$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dee659fc-95a1-337c-99f4-e610ad6cf05e.roa File: dee659fc-95a1-337c-99f4-e610ad6cf05e.roa (raw, json) Hash identifier: wjXRQzL2bZtbAn3zC7oqMyd4mG6oconYQZgFVyxgL/8= Subject key identifier: 2A:CE:DC:1D:7B:E0:C6:16:06:20:08:E7:1B:0D:33:9A:F7:88:A3:84 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0D9DEA177121DE4D5E4A0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dee659fc-95a1-337c-99f4-e610ad6cf05e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d9:de:a1:77:12:1d:e4:d5:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d1c41720-8ce3-43ab-bb29-6a233e7fe6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:2d:7e:5e:84:37:d6:a0:ab:ed:01:05:97: fe:25:de:b9:60:8e:fe:b4:0a:0e:5f:4f:39:7d:59: be:73:c6:e3:89:98:4f:f7:5b:69:eb:c1:b9:76:90: 56:1a:ad:c6:a5:5a:ea:ca:d1:80:f8:4d:71:8a:4f: 58:b7:23:4d:6c:17:f5:52:f1:be:e1:bf:f4:9a:a2: 1b:b7:05:0b:09:55:46:bd:32:88:ec:db:dd:18:51: ff:c8:60:71:a5:cf:f6:2c:4f:c2:6e:3a:97:e2:b7: 35:51:b0:9d:3e:7f:50:48:60:76:5e:38:14:83:a1: bc:20:49:02:bc:25:20:d4:fe:0b:4d:10:5a:f9:92: 42:6f:a3:30:6a:36:12:11:bb:1d:ca:46:6e:20:49: 36:1f:b0:41:9e:45:df:af:d0:81:a1:ea:32:12:d3: dd:87:cf:b2:df:bc:3d:0b:54:a9:e6:7e:02:7f:d8: 21:86:0d:e5:13:c4:1f:a7:8b:41:15:46:29:21:cb: cc:ae:62:f4:ac:ff:c2:89:e5:08:57:46:a1:08:3a: fe:76:da:31:05:38:bb:9c:8a:bb:1c:1e:e6:e9:e1: 58:f7:2b:54:31:40:04:29:a6:33:31:0f:a9:a7:58: ec:06:b5:80:6a:02:b3:39:59:0e:40:ab:6a:86:5c: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:DC:1D:7B:E0:C6:16:06:20:08:E7:1B:0D:33:9A:F7:88:A3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dee659fc-95a1-337c-99f4-e610ad6cf05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c6:f6:1e:2a:a2:f2:db:7a:f9:25:19:b1:81:13:c4:58:8b: de:fe:d4:d7:10:c7:aa:37:7e:c0:39:20:77:8c:1f:2f:1a:64: 48:3c:b6:d3:fe:5b:92:a3:3a:0d:0c:cc:ef:42:76:0a:3c:de: fd:1e:5d:20:43:b1:64:d6:6f:55:bd:fc:c6:00:f8:9b:ab:09: f4:3b:7e:af:90:a2:55:3c:25:5c:b2:04:a3:69:23:21:53:86: 0d:66:e7:0b:b7:76:90:41:a1:56:b4:68:61:e5:f0:05:ce:4c: 15:4c:e9:36:56:1c:6f:f1:46:9e:ac:d3:fd:5a:40:d9:38:e7: aa:bf:1c:ed:70:4e:aa:c4:cc:7e:5c:e8:8f:ec:1b:a4:58:9d: 96:f1:28:31:fb:a1:8d:f3:18:9c:90:19:33:09:5c:a6:07:af: 15:fd:29:21:07:52:5a:d9:fc:b9:ff:6d:b8:1e:34:f7:bf:c4: 5e:1f:27:2b:fc:ef:43:5a:dc:f2:ce:78:9b:e4:db:81:18:97: 5b:fd:01:28:01:b9:d6:63:12:db:b7:5c:32:e7:fa:a3:a2:dd: 40:9d:7a:3d:b4:d1:5d:b7:36:a5:b5:45:fb:1c:3e:bd:f8:ba: 56:75:04:05:85:7a:ec:70:8a:b1:1e:b8:24:af:27:5f:24:20: b1:38:58:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NneoXcSHeTV5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDFjNDE3MjAtOGNlMy00M2FiLWJiMjktNmEyMzNlN2ZlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFMtfl6EN9agq+0BBZf+Jd65YI7+tAoOX085 fVm+c8bjiZhP91tp68G5dpBWGq3GpVrqytGA+E1xik9YtyNNbBf1UvG+4b/0mqIb twULCVVGvTKI7NvdGFH/yGBxpc/2LE/CbjqX4rc1UbCdPn9QSGB2XjgUg6G8IEkC vCUg1P4LTRBa+ZJCb6MwajYSEbsdykZuIEk2H7BBnkXfr9CBoeoyEtPdh8+y37w9 C1Sp5n4Cf9ghhg3lE8Qfp4tBFUYpIcvMrmL0rP/CieUIV0ahCDr+dtoxBTi7nIq7 HB7m6eFY9ytUMUAEKaYzMQ+pp1jsBrWAagKzOVkOQKtqhlxeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrO3B174MYWBiAI5xsNM5r3iKOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZGVlNjU5ZmMtOTVhMS0z MzdjLTk5ZjQtZTYxMGFkNmNmMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4O2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLG9h4qovLbevklGbGBE8RYi97+1NcQx6o3fsA5IHeMHy8aZEg8ttP+ W5KjOg0MzO9Cdgo83v0eXSBDsWTWb1W9/MYA+JurCfQ7fq+QolU8JVyyBKNpIyFT hg1m5wu3dpBBoVa0aGHl8AXOTBVM6TZWHG/xRp6s0/1aQNk456q/HO1wTqrEzH5c 6I/sG6RYnZbxKDH7oY3zGJyQGTMJXKYHrxX9KSEHUlrZ/Ln/bbgeNPe/xF4fJyv8 70Na3PLOeJvk24EYl1v9ASgBudZjEtu3XDLn+qOi3UCdej200V23NqW1RfscPr34 ulZ1BAWFeuxwirEeuCSvJ18kILE4WAc= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:40 2025 by rpki-client