$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa File: c67d0528-a5bc-3583-8b32-802b61fb538c.roa (raw, json) Hash identifier: AykN7qGkfHcUzNFEHThQLlJpbx+iPfGyrRa2bWGHSdY= Subject key identifier: 86:70:67:C4:91:5D:71:94:B0:79:F9:81:96:B1:C4:73:79:94:B2:D8 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39CF81265FA60D59A1BFD60 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f8:12:65:fa:60:d5:9a:1b:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0c3f7309-20ec-426d-9028-cc54f64a20d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:08:19:80:80:ad:df:b9:ff:ad:0f:a2:bf: 88:0b:d3:c7:b9:51:93:76:55:e9:8d:85:4c:e7:97: 96:c8:b1:d7:65:70:38:b0:15:00:da:c6:eb:66:a1: b1:af:10:fa:d4:a4:e5:09:fe:ae:d2:cb:e3:bb:d9: ad:2e:1b:7b:4f:c7:b1:67:ac:18:d1:c8:f9:2f:05: 99:9c:a2:28:63:7c:31:54:9f:7b:9a:d9:cc:94:18: 43:aa:30:e9:6d:4b:94:25:b3:b3:b9:d3:b0:59:80: 4b:31:c5:b1:cb:65:e5:5c:dc:87:57:98:5a:2b:26: 8b:f3:6f:df:d3:ed:70:ac:aa:1a:00:32:63:01:7b: ec:e9:c8:5f:5e:62:7a:81:b6:b3:1c:32:b9:05:3b: f4:ec:66:ef:20:49:85:f9:04:ac:c5:29:63:72:4a: 8b:3d:fd:62:4b:8c:d5:c4:4b:c7:14:76:2d:0d:65: 92:14:d7:a2:24:dd:6d:4c:de:03:3e:c9:e5:92:83: 5c:51:7c:e8:77:d9:23:12:e7:b0:c4:d4:53:50:13: 44:cc:5b:8f:c9:46:e1:7c:9f:a6:6f:e2:13:99:c4: 21:a9:96:17:eb:0a:59:dd:94:71:f9:d1:c4:fe:5f: af:cf:1e:2d:6e:f6:1d:42:e3:b7:c4:22:44:86:e4: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:67:C4:91:5D:71:94:B0:79:F9:81:96:B1:C4:73:79:94:B2:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b2:9b:c5:2a:cd:f1:8b:b4:bd:0f:9f:b5:b9:b4:d6:a2:14: d9:a6:c9:a1:3b:1f:24:0f:f7:8d:73:15:eb:08:53:d7:f7:a8: 86:7c:fe:65:6d:6f:53:d3:23:eb:f9:6a:59:34:ca:8a:36:f4: f3:4c:eb:18:e6:09:ed:00:78:ae:ec:a1:ec:80:02:b3:4e:5d: c6:59:dd:ec:c5:3a:51:4d:5b:d8:d1:15:0f:e3:86:1c:fd:d6: 8d:1b:10:88:e0:c8:1f:04:05:89:3d:aa:08:af:a1:6a:ad:63: 59:82:61:8c:36:b3:ba:06:a3:b8:b2:fe:4e:c3:e6:5f:82:9b: 68:d3:34:61:60:18:c8:70:5c:ef:f6:df:a6:c6:49:b1:91:5d: 01:fa:21:11:bb:9d:9f:23:60:8c:72:78:95:55:c0:43:04:7c: f9:b7:ab:90:58:50:7b:23:cf:95:2b:b1:b1:0a:88:ad:6a:a6: d7:4b:d4:1a:9f:45:ce:e5:08:bb:54:87:0d:f7:a8:5e:4a:fb: 3a:e1:cf:0f:5d:ff:7b:ec:f9:58:72:21:db:9d:35:c5:80:37: 37:9b:1c:7f:ed:ed:ed:f4:e4:14:8b:69:49:63:84:4d:93:13: 0a:80:ee:4f:cb:fd:bd:2a:28:3a:fb:1e:a0:24:56:e7:3b:12: 52:ba:c6:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPgSZfpg1Zob/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGMzZjczMDktMjBlYy00MjZkLTkwMjgtY2M1NGY2NGEyMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lAIGYCArd+5/60Por+IC9PHuVGTdlXpjYVM 55eWyLHXZXA4sBUA2sbrZqGxrxD61KTlCf6u0svju9mtLht7T8exZ6wY0cj5LwWZ nKIoY3wxVJ97mtnMlBhDqjDpbUuUJbOzudOwWYBLMcWxy2XlXNyHV5haKyaL82/f 0+1wrKoaADJjAXvs6chfXmJ6gbazHDK5BTv07GbvIEmF+QSsxSljckqLPf1iS4zV xEvHFHYtDWWSFNeiJN1tTN4DPsnlkoNcUXzod9kjEuewxNRTUBNEzFuPyUbhfJ+m b+ITmcQhqZYX6wpZ3ZRx+dHE/l+vzx4tbvYdQuO3xCJEhuSKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZwZ8SRXXGUsHn5gZaxxHN5lLLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzY3ZDA1MjgtYTViYy0z NTgzLThiMzItODAyYjYxZmI1MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4OuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ym8UqzfGLtL0Pn7W5tNaiFNmmyaE7HyQP941zFesIU9f3qIZ8/mVt b1PTI+v5alk0yoo29PNM6xjmCe0AeK7soeyAArNOXcZZ3ezFOlFNW9jRFQ/jhhz9 1o0bEIjgyB8EBYk9qgivoWqtY1mCYYw2s7oGo7iy/k7D5l+Cm2jTNGFgGMhwXO/2 36bGSbGRXQH6IRG7nZ8jYIxyeJVVwEMEfPm3q5BYUHsjz5UrsbEKiK1qptdL1Bqf Rc7lCLtUhw33qF5K+zrhzw9d/3vs+VhyIdudNcWANzebHH/t7e305BSLaUljhE2T EwqA7k/L/b0qKDr7HqAkVuc7ElK6xr4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:06 2025 by rpki-client