$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa File: a3476e4c-4fec-3283-b242-377f154d7059.roa (raw, json) Hash identifier: TetaSQNys63m3cim9xInWF2xpZj/T5jsEeCoYQgjM14= Subject key identifier: DD:8A:6C:3E:5B:AA:D2:CD:5A:A9:43:A8:8E:E4:AF:96:CB:1F:51:EF Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39CF8AE8CDE5C0C0A619780 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f8:ae:8c:de:5c:0c:0a:61:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=54dfc8e9-8a1a-4bb6-92a3-00af2759103b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:0f:ff:f9:40:b5:e0:3f:7e:9d:97:1a:eb: db:01:3a:ce:6a:d3:ed:0f:d9:79:bd:77:3a:b3:c7: f8:09:80:4c:74:89:fc:c5:c7:43:4e:de:52:2c:79: fb:7e:04:e8:8f:d5:15:03:58:bd:cb:17:1e:a8:4c: 98:1d:61:2e:10:22:33:be:2e:45:9e:a7:17:d3:e4: 6a:fb:19:ee:8c:14:57:55:71:76:f7:f4:e5:b1:00: 94:12:49:fa:26:e3:7c:9d:7f:3a:7d:d9:09:15:23: d0:46:af:32:bd:63:58:64:a4:df:68:7f:c0:d9:e5: 00:d0:68:d6:d4:8f:bb:af:17:47:16:c7:0d:39:af: 04:c9:b1:28:61:0a:84:3b:86:aa:c0:bf:7c:85:c1: d1:72:84:7c:19:5c:b2:29:f3:db:f1:8a:e2:18:ab: dc:54:0a:b6:91:67:c4:34:ca:24:d8:a9:62:b9:ab: 79:72:0f:98:e0:18:32:5f:47:f1:6e:6f:63:49:a1: 6c:4f:f5:3a:d8:12:91:18:df:bd:86:51:92:93:c2: d6:74:74:26:e0:87:f7:54:80:50:45:e5:5d:cb:f0: 7b:24:5d:97:eb:93:97:f8:d0:db:13:81:2a:14:95: 5a:af:80:c9:a2:9b:5e:9e:b8:7b:93:04:40:f0:c4: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:6C:3E:5B:AA:D2:CD:5A:A9:43:A8:8E:E4:AF:96:CB:1F:51:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a1:14:7d:c7:a9:69:e0:30:1d:da:ee:3f:df:05:85:8a:0b: 51:c8:2d:5b:fc:fb:0a:98:74:39:76:46:f7:46:1a:2d:57:f3: f3:00:c6:b4:58:c7:2a:7e:c1:71:8b:48:fd:85:f9:8a:0f:39: 02:5d:5e:b4:57:9c:fd:20:3c:09:3b:62:9a:6c:25:70:66:09: 63:f5:3b:5a:da:70:1d:e4:77:e6:58:07:0b:f1:75:ed:ae:b6: f7:ac:78:78:30:b6:54:9c:e2:62:77:aa:63:d4:88:a0:56:0d: 7c:2f:35:3b:1d:0a:84:41:9d:f9:e0:6e:f9:4f:3d:0a:0d:8d: 63:56:16:ea:82:6c:ca:6b:a7:ca:f4:d7:e3:ce:29:4e:03:48: 38:87:cb:fc:88:9a:18:e2:e3:c8:2a:08:8f:29:cc:9f:92:42: ed:17:c1:35:b8:04:95:78:87:8a:ce:75:07:e1:1a:03:b3:68: 3c:c1:1f:d0:d8:f7:be:e7:37:73:f1:2c:10:41:d1:26:94:dd: 9a:58:69:55:a9:8f:d9:3a:4b:71:49:99:f9:b5:30:41:b6:ab: 86:7e:13:67:21:ba:b1:e3:28:1f:e9:96:e0:7b:ca:39:49:9c: 10:5f:02:ef:ea:39:82:8c:b3:92:04:13:7f:28:85:5a:69:3e: 04:83:61:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPiujN5cDAphl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTRkZmM4ZTktOGExYS00YmI2LTkyYTMtMDBhZjI3NTkxMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGkP//lAteA/fp2XGuvbATrOatPtD9l5vXc6 s8f4CYBMdIn8xcdDTt5SLHn7fgToj9UVA1i9yxceqEyYHWEuECIzvi5FnqcX0+Rq +xnujBRXVXF29/TlsQCUEkn6JuN8nX86fdkJFSPQRq8yvWNYZKTfaH/A2eUA0GjW 1I+7rxdHFscNOa8EybEoYQqEO4aqwL98hcHRcoR8GVyyKfPb8YriGKvcVAq2kWfE NMok2Kliuat5cg+Y4BgyX0fxbm9jSaFsT/U62BKRGN+9hlGSk8LWdHQm4If3VIBQ ReVdy/B7JF2X65OX+NDbE4EqFJVar4DJoptenrh7kwRA8MSUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2KbD5bqtLNWqlDqI7kr5bLH1HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTM0NzZlNGMtNGZlYy0z MjgzLWIyNDItMzc3ZjE1NGQ3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIehFH3HqWngMB3a7j/fBYWKC1HILVv8+wqYdDl2RvdGGi1X8/MAxrRY xyp+wXGLSP2F+YoPOQJdXrRXnP0gPAk7YppsJXBmCWP1O1racB3kd+ZYBwvxde2u tveseHgwtlSc4mJ3qmPUiKBWDXwvNTsdCoRBnfngbvlPPQoNjWNWFuqCbMprp8r0 1+POKU4DSDiHy/yImhji48gqCI8pzJ+SQu0XwTW4BJV4h4rOdQfhGgOzaDzBH9DY 977nN3PxLBBB0SaU3ZpYaVWpj9k6S3FJmfm1MEG2q4Z+E2churHjKB/pluB7yjlJ nBBfAu/qOYKMs5IEE38ohVppPgSDYWM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:33 2025 by rpki-client