$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8b6dc8ac-0d59-3900-8dcb-bdaa639a7b51.roa File: 8b6dc8ac-0d59-3900-8dcb-bdaa639a7b51.roa (raw, json) Hash identifier: FCmo3j7utaWiCTlJB3VjwatCvbOBgOTgPL9Tq47c7wE= Subject key identifier: 97:21:A1:A4:6F:25:3C:F2:1D:7C:EF:6A:00:05:AD:51:4D:44:5B:E6 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0DA48DF7BCBF0D0979048 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8b6dc8ac-0d59-3900-8dcb-bdaa639a7b51.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:da:48:df:7b:cb:f0:d0:97:90:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=254f8e6c-48a9-4794-9cfc-1879ef404bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:6e:bb:51:1f:ce:01:35:8f:b8:cd:4b:cb: 6b:a7:3b:01:48:3e:ad:d4:5e:48:05:7c:49:f7:d3: c0:df:52:84:89:ae:cf:3b:4e:e1:f0:a4:89:6d:4d: cf:be:60:63:fe:d0:53:d0:8c:59:51:71:9e:97:db: 09:71:27:03:41:df:1a:88:33:2c:bb:f4:e3:a5:8c: 89:91:c9:78:8d:00:af:42:8a:a1:15:79:22:6d:3d: 1e:5a:46:60:43:1b:00:b5:3a:11:37:9d:f4:10:de: 90:48:bd:1c:50:7f:6a:ff:c1:d5:62:aa:36:b9:3e: 36:10:26:13:72:a6:34:16:0c:cf:f6:88:2e:34:2f: 9e:1b:90:23:18:6f:b6:ca:73:e3:be:02:99:51:a5: 75:79:a0:5f:0d:7d:ec:6d:88:59:d9:fb:aa:51:74: 80:e6:08:be:4e:c6:4f:dc:fe:f2:ed:22:78:92:77: d2:44:74:7c:ee:3f:bc:1f:9d:89:5e:67:d1:e7:b2: 43:9f:cb:a9:b8:97:1a:34:3a:5b:9e:1b:b6:45:67: 53:3d:37:4b:41:a4:c6:04:2e:21:f7:51:60:22:01: 08:fb:c0:b8:66:0d:f0:97:96:07:30:ef:be:ac:67: 18:d2:d3:0c:84:51:a0:7a:3a:06:7f:53:08:cf:24: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:21:A1:A4:6F:25:3C:F2:1D:7C:EF:6A:00:05:AD:51:4D:44:5B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8b6dc8ac-0d59-3900-8dcb-bdaa639a7b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c7:21:9b:94:d9:0e:b9:d4:32:45:b0:39:d9:03:1e:85:bf: 04:a1:27:aa:4c:5e:fe:30:f6:25:c0:d0:a1:78:aa:86:c1:4c: 8e:5d:c3:bb:0c:21:4a:4f:23:20:6e:07:67:33:f7:27:e1:ff: 0f:ab:f4:fe:e2:3d:93:fb:e2:1c:2e:1b:97:a9:3a:d1:d8:28: 13:05:84:67:21:75:96:8c:21:6a:fa:2f:89:a6:a2:0d:66:88: f8:2a:14:bd:44:76:bf:6c:b4:73:2f:6e:94:08:21:c9:78:1f: 17:f4:a4:2e:37:75:99:31:37:f1:66:7a:6a:03:25:b0:4c:33: 94:c6:17:65:84:6f:43:81:90:3c:51:81:30:75:66:c6:16:2e: d7:66:94:b6:1d:1d:4c:6f:59:7c:fb:8f:8d:67:2a:8d:bd:d2: ce:5e:43:d3:8c:92:78:5f:42:61:ee:53:ba:b3:ae:89:78:7b: a3:9d:b7:8a:d1:f2:cb:3d:fe:e8:53:b7:2c:c4:da:30:91:4b: d0:1d:d8:41:89:68:cb:1c:e8:77:38:35:0f:a3:5a:ae:58:7c: a4:65:9e:c4:9b:12:fe:5d:07:84:23:74:c2:c1:57:d4:da:e3: 72:d1:44:c5:b0:9d:36:01:77:9b:0f:d3:4a:19:e0:21:a3:db: 71:c4:11:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NpI33vL8NCXkEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjU0ZjhlNmMtNDhhOS00Nzk0LTljZmMtMTg3OWVmNDA0YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSVuu1EfzgE1j7jNS8trpzsBSD6t1F5IBXxJ 99PA31KEia7PO07h8KSJbU3PvmBj/tBT0IxZUXGel9sJcScDQd8aiDMsu/TjpYyJ kcl4jQCvQoqhFXkibT0eWkZgQxsAtToRN530EN6QSL0cUH9q/8HVYqo2uT42ECYT cqY0FgzP9oguNC+eG5AjGG+2ynPjvgKZUaV1eaBfDX3sbYhZ2fuqUXSA5gi+TsZP 3P7y7SJ4knfSRHR87j+8H52JXmfR57JDn8upuJcaNDpbnhu2RWdTPTdLQaTGBC4h 91FgIgEI+8C4Zg3wl5YHMO++rGcY0tMMhFGgejoGf1MIzySnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJchoaRvJTzyHXzvagAFrVFNRFvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvOGI2ZGM4YWMtMGQ1OS0z OTAwLThkY2ItYmRhYTYzOWE3YjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3HIZuU2Q651DJFsDnZAx6FvwShJ6pMXv4w9iXA0KF4qobBTI5dw7sM IUpPIyBuB2cz9yfh/w+r9P7iPZP74hwuG5epOtHYKBMFhGchdZaMIWr6L4mmog1m iPgqFL1Edr9stHMvbpQIIcl4Hxf0pC43dZkxN/FmemoDJbBMM5TGF2WEb0OBkDxR gTB1ZsYWLtdmlLYdHUxvWXz7j41nKo290s5eQ9OMknhfQmHuU7qzrol4e6Odt4rR 8ss9/uhTtyzE2jCRS9Ad2EGJaMsc6Hc4NQ+jWq5YfKRlnsSbEv5dB4QjdMLBV9Ta 43LRRMWwnTYBd5sP00oZ4CGj23HEEcg= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:31 2025 by rpki-client