$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/6c3894ce-ca5a-34e4-bd09-e63b4ac01b73.roa File: 6c3894ce-ca5a-34e4-bd09-e63b4ac01b73.roa (raw, json) Hash identifier: P5I4oI/oVbLuP4VhB1BjIhpH3iWQRrHS3/AipatXveA= Subject key identifier: 6D:22:AD:68:4B:D6:93:8E:EF:EC:45:BD:03:74:05:F9:C9:25:9C:5B Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D072B1301714665770E00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/6c3894ce-ca5a-34e4-bd09-e63b4ac01b73.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:07:2b:13:01:71:46:65:77:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0aacb992-c920-4e0b-863e-79a2bff8c0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b4:58:d8:17:14:27:6b:f5:ff:51:d0:2e:01: f6:8e:ae:31:e4:a4:4f:ca:bb:ba:ca:52:77:3c:91: b2:27:b0:f6:d6:54:74:bd:cb:04:00:65:4e:73:96: b1:14:66:6e:2f:92:df:eb:7e:64:6f:59:03:fe:ea: 30:68:2c:91:b6:44:b9:dd:63:a7:1f:39:4b:24:0d: d2:26:9f:8e:c4:72:43:ad:93:fa:d0:72:dc:e4:1f: b4:93:9d:b7:23:0e:14:75:03:2f:03:89:fd:9b:2e: 0a:47:bc:bd:9d:52:22:b2:de:a8:dd:3c:5d:af:05: 12:89:82:a8:08:f8:b7:24:30:e0:80:46:75:c4:e0: 1f:f0:71:6f:9f:4a:c1:cd:38:3c:f9:c0:36:f8:09: 29:e5:42:8f:df:de:f2:2f:f0:11:89:f0:c9:a6:0c: 31:b3:64:31:2a:f0:c2:1b:c6:3e:f5:3a:20:f1:59: 55:d8:d8:e3:2e:15:29:dc:bf:4b:4d:d1:5a:ce:b6: 61:88:88:40:1b:8c:86:b5:19:6e:38:e2:8d:8a:32: 0c:77:b0:64:ea:d8:fc:1c:7f:91:6b:72:15:43:27: 7c:ca:ee:09:68:35:d8:c1:40:66:d4:3c:c6:5a:95: 2c:d9:fb:55:60:7e:ea:76:20:3b:40:12:93:b4:e2: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:22:AD:68:4B:D6:93:8E:EF:EC:45:BD:03:74:05:F9:C9:25:9C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/6c3894ce-ca5a-34e4-bd09-e63b4ac01b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:82:54:c9:ea:ea:22:eb:2a:1b:88:35:0b:92:28:48:01:8f: 55:6e:61:af:24:e3:6f:f9:ce:5f:dc:6d:4e:b9:cf:fa:be:38: b9:2a:93:e4:76:30:a1:10:a7:0b:87:34:22:95:1c:1e:b1:f2: 11:f4:ad:e0:4e:83:11:a3:1e:c2:af:fd:d0:26:3f:cf:ab:85: 87:26:bb:bc:82:23:ae:79:9c:26:a7:e3:7b:28:63:35:28:b2: 78:b0:c2:ed:fd:24:69:25:c9:f4:98:db:e8:2b:dc:ad:bc:88: 57:bd:a5:94:b7:1f:1d:0b:a4:aa:5d:ad:41:23:d4:ec:02:4b: da:e6:5e:e9:0e:8f:3e:6d:c0:5f:3f:fc:94:50:53:bd:0d:5f: 43:13:c8:4a:9b:5b:7b:91:4e:e6:1b:39:80:8e:4f:8d:7b:ea: ed:12:0d:8f:2a:30:d2:97:ff:c8:a5:f5:25:49:fe:50:fc:82: d1:5d:e0:96:67:d6:6e:95:78:46:2e:0f:fa:f6:5b:0b:35:89: 16:f1:b6:99:24:f3:f3:1e:67:da:fc:06:14:c3:4a:6a:25:b9: 20:68:e1:1f:4c:1c:88:d4:87:15:2a:a3:59:39:b3:04:ee:2f: 7c:bd:2d:6c:1e:26:95:d8:e8:fe:4e:6a:2c:91:11:c2:cc:e3: b0:f1:41:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQcrEwFxRmV3DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGFhY2I5OTItYzkyMC00ZTBiLTg2M2UtNzlhMmJmZjhjMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLRY2BcUJ2v1/1HQLgH2jq4x5KRPyru6ylJ3 PJGyJ7D21lR0vcsEAGVOc5axFGZuL5Lf635kb1kD/uowaCyRtkS53WOnHzlLJA3S Jp+OxHJDrZP60HLc5B+0k523Iw4UdQMvA4n9my4KR7y9nVIist6o3TxdrwUSiYKo CPi3JDDggEZ1xOAf8HFvn0rBzTg8+cA2+Akp5UKP397yL/ARifDJpgwxs2QxKvDC G8Y+9Tog8VlV2NjjLhUp3L9LTdFazrZhiIhAG4yGtRluOOKNijIMd7Bk6tj8HH+R a3IVQyd8yu4JaDXYwUBm1DzGWpUs2ftVYH7qdiA7QBKTtOI2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0irWhL1pOO7+xFvQN0BfnJJZxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNmMzODk0Y2UtY2E1YS0z NGU0LWJkMDktZTYzYjRhYzAxYjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4PGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqCVMnq6iLrKhuINQuSKEgBj1VuYa8k42/5zl/cbU65z/q+OLkqk+R2 MKEQpwuHNCKVHB6x8hH0reBOgxGjHsKv/dAmP8+rhYcmu7yCI655nCan43soYzUo sniwwu39JGklyfSY2+gr3K28iFe9pZS3Hx0LpKpdrUEj1OwCS9rmXukOjz5twF8/ /JRQU70NX0MTyEqbW3uRTuYbOYCOT4176u0SDY8qMNKX/8il9SVJ/lD8gtFd4JZn 1m6VeEYuD/r2Wws1iRbxtpkk8/MeZ9r8BhTDSmoluSBo4R9MHIjUhxUqo1k5swTu L3y9LWweJpXY6P5OaiyREcLM47DxQbE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:51:49 2025 by rpki-client