$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa File: c67d0528-a5bc-3583-8b32-802b61fb538c.roa (raw, json) Hash identifier: 502Lqk+37nZeQPF5bwQcyaRi8qHb++ZT+gjbq7x5A98= Subject key identifier: DB:F0:6E:A3:77:26:64:02:07:8F:40:5F:0C:06:A0:34:3A:C3:57:27 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0D9B4E733C16ED0540380 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d9:b4:e7:33:c1:6e:d0:54:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=822aefe7-5c3c-4878-ae5a-17587141b670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:8e:85:5c:64:5a:55:49:73:9c:7c:9f:81: eb:77:0a:1d:66:21:76:02:9f:5c:60:a9:ca:66:67: 3a:2c:e1:ca:0d:79:e0:4d:11:bb:43:c0:29:7e:ee: aa:8a:40:38:10:01:60:47:90:5f:1f:a0:f6:74:5e: f0:d9:e0:e2:7d:07:1b:87:b1:e1:3f:7b:0f:1e:1a: e0:6d:fb:a2:3f:b6:e5:50:b7:f3:9b:98:d8:17:91: f7:68:95:c6:13:0e:c3:47:d8:59:87:95:89:56:a8: bf:f0:64:60:73:b2:83:37:b6:72:ba:9c:5b:82:a6: fe:a0:1c:c9:ed:dd:5e:35:26:bd:ca:da:80:b7:b8: d0:15:c9:2a:ef:45:ba:38:18:7d:e3:29:e6:c8:e7: 02:e5:18:32:9b:5c:bd:1e:e0:b8:c7:7f:65:00:de: 6c:4f:21:48:5f:96:02:16:a5:d5:64:5c:db:e3:79: 59:a3:26:c6:b3:bb:56:b6:01:36:58:bc:16:52:9e: 78:41:a0:3e:1d:86:65:75:2e:1d:67:a5:2e:2e:7d: c2:28:ff:e5:9e:7a:32:4f:b9:27:6d:e6:36:b3:00: 65:28:16:45:af:15:5a:80:d4:03:63:74:61:30:d2: e8:af:0d:78:a7:f1:09:3e:72:60:7d:db:bb:52:3d: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:6E:A3:77:26:64:02:07:8F:40:5F:0C:06:A0:34:3A:C3:57:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:54:56:2a:83:a3:c9:7f:b6:60:de:e9:ee:b4:51:d8:31:df: 10:bf:91:a1:2a:02:9f:60:3e:25:1c:ac:dc:8f:fb:61:5f:02: c0:44:5c:34:59:d1:b7:a9:ba:64:9f:f1:87:cf:6f:6a:e3:46: b6:09:2d:55:17:08:bf:df:b4:67:3b:6c:e4:8f:db:5f:23:c2: d6:21:0c:bb:a3:cb:01:67:2e:89:b8:e5:04:7d:6b:9b:14:d1: a8:9c:24:39:19:7f:6d:d1:75:fc:09:94:4b:ed:77:55:5b:80: 22:d8:55:f6:81:e7:ff:41:49:e6:81:35:1c:5b:a5:0c:a9:64: a9:1d:f6:4f:0e:19:3f:da:c9:4e:41:d4:00:79:ce:60:88:20: 45:18:91:cd:ef:66:a7:46:10:03:9b:9b:30:a4:11:8f:45:4e: f9:35:62:43:88:ac:b6:f0:b4:ff:33:21:3c:0c:71:a2:01:bc: 67:8f:c6:65:4b:69:69:aa:4c:ed:8e:44:42:b2:43:89:af:65: 20:5d:48:99:41:81:6e:5c:3f:d6:88:bb:c0:c9:e7:8d:a9:a5: cd:8d:e4:f1:09:ec:e3:e2:ca:e3:3a:51:05:ba:3b:26:d9:c1: a6:13:ac:9d:2c:25:d0:f3:89:c1:b2:e8:c1:74:1f:e3:69:e0: 68:f9:d7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nm05zPBbtBUA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODIyYWVmZTctNWMzYy00ODc4LWFlNWEtMTc1ODcxNDFiNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl+OhVxkWlVJc5x8n4HrdwodZiF2Ap9cYKnK Zmc6LOHKDXngTRG7Q8Apfu6qikA4EAFgR5BfH6D2dF7w2eDifQcbh7HhP3sPHhrg bfuiP7blULfzm5jYF5H3aJXGEw7DR9hZh5WJVqi/8GRgc7KDN7Zyupxbgqb+oBzJ 7d1eNSa9ytqAt7jQFckq70W6OBh94ynmyOcC5Rgym1y9HuC4x39lAN5sTyFIX5YC FqXVZFzb43lZoybGs7tWtgE2WLwWUp54QaA+HYZldS4dZ6UuLn3CKP/lnnoyT7kn beY2swBlKBZFrxVagNQDY3RhMNLorw14p/EJPnJgfdu7Uj3JPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvwbqN3JmQCB49AXwwGoDQ6w1cnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzY3ZDA1MjgtYTViYy0z NTgzLThiMzItODAyYjYxZmI1MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4OuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1UViqDo8l/tmDe6e60Udgx3xC/kaEqAp9gPiUcrNyP+2FfAsBEXDRZ 0bepumSf8YfPb2rjRrYJLVUXCL/ftGc7bOSP218jwtYhDLujywFnLom45QR9a5sU 0aicJDkZf23RdfwJlEvtd1VbgCLYVfaB5/9BSeaBNRxbpQypZKkd9k8OGT/ayU5B 1AB5zmCIIEUYkc3vZqdGEAObmzCkEY9FTvk1YkOIrLbwtP8zITwMcaIBvGePxmVL aWmqTO2OREKyQ4mvZSBdSJlBgW5cP9aIu8DJ542ppc2N5PEJ7OPiyuM6UQW6OybZ waYTrJ0sJdDzicGy6MF0H+Np4Gj51zo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:46 2025 by rpki-client