$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa File: c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa (raw, json) Hash identifier: /UcusoJBJjmrxfSkr29G+jeaE3z6jf7AX/YtxFLwm9E= Subject key identifier: 5B:3E:96:EB:68:A4:15:38:6E:69:64:89:12:18:75:36:66:8F:BD:89 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39CF7B6C9492B3A2DF827C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f7:b6:c9:49:2b:3a:2d:f8:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ebb35364-bc86-4169-8e37-39c5562b78de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:33:b3:f8:78:9a:4b:50:09:9c:8f:e2:08: af:1b:12:44:d0:74:fc:2f:3d:17:4b:c1:d7:2f:4f: 3e:45:d2:41:2d:e8:6a:5f:8e:a8:3d:70:ca:9c:ff: 2c:a6:c7:95:f0:67:a4:88:9e:5d:c7:65:42:5a:36: 3b:81:7e:19:69:b2:5d:b0:64:c8:64:34:b7:44:fc: bc:1d:00:2e:21:e6:4b:6e:eb:96:bf:98:9b:45:0a: 3b:f7:fb:67:78:09:98:66:17:a2:76:cd:18:e6:3a: 33:57:77:fa:27:20:87:58:b1:3a:13:d0:bb:38:36: e9:d8:25:1c:01:c4:9d:4a:b2:d1:c3:4c:5f:56:5d: 9d:41:20:50:f5:6f:b3:87:1d:33:da:ff:98:73:2f: aa:cd:42:ab:f6:2d:54:a8:50:46:7f:e9:03:e2:4f: 7a:f9:3c:b4:16:30:41:8b:a4:a6:08:5f:f1:a9:35: 3c:b3:63:d9:08:c4:94:6b:94:a0:98:d2:fa:33:bd: 42:65:87:a0:4c:e6:a0:c8:a0:55:1e:0d:d2:56:b8: f9:74:21:63:1b:b4:a3:f5:4e:e3:7b:f9:b8:89:8f: 6a:9b:dd:dc:24:96:fa:f8:2c:fa:f8:69:aa:8b:fc: 3a:1f:8b:68:b1:f2:f5:66:cb:5a:17:32:a5:ef:63: ff:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3E:96:EB:68:A4:15:38:6E:69:64:89:12:18:75:36:66:8F:BD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:91:3e:f1:e6:00:91:d2:18:3d:8c:5d:53:3d:c1:b5:df:a2: dc:e7:02:56:21:25:ab:4e:70:7b:b0:51:3c:17:e8:f4:92:8e: 59:ac:0b:94:a8:eb:0c:8f:cd:d7:1c:f6:f6:38:15:7e:14:91: fb:ad:f9:70:b0:73:4d:49:cc:a0:b2:63:d1:d5:4e:a6:49:72: 30:49:df:30:6a:45:47:c0:14:84:fa:c0:b1:32:4c:d8:9d:90: c9:1e:e5:97:55:7a:09:73:e8:77:06:f4:d1:29:91:7b:6a:8a: 77:a2:e4:14:72:67:45:d2:10:e0:37:16:14:29:8e:6f:9e:be: 5e:58:1e:14:32:1e:8f:50:3a:c6:a5:8f:6a:42:07:2b:6b:5f: 45:36:63:d7:03:cc:c1:5d:de:d3:0b:46:66:af:ab:ef:6c:8f: 54:fe:af:11:ea:39:20:f7:a9:a3:55:64:a5:88:d2:1e:37:3f: e6:8e:84:d8:40:78:af:ed:fa:e3:c2:63:f8:be:ae:3a:d2:60: d9:56:e4:b3:ba:64:26:7a:4c:cf:b3:71:9c:08:03:bd:e1:a3: ac:62:6e:ae:74:37:70:5d:bf:26:a0:b7:58:2f:00:0b:14:05: 34:1c:8d:be:4e:97:19:a5:89:8f:56:16:09:b2:7a:ec:55:88: 39:9e:28:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPe2yUkrOi34J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWJiMzUzNjQtYmM4Ni00MTY5LThlMzctMzljNTU2MmI3OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnwzs/h4mktQCZyP4givGxJE0HT8Lz0XS8HX L08+RdJBLehqX46oPXDKnP8spseV8GekiJ5dx2VCWjY7gX4ZabJdsGTIZDS3RPy8 HQAuIeZLbuuWv5ibRQo79/tneAmYZheids0Y5jozV3f6JyCHWLE6E9C7ODbp2CUc AcSdSrLRw0xfVl2dQSBQ9W+zhx0z2v+Ycy+qzUKr9i1UqFBGf+kD4k96+Ty0FjBB i6SmCF/xqTU8s2PZCMSUa5SgmNL6M71CZYegTOagyKBVHg3SVrj5dCFjG7Sj9U7j e/m4iY9qm93cJJb6+Cz6+Gmqi/w6H4tosfL1ZstaFzKl72P/PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs+lutopBU4bmlkiRIYdTZmj72JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzkyM2M2YmItZmM3Mi0z ZmFhLTk5YTEtM2NlZjQyYzRmMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyRPvHmAJHSGD2MXVM9wbXfotznAlYhJatOcHuwUTwX6PSSjlmsC5So 6wyPzdcc9vY4FX4Ukfut+XCwc01JzKCyY9HVTqZJcjBJ3zBqRUfAFIT6wLEyTNid kMke5ZdVeglz6HcG9NEpkXtqinei5BRyZ0XSEOA3FhQpjm+evl5YHhQyHo9QOsal j2pCBytrX0U2Y9cDzMFd3tMLRmavq+9sj1T+rxHqOSD3qaNVZKWI0h43P+aOhNhA eK/t+uPCY/i+rjrSYNlW5LO6ZCZ6TM+zcZwIA73ho6xibq50N3Bdvyagt1gvAAsU BTQcjb5OlxmliY9WFgmyeuxViDmeKMU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:03 2025 by rpki-client