$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa File: c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa (raw, json) Hash identifier: 50kwpOBsRXqAei+WUQuxK4S4IYUZvAFTPjOsja8OYoE= Subject key identifier: 85:08:1A:A1:59:69:6A:AB:98:F5:45:82:D7:51:E1:07:56:DA:72:CE Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0D93F414C2565985A5300 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d9:3f:41:4c:25:65:98:5a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=e6d63c15-8e05-4aa0-b8da-8b902473bf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:39:ce:bc:9f:2e:3f:80:1d:5c:52:e4:70: d6:18:8e:97:c0:b1:0e:58:ba:14:56:a2:0f:f0:2d: a0:82:13:71:b8:15:55:28:bd:72:73:c5:70:9a:0a: 72:c1:15:32:da:e0:a1:78:7e:89:0c:97:6a:52:30: 83:0e:20:3b:77:ba:2b:1b:1d:97:b6:32:d2:16:c1: 4e:86:bd:b9:be:10:20:35:cb:b2:9a:3f:07:2b:82: 5a:3d:96:95:30:d3:16:d7:6e:9b:45:8b:87:54:8c: 8d:b2:11:1c:f4:cf:a5:84:ae:3b:3e:1c:a3:96:57: be:84:06:98:79:6b:6a:b4:5e:22:47:bb:53:bc:25: e5:03:7e:e1:b7:6e:95:70:21:ce:ee:1a:a7:75:69: 52:8e:53:ba:c1:75:69:59:50:7d:f0:a1:a2:41:8f: 11:4d:75:63:06:73:e1:6f:c7:4a:6a:15:da:df:b8: fd:8f:b6:cc:31:aa:36:d4:ca:4d:43:6f:26:58:7e: 08:c5:cb:7f:9a:e0:10:e8:d1:54:89:3e:56:d5:87: 04:d1:a0:27:fc:dc:00:84:26:51:f1:59:7c:a0:6a: 44:19:15:a7:63:8f:7c:9a:0c:42:5b:3d:d0:4e:7a: fe:6e:f3:bb:b0:18:df:5c:b0:c4:64:49:86:4e:c4: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:1A:A1:59:69:6A:AB:98:F5:45:82:D7:51:E1:07:56:DA:72:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c6:71:f5:8d:62:e2:f0:b5:be:33:8a:15:4f:81:f1:17:bf: 30:02:73:03:1a:d8:f2:0f:ca:d4:b8:88:b9:06:58:d0:5c:eb: 7a:94:65:09:f3:18:96:d7:f6:cf:ed:a3:bc:57:5c:bf:8f:c2: fd:fb:5f:54:51:ff:1c:9e:f8:a6:6c:b4:06:c3:b2:0c:d0:20: c9:78:b0:5e:33:cf:09:55:e5:92:15:71:cc:ea:05:cd:d1:21: 26:ca:d3:76:4d:98:0d:8c:e9:60:14:54:d0:c5:de:55:17:22: 2c:c8:cc:57:74:1e:07:9f:57:18:fd:64:ca:34:67:6e:90:55: 2f:05:de:e8:de:a7:7d:ca:54:fc:13:3c:e2:a4:2c:0d:fd:20: b4:53:a6:bc:7c:b9:4c:a9:38:ad:5d:f1:4e:c6:1f:93:26:80: ef:f1:a0:23:2f:f4:ba:7c:78:5c:5e:8f:c1:bf:7e:93:f2:98: d0:2f:4d:93:85:c7:59:59:03:c1:6d:03:12:d3:65:2e:d6:aa: 38:91:7b:c8:b3:66:e6:2b:9d:68:2c:a7:ed:4b:3f:6f:dd:42: 87:9a:e1:e0:28:44:5c:bd:f6:40:86:7d:c7:17:12:60:cc:6c: 8b:38:3d:68:7d:9e:31:59:12:fd:12:40:67:b4:71:04:46:5e: 24:a2:e2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nk/QUwlZZhaUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTZkNjNjMTUtOGUwNS00YWEwLWI4ZGEtOGI5MDI0NzNiZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngY5zryfLj+AHVxS5HDWGI6XwLEOWLoUVqIP 8C2gghNxuBVVKL1yc8VwmgpywRUy2uCheH6JDJdqUjCDDiA7d7orGx2XtjLSFsFO hr25vhAgNcuymj8HK4JaPZaVMNMW126bRYuHVIyNshEc9M+lhK47Phyjlle+hAaY eWtqtF4iR7tTvCXlA37ht26VcCHO7hqndWlSjlO6wXVpWVB98KGiQY8RTXVjBnPh b8dKahXa37j9j7bMMao21MpNQ28mWH4Ixct/muAQ6NFUiT5W1YcE0aAn/NwAhCZR 8Vl8oGpEGRWnY498mgxCWz3QTnr+bvO7sBjfXLDEZEmGTsThMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUIGqFZaWqrmPVFgtdR4QdW2nLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzkyM2M2YmItZmM3Mi0z ZmFhLTk5YTEtM2NlZjQyYzRmMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnGcfWNYuLwtb4zihVPgfEXvzACcwMa2PIPytS4iLkGWNBc63qUZQnz GJbX9s/to7xXXL+Pwv37X1RR/xye+KZstAbDsgzQIMl4sF4zzwlV5ZIVcczqBc3R ISbK03ZNmA2M6WAUVNDF3lUXIizIzFd0HgefVxj9ZMo0Z26QVS8F3ujep33KVPwT POKkLA39ILRTprx8uUypOK1d8U7GH5MmgO/xoCMv9Lp8eFxej8G/fpPymNAvTZOF x1lZA8FtAxLTZS7WqjiRe8izZuYrnWgsp+1LP2/dQoea4eAoRFy99kCGfccXEmDM bIs4PWh9njFZEv0SQGe0cQRGXiSi4ss= -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:40 2025 by rpki-client