$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa File: 4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json) Hash identifier: 3kedrp0Qg4YbIcE1M5EkEWrShD371SNCH7wVMW7k2Fg= Subject key identifier: 18:6C:55:CC:F4:2C:6A:73:49:A9:8F:22:94:C4:85:4C:5A:B5:A8:02 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39CF77DE07C232E39479240 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f7:7d:e0:7c:23:2e:39:47:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=e7599521-04ef-4924-b383-e21c50f7d415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:a7:bc:b7:38:58:84:45:7f:76:9b:d3:3c: a0:9e:45:07:64:b3:9c:26:9f:3d:79:09:8a:7f:23: 8e:52:37:79:f4:81:9f:d0:99:90:9d:67:1e:2e:07: 90:cb:44:d7:07:10:e6:55:ef:60:8a:03:3d:c7:70: 87:a9:4d:49:ba:28:a3:f7:c1:4c:45:a3:a1:4e:fc: 0f:aa:e8:c8:59:46:92:df:a9:8d:dd:18:2d:2a:e0: 8f:13:58:50:ce:d7:4d:75:2a:c6:61:00:4b:1d:0f: 93:df:6f:96:54:87:59:ca:9c:3d:e8:b5:8a:2c:99: d6:c0:2f:22:74:0e:95:a8:3d:0a:8d:7b:da:81:7a: 8e:15:7e:9e:2b:62:05:21:f8:0d:82:3d:fe:80:03: e2:00:1c:b8:0d:6c:60:ae:1b:f8:f5:a2:b1:92:af: 21:54:71:d5:4f:38:ea:c6:a7:79:bb:d6:60:b2:f3: c2:12:8a:13:4b:9e:31:29:0c:c1:22:73:11:6e:1a: 7d:a7:a9:cd:ab:00:8e:58:fa:90:af:dd:c4:4e:30: dd:40:39:90:00:3e:4f:72:ec:87:6d:83:d9:be:78: 1d:db:e4:06:3d:29:ac:28:7a:b5:fe:dd:ba:4d:9b: 3a:bb:88:e5:11:ad:d0:12:4b:db:77:3c:4e:4b:3d: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:55:CC:F4:2C:6A:73:49:A9:8F:22:94:C4:85:4C:5A:B5:A8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:4e:64:21:46:2a:e2:d4:5f:41:d9:e8:b6:00:da:a8:d9: ff:f8:49:6d:e7:9c:a6:a9:af:aa:03:ed:7d:52:bf:f6:c6:a2: e0:fb:62:db:cc:02:e0:be:0d:b1:db:84:13:23:81:78:2a:86: d1:34:f5:d4:92:9d:19:49:d0:ea:b5:7c:ac:bc:36:6c:4c:bb: 50:0c:4d:2a:7b:0e:46:ec:25:37:7c:41:51:3f:86:f1:2f:10: 7b:5d:26:d2:3c:4c:8e:89:ed:5c:b6:75:d1:6a:81:43:1f:83: d2:9f:2d:29:a9:8b:81:7c:fe:10:a8:76:d1:5a:19:7f:af:40: bf:73:35:b7:83:39:ff:d0:4c:12:ed:2c:c8:05:14:2c:e6:be: 27:29:6d:c9:2e:64:38:ea:2f:c3:2f:37:a4:40:c1:db:fe:10: c3:c8:6f:3a:d6:75:c6:be:34:e5:28:93:6e:42:47:77:b7:92: d7:f5:e4:04:7c:fc:80:92:85:89:24:ff:4d:86:74:16:bb:b9: 5b:25:31:79:af:9c:3c:41:f4:94:dc:b5:fa:99:3c:2f:62:f8: b0:72:8e:33:31:0f:9a:56:c4:8f:1b:52:34:c0:ed:3f:99:06: e9:1d:47:e7:7c:09:fc:b6:50:7f:06:11:e3:00:bf:66:33:c1: 77:42:88:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPd94HwjLjlHkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZTc1OTk1MjEtMDRlZi00OTI0LWIzODMtZTIxYzUwZjdkNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+KnvLc4WIRFf3ab0zygnkUHZLOcJp89eQmK fyOOUjd59IGf0JmQnWceLgeQy0TXBxDmVe9gigM9x3CHqU1Juiij98FMRaOhTvwP qujIWUaS36mN3RgtKuCPE1hQztdNdSrGYQBLHQ+T32+WVIdZypw96LWKLJnWwC8i dA6VqD0KjXvagXqOFX6eK2IFIfgNgj3+gAPiABy4DWxgrhv49aKxkq8hVHHVTzjq xqd5u9ZgsvPCEooTS54xKQzBInMRbhp9p6nNqwCOWPqQr93ETjDdQDmQAD5PcuyH bYPZvngd2+QGPSmsKHq1/t26TZs6u4jlEa3QEkvbdzxOSz3HQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhsVcz0LGpzSamPIpTEhUxatagCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGQyZTExNTMtMzNmOS0z ZDcwLWEyZDEtZGM5NTQ1MzIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSTmQhRiri1F9B2ei2ANqo2f/4SW3nnKapr6oD7X1Sv/bGouD7YtvM AuC+DbHbhBMjgXgqhtE09dSSnRlJ0Oq1fKy8NmxMu1AMTSp7DkbsJTd8QVE/hvEv EHtdJtI8TI6J7Vy2ddFqgUMfg9KfLSmpi4F8/hCodtFaGX+vQL9zNbeDOf/QTBLt LMgFFCzmvicpbckuZDjqL8MvN6RAwdv+EMPIbzrWdca+NOUok25CR3e3ktf15AR8 /ICShYkk/02GdBa7uVslMXmvnDxB9JTctfqZPC9i+LByjjMxD5pWxI8bUjTA7T+Z BukdR+d8Cfy2UH8GEeMAv2YzwXdCiGo= -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:09 2025 by rpki-client