$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa File: d0a1f707-a3b6-3064-b955-8dfcaf321300.roa (raw, json) Hash identifier: C1wHrkDRhw+sFxiKP5RMZoZcEsJywXGmOAfsAW3g5tY= Subject key identifier: 2E:0F:AD:FB:3B:61:61:BE:C0:DE:0B:2C:8D:B1:16:CA:14:45:6A:D8 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39CF8D7BD870FD6ADF939C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 138.229.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f8:d7:bd:87:0f:d6:ad:f9:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=091ca51e-6d4f-41ba-a5f0-12c09ad59a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:96:87:c4:8d:e8:ca:0e:80:54:a6:07:b7: 1d:a5:f9:83:a7:a2:13:06:44:e3:8c:01:35:6a:13: 3d:b6:71:d8:24:96:cc:bf:a9:1d:d1:eb:90:97:8b: 27:72:0e:4a:b1:50:2e:0a:02:7c:9c:2c:39:6b:05: 61:3f:5a:bb:a8:b3:25:44:55:df:00:a4:36:d9:1b: db:60:a7:b6:8f:31:48:15:c2:e1:96:48:91:d9:f1: 90:25:71:81:e5:98:66:3e:06:7d:c7:68:46:ed:ad: 68:93:f3:1b:d6:9b:05:be:19:89:68:87:66:68:ab: 20:b4:92:90:ff:09:c8:d5:57:dd:6d:06:ce:e1:3c: 7e:4a:04:5c:17:0b:65:8f:76:64:5c:46:e8:c6:dc: 70:6a:09:bb:6a:d1:52:23:46:82:48:b2:ea:cf:69: fa:3f:1b:6d:6f:20:09:b7:ce:78:19:89:46:51:ca: f1:78:09:0a:9c:78:84:3e:67:f1:c2:3f:d9:a6:af: c9:ec:24:4e:98:cc:88:57:29:b9:d2:fc:11:7e:36: 5a:d8:99:53:d0:66:3c:d0:f9:f7:0a:99:35:67:3a: a3:3f:b8:ac:78:73:aa:73:3c:99:90:cc:ca:72:c3: 59:44:50:8b:e7:3b:d8:58:c1:2f:66:54:f1:90:e4: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:AD:FB:3B:61:61:BE:C0:DE:0B:2C:8D:B1:16:CA:14:45:6A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 138.229.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7d:d7:0c:dd:a7:52:42:7e:96:e0:4f:19:55:49:dc:75:4d: 18:54:9a:40:04:a4:80:e0:41:fc:3b:a2:96:95:c0:de:4c:b1: b2:d7:eb:e3:02:af:a5:58:cb:28:61:4e:a1:7d:48:33:e9:8b: 3e:6a:cd:91:0e:72:d6:96:19:37:3f:6f:ea:3e:58:47:5b:da: ba:1e:e4:e3:d3:63:77:89:1f:8c:7a:52:92:74:0e:fc:8c:14: 34:7c:c8:0f:54:22:9b:42:82:53:d9:b4:de:c8:ad:fb:91:be: c4:83:c9:ba:ea:db:4e:ff:00:8e:32:5f:dd:5a:9c:cc:23:3c: 54:20:3d:a1:0c:74:e6:b5:4d:42:70:22:94:3a:1c:de:bc:12: 75:5d:57:90:8d:c5:9c:a5:9f:5a:cd:d8:53:6f:81:21:ad:64: 14:e7:98:58:4c:cc:96:8a:20:04:1c:e3:da:58:c1:e2:b8:80: 64:4e:61:9a:d8:33:be:d4:76:ec:b3:00:5c:ff:33:3c:6a:f1: 55:64:af:f1:32:d3:96:74:97:d3:91:cb:81:71:a7:be:bb:c5: 18:52:2c:fd:b5:b4:02:68:ec:14:be:6f:66:bf:6e:cc:2d:5e: b6:49:cb:f7:ee:bf:0b:99:54:2a:2c:9a:82:e1:7f:7b:20:b2: 37:bb:2b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPjXvYcP1q35OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDkxY2E1MWUtNmQ0Zi00MWJhLWE1ZjAtMTJjMDlhZDU5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ+Wh8SN6MoOgFSmB7cdpfmDp6ITBkTjjAE1 ahM9tnHYJJbMv6kd0euQl4sncg5KsVAuCgJ8nCw5awVhP1q7qLMlRFXfAKQ22Rvb YKe2jzFIFcLhlkiR2fGQJXGB5ZhmPgZ9x2hG7a1ok/Mb1psFvhmJaIdmaKsgtJKQ /wnI1VfdbQbO4Tx+SgRcFwtlj3ZkXEboxtxwagm7atFSI0aCSLLqz2n6PxttbyAJ t854GYlGUcrxeAkKnHiEPmfxwj/Zpq/J7CROmMyIVym50vwRfjZa2JlT0GY80Pn3 Cpk1ZzqjP7iseHOqczyZkMzKcsNZRFCL5zvYWMEvZlTxkOTzWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4Prfs7YWG+wN4LLI2xFsoURWrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDBhMWY3MDctYTNiNi0z MDY0LWI5NTUtOGRmY2FmMzIxMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV91wzdp1JCfpbgTxlVSdx1TRhUmkAEpIDgQfw7opaVwN5MsbLX6+MC r6VYyyhhTqF9SDPpiz5qzZEOctaWGTc/b+o+WEdb2roe5OPTY3eJH4x6UpJ0DvyM FDR8yA9UIptCglPZtN7IrfuRvsSDybrq207/AI4yX91anMwjPFQgPaEMdOa1TUJw IpQ6HN68EnVdV5CNxZyln1rN2FNvgSGtZBTnmFhMzJaKIAQc49pYweK4gGROYZrY M77UduyzAFz/Mzxq8VVkr/Ey05Z0l9ORy4Fxp767xRhSLP21tAJo7BS+b2a/bswt XrZJy/fuvwuZVCosmoLhf3sgsje7K+E= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:15 2025 by rpki-client