$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa File: 7d81dc4e-84a4-31f6-a430-145409787d4c.roa (raw, json) Hash identifier: Xs3Qo6Ttcv3OrNuyUabWUBNPjuY152O3LYuvC7G7M+c= Subject key identifier: B8:0B:64:9B:22:89:3C:7F:C0:63:39:38:12:C3:F8:EF:9F:AE:F9:B1 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D07AFE0D72ED9FD872000 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 138.229.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:07:af:e0:d7:2e:d9:fd:87:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=40c1d146-0e48-49af-9c8c-971e12e65007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:b1:35:c4:43:61:ba:37:f1:42:06:31:a2: 7d:be:6a:57:19:10:f7:34:8e:35:3f:90:eb:2f:50: f5:10:31:ad:9b:64:69:df:d2:1d:86:ad:2c:bf:23: 30:9b:ee:01:df:e1:20:12:94:81:92:d5:ef:d9:ae: 0f:52:8e:49:ad:84:a0:13:dc:4e:70:14:f1:5e:f7: bf:3f:bc:0a:df:7a:35:11:2f:d6:b1:15:53:21:83: 87:bc:c5:e9:55:80:2f:d5:3f:60:9c:98:ff:0e:f2: bf:7e:cf:f1:4b:c1:56:27:16:ba:a9:36:d5:e9:e1: 0c:b6:e4:ba:ed:c4:0a:8d:86:84:b3:ba:77:4c:90: a4:7c:8d:ca:ee:22:3c:99:ca:d2:74:94:c8:3a:96: 01:8c:98:97:00:7f:00:96:d7:26:7f:4c:2c:9a:6a: f5:12:8f:47:1f:f5:da:cf:3d:6e:c5:00:db:bb:fa: 87:39:a3:ea:6a:7a:66:f0:e6:d3:1a:32:d8:c1:70: ff:56:96:3e:28:30:87:45:74:7b:56:0d:4f:fe:05: 6c:bb:f6:a1:cc:ae:36:42:5b:12:e0:11:78:5d:54: 7c:a6:89:86:17:c3:eb:0a:fa:f4:89:2f:09:07:03: 2c:bf:ac:08:d0:73:14:66:c4:c7:82:b8:b6:56:b7: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0B:64:9B:22:89:3C:7F:C0:63:39:38:12:C3:F8:EF:9F:AE:F9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 138.229.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e9:8c:90:21:9d:11:af:7d:ba:d6:f8:f1:f8:69:40:94:51: a4:ee:1b:70:9e:99:d2:43:0d:b1:c5:58:3e:61:68:4d:07:23: a0:b5:fa:5f:e8:ba:08:07:d3:cd:80:60:c7:db:8e:81:a7:59: 36:95:39:38:42:2b:55:b5:13:cb:09:98:2b:4d:57:a8:ce:2b: f8:cc:24:d0:6c:f3:1c:91:84:20:86:93:cb:4f:04:02:b8:c9: f2:fb:b7:c2:07:6b:76:6c:8b:73:5a:ac:4f:be:6b:c7:91:07: ed:ca:cf:1d:87:f8:01:9f:98:a9:e2:b5:92:ff:a5:55:19:b6: 61:49:6b:01:7f:5a:21:21:d9:2a:24:37:da:c5:02:6b:f9:65: c2:8e:b6:85:50:c2:aa:53:a4:5e:59:a7:6b:5d:2d:0f:f8:65: bc:24:1d:90:f2:e4:a1:e5:31:37:b9:21:5f:08:1a:61:8a:96: be:4d:62:7e:c6:4c:2b:8c:0a:d3:0e:c5:ba:b1:e9:ce:c9:87: 08:db:ae:08:8d:cc:d0:c7:30:08:cc:a0:48:58:a1:00:9a:36: 1d:e5:89:39:a1:a1:62:1c:4c:f7:97:39:2d:5d:48:a9:1c:06: c9:ae:7d:6b:f4:42:a2:13:8d:90:cb:a0:33:5d:e1:2d:45:4b: e3:b0:e1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQev4Ncu2f2HIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDBjMWQxNDYtMGU0OC00OWFmLTljOGMtOTcxZTEyZTY1MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPSxNcRDYbo38UIGMaJ9vmpXGRD3NI41P5Dr L1D1EDGtm2Rp39Idhq0svyMwm+4B3+EgEpSBktXv2a4PUo5JrYSgE9xOcBTxXve/ P7wK33o1ES/WsRVTIYOHvMXpVYAv1T9gnJj/DvK/fs/xS8FWJxa6qTbV6eEMtuS6 7cQKjYaEs7p3TJCkfI3K7iI8mcrSdJTIOpYBjJiXAH8Altcmf0wsmmr1Eo9HH/Xa zz1uxQDbu/qHOaPqanpm8ObTGjLYwXD/VpY+KDCHRXR7Vg1P/gVsu/ahzK42QlsS 4BF4XVR8pomGF8PrCvr0iS8JBwMsv6wI0HMUZsTHgri2Vrc/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgLZJsiiTx/wGM5OBLD+O+frvmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvN2Q4MWRjNGUtODRhNC0z MWY2LWE0MzAtMTQ1NDA5Nzg3ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLpjJAhnRGvfbrW+PH4aUCUUaTuG3CemdJDDbHFWD5haE0HI6C1+l/o uggH082AYMfbjoGnWTaVOThCK1W1E8sJmCtNV6jOK/jMJNBs8xyRhCCGk8tPBAK4 yfL7t8IHa3Zsi3NarE++a8eRB+3Kzx2H+AGfmKnitZL/pVUZtmFJawF/WiEh2Sok N9rFAmv5ZcKOtoVQwqpTpF5Zp2tdLQ/4ZbwkHZDy5KHlMTe5IV8IGmGKlr5NYn7G TCuMCtMOxbqx6c7JhwjbrgiNzNDHMAjMoEhYoQCaNh3liTmhoWIcTPeXOS1dSKkc BsmufWv0QqITjZDLoDNd4S1FS+Ow4aM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:42 2025 by rpki-client