$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa File: e650ec6f-555a-3073-8abb-72c4f3d294dd.roa (raw, json) Hash identifier: jRpMn2gpK+66m2BD7rXZxD/bkGwHSVinEnmwWPaYRg4= Subject key identifier: 31:DE:19:DA:CE:8B:4E:64:1E:E5:4D:24:CE:60:07:66:95:93:0E:B1 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D06D08ADDAC13E2590500 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:d0:8a:dd:ac:13:e2:59:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c29460a3-c59f-42e5-80e5-f43f12802ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:65:25:ee:f6:06:12:da:b0:49:33:83:07: e5:0e:f8:ea:37:ff:a4:1a:f9:55:a4:90:b9:27:34: a0:e6:de:58:50:e8:90:31:bd:59:1a:6e:8d:a2:a1: 66:54:31:91:4e:88:84:6d:46:31:4a:e1:07:5c:d1: 3e:56:60:6f:e1:bb:c0:c2:4e:21:79:53:22:d6:d1: 6d:63:87:95:b7:df:36:a1:66:c6:db:3a:d0:e0:17: 84:28:08:f6:15:c9:60:f0:ef:02:5e:a6:a3:5e:35: 1e:d5:94:4e:36:52:78:56:53:88:68:a2:57:0e:77: 8b:05:be:b7:12:e3:3b:62:5f:34:e7:b7:a9:c3:dd: 84:fb:ee:46:f8:56:31:e1:63:f3:17:47:c3:2e:fc: b8:b6:c1:4b:bd:f8:a2:5a:3e:34:88:cb:3f:28:2e: 03:16:9c:00:1b:e0:c4:75:c4:6d:42:0b:ca:98:0f: 41:9c:f6:7c:9b:14:9c:92:f9:74:f6:80:ea:6d:19: 2a:27:7f:00:08:a7:6a:ff:cb:d4:06:c2:d8:2e:77: c1:e4:97:11:58:09:35:d7:86:64:71:e9:f5:db:e9: 9d:41:09:b2:ca:10:58:9f:6d:67:47:0a:65:8b:0d: 7a:60:63:dc:dc:94:79:02:5e:48:f6:30:2e:4b:70: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:19:DA:CE:8B:4E:64:1E:E5:4D:24:CE:60:07:66:95:93:0E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c8:09:d1:c2:35:b4:90:aa:f5:46:3a:68:07:2e:1f:fc:44: 77:11:a8:3a:67:bd:ae:00:7e:5e:b7:f4:6e:cb:80:bc:2a:ac: 4a:c5:1c:ce:a1:0f:b3:7a:bd:12:5e:52:2e:5e:f7:ec:58:21: 0a:a8:a2:c1:38:d1:e0:9e:0a:86:27:50:b6:70:83:0d:1d:28: 94:20:e2:a8:e5:81:9e:95:b8:72:d0:b6:d1:aa:59:e5:05:cd: f6:07:54:24:69:49:60:0c:13:cb:c0:2e:15:33:ce:52:f5:2b: b0:fc:43:3e:92:53:bb:9f:66:94:31:55:dc:70:e2:91:aa:6e: e5:de:f1:0c:0f:b1:aa:0d:3b:9b:12:4d:fc:c5:05:c1:db:ea: 4b:2e:0e:6d:01:09:11:7b:fc:53:1b:d0:d5:b4:4a:cc:39:51: 92:ac:e2:d2:45:ef:49:c8:e0:2f:94:68:87:25:00:55:27:29: 1b:bd:f8:9e:ca:ac:86:18:a0:b4:eb:35:ce:1a:dd:7c:d5:91: 0a:d2:cb:24:65:57:f2:46:1c:0b:f8:c7:74:6e:9b:ea:7f:21: 49:c6:a6:1e:5e:eb:18:20:92:ca:30:55:42:b9:74:db:f1:42: 13:b4:91:77:35:bc:35:ab:0d:53:03:d6:86:50:86:8d:d5:cb: fa:85:13:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQbQit2sE+JZBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzI5NDYwYTMtYzU5Zi00MmU1LTgwZTUtZjQzZjEyODAyY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsFlJe72BhLasEkzgwflDvjqN/+kGvlVpJC5 JzSg5t5YUOiQMb1ZGm6NoqFmVDGRToiEbUYxSuEHXNE+VmBv4bvAwk4heVMi1tFt Y4eVt982oWbG2zrQ4BeEKAj2Fclg8O8CXqajXjUe1ZRONlJ4VlOIaKJXDneLBb63 EuM7Yl8057epw92E++5G+FYx4WPzF0fDLvy4tsFLvfiiWj40iMs/KC4DFpwAG+DE dcRtQgvKmA9BnPZ8mxSckvl09oDqbRkqJ38ACKdq/8vUBsLYLnfB5JcRWAk114Zk cen12+mdQQmyyhBYn21nRwpliw16YGPc3JR5Al5I9jAuS3CDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHeGdrOi05kHuVNJM5gB2aVkw6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZTY1MGVjNmYtNTU1YS0z MDczLThhYmItNzJjNGYzZDI5NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi4NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/ICdHCNbSQqvVGOmgHLh/8RHcRqDpnva4Afl639G7LgLwqrErFHM6h D7N6vRJeUi5e9+xYIQqoosE40eCeCoYnULZwgw0dKJQg4qjlgZ6VuHLQttGqWeUF zfYHVCRpSWAME8vALhUzzlL1K7D8Qz6SU7ufZpQxVdxw4pGqbuXe8QwPsaoNO5sS TfzFBcHb6ksuDm0BCRF7/FMb0NW0Ssw5UZKs4tJF70nI4C+UaIclAFUnKRu9+J7K rIYYoLTrNc4a3XzVkQrSyyRlV/JGHAv4x3Rum+p/IUnGph5e6xggksowVUK5dNvx QhO0kXc1vDWrDVMD1oZQho3Vy/qFE9I= -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:29 2025 by rpki-client