$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa File: 4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json) Hash identifier: QmRPTgH3OP8U+V2xLz7SMrF8T3SkY9CGjcZHyt4IJcw= Subject key identifier: E2:0F:A2:00:8C:7A:8A:20:91:B6:B4:6F:26:B0:5A:7C:C9:22:16:14 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0D8F583FD37BFF5983D1C Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d8:f5:83:fd:37:bf:f5:98:3d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=7eb929ed-a29b-4d23-ae68-7407e466c3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:26:45:a9:fa:fc:33:19:b1:30:33:1e:03: 09:e1:f6:09:23:26:e7:29:8c:e8:43:33:04:c4:3e: 05:09:95:02:78:50:1c:16:a4:73:1e:02:b8:30:19: 0e:ff:36:ac:ef:03:60:d9:cc:93:d2:63:24:0b:50: 6d:58:f8:9e:b0:5e:62:c6:00:8b:04:af:8b:e0:de: e9:07:b5:4f:90:e3:c7:13:f9:25:06:3d:ef:7f:ac: 7e:f1:cb:0f:c8:0a:e0:32:34:5a:08:c9:d5:5a:17: 6b:6e:9d:ec:9b:35:01:63:09:a5:24:1e:c5:ca:0b: cc:7a:eb:e6:9d:46:73:d8:2c:c1:fe:45:83:3e:95: 8b:37:3a:6c:9a:af:cc:82:f5:bf:83:5d:24:96:7a: e3:88:1e:dd:75:7b:d1:1d:75:e2:1e:80:05:5a:17: ec:94:fd:93:85:03:2d:25:fb:17:4f:95:b1:05:54: c0:2e:83:c6:6e:79:b7:d7:8c:70:23:dc:59:c3:cc: 77:ac:a3:d5:24:c2:35:25:d1:bb:98:6e:13:35:22: d3:e4:7f:80:5e:6c:ec:1a:98:dc:df:e8:98:57:43: ec:29:e9:34:99:5f:94:59:e1:5f:24:f8:27:b1:78: d5:fe:75:c4:33:8e:e6:e4:ab:b6:90:1f:a7:c3:64: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:A2:00:8C:7A:8A:20:91:B6:B4:6F:26:B0:5A:7C:C9:22:16:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f3:74:a7:96:3a:b2:4a:98:8f:b3:bc:e8:bb:45:36:8f:36: d9:df:1e:59:85:90:19:da:68:3e:84:e7:92:7c:6f:9f:24:06: cf:17:43:a6:d4:1d:16:34:b5:d1:e8:53:d0:ce:58:41:8b:a6: 17:f8:89:34:84:32:9a:11:c2:c3:20:76:db:f5:3d:84:ea:4e: e5:08:0c:32:fc:6f:ae:30:c9:66:17:12:07:30:a9:71:af:b7: 51:0c:76:58:0e:9a:84:f8:2b:5f:27:47:53:e3:b7:e0:f1:cc: 3b:fd:77:6c:ef:ac:1a:3c:d2:d4:b2:e9:22:c0:06:3b:fb:f0: 8d:2b:2d:0e:76:fc:fc:f9:72:be:03:4f:fc:42:19:a3:6e:0e: 70:ab:33:7d:1b:a7:8c:50:3c:e2:2a:6f:d2:95:58:80:24:3e: f0:67:e7:98:6b:76:98:4d:97:39:99:fd:e7:ff:39:95:d5:5b: a7:59:b5:7a:b6:be:31:1a:d9:d5:35:08:6d:36:21:ff:a6:17: 7d:c9:b4:f5:e3:86:41:75:8c:57:f3:11:97:17:37:77:4e:5f: 32:44:12:4b:b7:11:0e:50:a9:1c:8e:cd:fb:bd:d5:18:1c:0e: c3:27:49:5d:8a:6a:2e:18:58:82:82:59:01:ba:3d:f3:7c:d7: 59:fc:ca:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nj1g/03v/WYPRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2ViOTI5ZWQtYTI5Yi00ZDIzLWFlNjgtNzQwN2U0NjZjM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrEmRan6/DMZsTAzHgMJ4fYJIybnKYzoQzME xD4FCZUCeFAcFqRzHgK4MBkO/zas7wNg2cyT0mMkC1BtWPiesF5ixgCLBK+L4N7p B7VPkOPHE/klBj3vf6x+8csPyArgMjRaCMnVWhdrbp3smzUBYwmlJB7FygvMeuvm nUZz2CzB/kWDPpWLNzpsmq/MgvW/g10klnrjiB7ddXvRHXXiHoAFWhfslP2ThQMt JfsXT5WxBVTALoPGbnm314xwI9xZw8x3rKPVJMI1JdG7mG4TNSLT5H+AXmzsGpjc 3+iYV0PsKek0mV+UWeFfJPgnsXjV/nXEM47m5Ku2kB+nw2T2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIPogCMeoogkba0byawWnzJIhYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGQyZTExNTMtMzNmOS0z ZDcwLWEyZDEtZGM5NTQ1MzIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7zdKeWOrJKmI+zvOi7RTaPNtnfHlmFkBnaaD6E55J8b58kBs8XQ6bU HRY0tdHoU9DOWEGLphf4iTSEMpoRwsMgdtv1PYTqTuUIDDL8b64wyWYXEgcwqXGv t1EMdlgOmoT4K18nR1Pjt+DxzDv9d2zvrBo80tSy6SLABjv78I0rLQ52/Pz5cr4D T/xCGaNuDnCrM30bp4xQPOIqb9KVWIAkPvBn55hrdphNlzmZ/ef/OZXVW6dZtXq2 vjEa2dU1CG02If+mF33JtPXjhkF1jFfzEZcXN3dOXzJEEku3EQ5QqRyOzfu91Rgc DsMnSV2Kai4YWIKCWQG6PfN811n8yq8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:25 2025 by rpki-client