$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa File: a3476e4c-4fec-3283-b242-377f154d7059.roa (raw, json) Hash identifier: 4K6UDzwNTNBuGcWHGb/RLCObhSP93NxL8Nun6GA/RFE= Subject key identifier: AE:E2:1B:85:FB:0B:20:AC:A4:A3:D0:0B:9D:AD:E2:32:EE:54:FF:0B Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0DA5FA694C7C7752D24A0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:da:5f:a6:94:c7:c7:75:2d:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=c9f030b5-1ed9-420a-bd4a-99ec7c266a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:af:33:db:c0:6b:49:e2:df:47:d9:87:29: 99:4b:08:64:c0:fa:15:b4:28:34:60:c1:c2:f1:36: ac:d9:be:98:bb:13:b3:54:3f:67:ca:2b:34:5c:bc: 2a:92:fb:a8:92:72:a7:42:11:12:d6:4a:55:05:ea: 3d:95:55:7c:ac:59:ce:70:c7:65:77:e1:65:d5:84: 90:58:65:35:54:7b:e6:9b:f6:c0:d0:e0:f1:ea:c0: 06:73:3f:14:ad:47:38:7f:26:3b:60:c4:4d:bc:df: ef:ac:a9:28:ff:8c:8f:b4:6a:76:0c:ab:19:8f:55: 48:c5:38:bc:a4:dc:69:c4:84:6d:26:77:e1:16:a9: cb:96:70:bb:fb:32:41:f9:70:9e:20:5b:ff:57:8a: 4c:e1:c1:76:53:88:20:60:f8:70:a9:cb:06:d5:76: a5:82:6f:b8:94:55:27:33:6a:d2:c1:bc:20:7e:06: 52:e0:73:eb:d5:b7:ee:fb:03:6b:25:15:17:9e:ff: 80:62:a0:9f:c2:29:50:96:09:e6:74:69:e3:5d:00: 2c:59:13:67:52:47:23:2a:1f:d5:30:44:97:19:5f: 39:69:71:28:bf:bb:19:09:1f:ec:5b:be:36:96:8c: 13:b6:5c:15:26:9c:10:a8:99:c7:e3:38:f7:b7:82: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:1B:85:FB:0B:20:AC:A4:A3:D0:0B:9D:AD:E2:32:EE:54:FF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a3476e4c-4fec-3283-b242-377f154d7059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:3f:54:be:5a:fd:fd:1f:09:d1:b4:a0:7c:f0:73:6d:d3: e9:ff:bd:15:99:1a:cd:4c:27:30:66:8a:59:b4:a5:45:34:d7: 78:85:9e:5f:1b:2a:c5:3c:92:84:d3:dc:0a:8f:cd:bb:e3:f2: 2d:7f:3b:b4:a4:18:2b:62:81:c8:d8:8d:e3:7d:12:3d:f5:0a: f2:a1:84:e2:f2:3f:3f:ac:39:73:28:c9:ff:20:3f:39:82:87: 02:ba:00:bb:87:c7:c6:ed:8d:ea:91:76:3e:47:26:3f:ff:ed: 61:16:8f:b7:f5:98:04:08:c2:c3:f3:fd:aa:59:b3:99:fd:59: 33:aa:d6:6f:4d:91:6f:e4:2b:52:a3:54:05:69:73:ee:11:c2: f5:55:8b:e5:69:d7:98:38:99:d2:b2:22:f0:b6:8b:82:73:af: c3:3d:4e:1f:59:3e:04:d8:4e:2f:e0:7e:6f:1c:48:5e:a9:a1: 4a:31:ea:88:5a:26:48:f2:9d:fb:c5:d8:a9:27:2e:9e:f5:9d: 70:da:d3:db:29:4d:0e:00:64:4e:a8:cf:f2:8b:0e:d9:1b:34: 9f:1f:51:57:78:a4:26:b0:fe:4b:14:39:e3:20:8b:fc:6c:b0: ce:8c:1f:cc:5f:04:eb:a2:62:8a:af:e7:cf:51:73:54:ac:90: 0e:d6:47:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NpfppTHx3UtJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzlmMDMwYjUtMWVkOS00MjBhLWJkNGEtOTllYzdjMjY2YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4yvM9vAa0ni30fZhymZSwhkwPoVtCg0YMHC 8Tas2b6YuxOzVD9nyis0XLwqkvuoknKnQhES1kpVBeo9lVV8rFnOcMdld+Fl1YSQ WGU1VHvmm/bA0ODx6sAGcz8UrUc4fyY7YMRNvN/vrKko/4yPtGp2DKsZj1VIxTi8 pNxpxIRtJnfhFqnLlnC7+zJB+XCeIFv/V4pM4cF2U4ggYPhwqcsG1Xalgm+4lFUn M2rSwbwgfgZS4HPr1bfu+wNrJRUXnv+AYqCfwilQlgnmdGnjXQAsWRNnUkcjKh/V MESXGV85aXEov7sZCR/sW742lowTtlwVJpwQqJnH4zj3t4JchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7iG4X7CyCspKPQC52t4jLuVP8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTM0NzZlNGMtNGZlYy0z MjgzLWIyNDItMzc3ZjE1NGQ3MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgkP1S+Wv39HwnRtKB88HNt0+n/vRWZGs1MJzBmilm0pUU013iFnl8b KsU8koTT3AqPzbvj8i1/O7SkGCtigcjYjeN9Ej31CvKhhOLyPz+sOXMoyf8gPzmC hwK6ALuHx8btjeqRdj5HJj//7WEWj7f1mAQIwsPz/apZs5n9WTOq1m9NkW/kK1Kj VAVpc+4RwvVVi+Vp15g4mdKyIvC2i4Jzr8M9Th9ZPgTYTi/gfm8cSF6poUox6oha JkjynfvF2KknLp71nXDa09spTQ4AZE6oz/KLDtkbNJ8fUVd4pCaw/ksUOeMgi/xs sM6MH8xfBOuiYoqv589Rc1SskA7WR2k= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:14 2025 by rpki-client