$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa File: a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa (raw, json) Hash identifier: lcKRlY1QMVXiNlF5gHgSJ73Y5LKOu0wqfJikYBuWjtI= Subject key identifier: EB:33:25:64:AD:04:9D:B5:73:BA:3E:D8:39:92:3D:A7:3D:F5:8E:E3 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0EA1C8D4DD6195C04F740 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ea:1c:8d:4d:d6:19:5c:04:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=c3a33318-cab9-47cc-ae16-fe42a3ced5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:16:c8:28:9d:c2:0c:1d:91:14:08:53:08: 0a:bd:59:21:b0:40:fb:a3:b4:01:1b:83:05:5b:37: 6f:8b:9c:9e:4a:6c:1e:cc:49:ca:d7:42:98:9a:ec: 06:6d:85:50:f8:e2:da:70:81:2d:a2:19:1f:c7:8f: 12:74:94:e9:31:5f:cd:a7:95:7c:18:f2:bd:df:e1: 6a:c2:51:46:5e:2c:00:3a:e1:7e:15:07:4b:2a:ba: 1c:12:71:bd:7e:16:d6:bb:79:84:8d:7e:58:85:a9: d5:11:27:90:e9:3a:ed:a4:aa:d3:27:d0:94:c5:74: 03:20:c1:6b:8f:1d:3f:80:3e:93:b8:a1:d1:35:8e: e2:4a:5a:e9:14:22:ad:ec:b9:2e:c6:c9:2d:74:63: 6b:e0:2f:5e:00:e0:8d:eb:e7:9f:a5:c5:4b:db:96: a1:36:d4:e7:36:b8:d8:ca:26:60:3e:52:da:a7:e7: 39:02:b7:8b:f2:48:29:0e:02:8b:9e:18:c5:55:e4: ca:9b:6d:b1:ca:f8:0c:9d:38:0e:e9:db:d6:7e:20: 64:3d:0c:55:e5:dd:da:cd:9a:fe:c4:c9:ba:90:5c: f4:f6:f2:28:cf:ff:f2:ad:55:7d:bd:27:7b:fc:54: 3d:db:c9:68:eb:2b:a5:15:9a:36:54:29:5f:23:1f: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:33:25:64:AD:04:9D:B5:73:BA:3E:D8:39:92:3D:A7:3D:F5:8E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0a:a2:ea:12:f1:c3:61:c6:8e:27:65:8b:4c:e6:23:35:fc: 4e:15:1c:9e:17:f7:c7:82:30:71:bc:8a:ed:1e:e0:f8:a3:70: 38:c6:64:c9:dd:0b:81:82:a3:75:a8:d2:12:6b:31:ba:91:b7: 5f:e9:fc:08:b9:92:60:92:2f:27:ad:ca:a9:89:4f:18:dc:4c: 4e:df:cc:f9:1e:71:d8:de:94:2e:3d:89:aa:f7:e6:86:89:ba: 02:f2:c5:97:f4:e8:42:75:2e:e0:1c:f3:ae:ce:02:27:f4:86: ca:f7:29:db:14:a7:1d:55:4d:0a:ca:1d:48:e7:54:27:6f:b7: 93:6a:5e:d3:41:85:aa:b0:c7:cf:28:37:a9:4a:b6:a3:c5:6a: b8:a6:11:28:66:9f:8a:40:3d:6c:f5:6e:d8:4f:bd:0f:a3:ba: 8f:7c:3e:45:60:29:dd:f1:af:00:c4:51:39:13:18:ac:60:1f: 01:8e:f0:1b:37:4e:d4:72:19:ee:f1:5e:cb:8b:82:62:32:55: 82:c7:6a:3c:86:4e:0f:cc:95:af:42:e3:d2:a8:92:3e:2f:31: 3a:51:19:9c:65:4d:56:51:45:fe:4d:12:c7:da:1d:b6:0a:0e: c6:df:07:b6:1b:7e:dd:e0:ad:c4:69:05:9d:4d:ba:82:9c:05: d7:9e:33:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OocjU3WGVwE90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzNhMzMzMTgtY2FiOS00N2NjLWFlMTYtZmU0MmEzY2VkNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rcWyCidwgwdkRQIUwgKvVkhsED7o7QBG4MF Wzdvi5yeSmwezEnK10KYmuwGbYVQ+OLacIEtohkfx48SdJTpMV/Np5V8GPK93+Fq wlFGXiwAOuF+FQdLKrocEnG9fhbWu3mEjX5YhanVESeQ6TrtpKrTJ9CUxXQDIMFr jx0/gD6TuKHRNY7iSlrpFCKt7LkuxsktdGNr4C9eAOCN6+efpcVL25ahNtTnNrjY yiZgPlLap+c5AreL8kgpDgKLnhjFVeTKm22xyvgMnTgO6dvWfiBkPQxV5d3azZr+ xMm6kFz09vIoz//yrVV9vSd7/FQ928lo6yulFZo2VClfIx95QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOszJWStBJ21c7o+2DmSPac99Y7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTk2NGVmMGItZjFhYS0z NjA3LWFkYTktYzhlMGMwYzk2NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0KouoS8cNhxo4nZYtM5iM1/E4VHJ4X98eCMHG8iu0e4PijcDjGZMnd C4GCo3Wo0hJrMbqRt1/p/Ai5kmCSLyetyqmJTxjcTE7fzPkecdjelC49iar35oaJ ugLyxZf06EJ1LuAc867OAif0hsr3KdsUpx1VTQrKHUjnVCdvt5NqXtNBhaqwx88o N6lKtqPFarimEShmn4pAPWz1bthPvQ+juo98PkVgKd3xrwDEUTkTGKxgHwGO8Bs3 TtRyGe7xXsuLgmIyVYLHajyGTg/Mla9C49Kokj4vMTpRGZxlTVZRRf5NEsfaHbYK DsbfB7Ybft3grcRpBZ1NuoKcBdeeM9M= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:55 2025 by rpki-client