3b:25:e8:68:02:ca:fe:1f:91:58: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:0D:37:2E:A6:E8:AB:6C:E6:4B:DA:62:AA:BE:88:47:50:4E:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:76:2e:15:aa:ee:9d:87:6b:d4:c8:1a:77:65:4e:a9:85:a0: 00:00:fe:15:34:69:4c:62:c9:16:28:0d:7f:c7:f4:4d:33:b1: 5a:af:61:06:65:c3:bb:8e:45:02:6f:70:be:ab:c6:98:44:e7: 3f:e9:eb:e4:52:b2:08:11:07:53:7f:b2:6c:38:58:3e:ac:f2: 56:16:d7:cc:2f:e2:7d:d4:5e:67:ab:c5:6b:b4:99:d8:e4:ac: 6d:91:09:58:89:31:5a:4c:f0:81:33:4a:9a:83:e2:dc:37:ee: 3a:09:da:08:94:6e:0b:5b:db:bb:e3:96:74:5e:8c:bc:fc:ce: 1b:c8:57:9f:8b:36:27:d9:d6:c0:55:3d:2d:d6:3a:db:23:2a: 36:fd:f9:3e:97:39:f4:fd:6e:b5:01:f0:00:99:91:d1:23:39: 21:60:c5:55:33:a8:fe:8f:69:cb:cf:dc:9d:21:63:af:18:8a: 43:4c:33:4d:d1:48:34:90:4b:ce:23:82:d0:f5:fb:fe:8d:ed: c9:b6:1e:27:ed:8b:92:95:e0:77:c8:55:53:44:3e:5c:44:63: a4:e0:c1:06:2a:10:53:1f:ea:12:98:a9:69:58:e6:5f:54:71: eb:4b:97:4f:0a:f2:c8:2e:62:53:ed:5a:92:57:17:c3:07:d5: 9a:d4:55:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQaXDIgBCOXlbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDEzMjMyMWItZTlmNS00ZjdjLTlhNWEtOWQxYjhhMDc4NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6RxU9vlpuf8UC+CxnHTcqzAGyuZl9/x/x6f RYnLr5Jl3BXUxVlPmTf0cRboGqvmZ5qnuNLDwZ0DDIOBGLIusYQ+eipKyqSI6j/T NF7Il5WXgSg5qmlZ8AJQ0BI0kB4nmIJVE6K+LXkWOietkyeNE2XHEK73DDTjz4en jO6giineh2tTohoXEfIic5ZzDHWQwzPXNfXdzzBFC18fuBkYfwdjvHD6bshc3j5M 5yR4uKfHlXnASmmVnxcBSVCwxcYwyQTFkX1BYtBvehRS0XeUvkPSHTjfwJwwxhOL zY9I+jAp75kX2vEelgoZyoBqXKoOgzn0SDsl6GgCyv4fkVi+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSeDTcupuirbOZL2mKqvohHUE7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5YzJjMTktZTg2MC0z Y2U5LTg0MzItZDRjZDNmOTg3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4MSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG52LhWq7p2Ha9TIGndlTqmFoAAA/hU0aUxiyRYoDX/H9E0zsVqvYQZl w7uORQJvcL6rxphE5z/p6+RSsggRB1N/smw4WD6s8lYW18wv4n3UXmerxWu0mdjk rG2RCViJMVpM8IEzSpqD4tw37joJ2giUbgtb27vjlnRejLz8zhvIV5+LNifZ1sBV PS3WOtsjKjb9+T6XOfT9brUB8ACZkdEjOSFgxVUzqP6PacvP3J0hY68YikNMM03R SDSQS84jgtD1+/6N7cm2Hifti5KV4HfIVVNEPlxEY6TgwQYqEFMf6hKYqWlY5l9U cetLl08K8sguYlPtWpJXF8MH1ZrUVas= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:25 2025 by rpki-client