$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa File: f01ab467-e827-376a-850d-acf1578e53c2.roa (raw, json) Hash identifier: nF3kSPnup8CPMMTYW+IGnNyVRvjxFpDwgP2UnmsyWX4= Subject key identifier: CC:06:34:64:A5:BA:0B:D1:F8:45:FC:F9:D6:41:FD:27:AF:E6:0E:E5 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D06F4DE271219751F4B00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 139.131.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:f4:de:27:12:19:75:1f:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=504bc534-5fe5-4053-98a8-98437a2f3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:63:ad:52:e9:07:65:c6:b3:b7:52:a3:5b: 3f:b6:98:74:96:3c:93:d6:5c:73:27:47:9e:a9:fd: 36:07:8b:4b:af:6b:d8:29:4e:f1:75:08:fb:99:77: 54:e9:d9:17:a7:99:5e:b4:bc:1e:de:75:66:01:ab: 80:35:34:0f:1d:ac:83:e0:2b:9d:1e:ac:21:bf:f7: f5:2a:be:4d:87:75:b7:9d:fa:de:0f:87:c6:88:e7: d7:04:be:5c:48:f4:b6:07:9f:f2:1e:a9:69:f6:73: 6c:10:d6:8c:26:09:de:e4:d0:05:56:d0:92:95:fd: 71:6d:21:b8:3f:6d:51:70:0f:a0:c1:fc:bb:ce:7a: de:10:82:fd:4f:e5:30:99:3b:33:a6:86:83:01:4f: 3d:4d:55:d7:14:ec:7b:f1:b6:ab:b3:f1:c4:5d:29: 4f:b5:71:88:f6:64:75:2d:e9:95:8b:57:59:9d:43: 71:19:ef:96:ca:3c:7f:90:13:a1:9e:7f:fc:56:30: 39:bc:a6:ff:77:8f:c2:11:40:fb:26:40:25:ba:90: 2d:5b:29:d6:62:ff:6f:0f:4c:7f:68:cb:cd:e0:ef: ee:3f:06:0f:e6:0e:09:a3:50:3a:d4:2c:f5:91:f4: 0e:b5:76:05:ec:a3:53:12:09:4c:ab:9c:4c:fa:e0: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:06:34:64:A5:BA:0B:D1:F8:45:FC:F9:D6:41:FD:27:AF:E6:0E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f01ab467-e827-376a-850d-acf1578e53c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1d:87:13:7b:c6:60:b9:f6:45:3b:42:cd:69:2e:bc:22:a2: be:1f:1b:cd:b7:7f:23:50:ce:94:11:ac:4b:2f:67:2e:fe:65: ef:e8:9a:d9:d0:e8:39:64:04:22:8b:07:73:61:8c:13:37:b0: 75:43:08:fd:2a:bd:40:1b:d0:e9:f0:e9:19:20:52:9e:34:6d: 06:81:a6:4b:af:65:7e:3a:b3:55:99:9a:84:68:2b:73:c1:2f: 5d:a9:e8:6d:12:27:35:56:a4:4f:20:54:82:08:cf:8b:08:89: a6:96:c1:19:a0:f0:3f:3b:cd:38:a2:93:81:fc:34:4a:16:17: a3:83:e0:a7:ed:27:e5:ab:fd:09:84:00:e8:5a:3a:07:e9:66: 5d:4f:a9:62:0a:73:59:dc:28:aa:39:8b:7e:b0:a7:8b:9e:b3: 55:16:30:03:00:39:25:8b:e4:70:fe:f4:29:38:d0:e6:41:c7: 3a:83:f4:c5:67:fd:4a:a0:31:92:c8:18:cb:b0:25:20:ab:18: 60:52:9c:a0:10:47:b5:9d:ea:26:0e:17:2f:9b:69:e1:9a:e1: 88:24:43:1d:a5:04:94:29:c7:65:a7:a6:e3:6f:0f:dd:35:01: 8b:fe:21:96:67:5e:ca:fe:28:24:bf:11:cd:4f:21:27:dc:64: 0c:fe:7d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQb03icSGXUfSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTA0YmM1MzQtNWZlNS00MDUzLTk4YTgtOTg0MzdhMmYzZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG9jrVLpB2XGs7dSo1s/tph0ljyT1lxzJ0ee qf02B4tLr2vYKU7xdQj7mXdU6dkXp5letLwe3nVmAauANTQPHayD4CudHqwhv/f1 Kr5Nh3W3nfreD4fGiOfXBL5cSPS2B5/yHqlp9nNsENaMJgne5NAFVtCSlf1xbSG4 P21RcA+gwfy7znreEIL9T+UwmTszpoaDAU89TVXXFOx78bars/HEXSlPtXGI9mR1 LemVi1dZnUNxGe+Wyjx/kBOhnn/8VjA5vKb/d4/CEUD7JkAlupAtWynWYv9vD0x/ aMvN4O/uPwYP5g4Jo1A61Cz1kfQOtXYF7KNTEglMq5xM+uCRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwGNGSlugvR+EX8+dZB/Sev5g7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZjAxYWI0NjctZTgyNy0z NzZhLTg1MGQtYWNmMTU3OGU1M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsdhxN7xmC59kU7Qs1pLrwior4fG823fyNQzpQRrEsvZy7+Ze/omtnQ 6DlkBCKLB3NhjBM3sHVDCP0qvUAb0Onw6RkgUp40bQaBpkuvZX46s1WZmoRoK3PB L12p6G0SJzVWpE8gVIIIz4sIiaaWwRmg8D87zTiik4H8NEoWF6OD4KftJ+Wr/QmE AOhaOgfpZl1PqWIKc1ncKKo5i36wp4ues1UWMAMAOSWL5HD+9Ck40OZBxzqD9MVn /UqgMZLIGMuwJSCrGGBSnKAQR7Wd6iYOFy+baeGa4YgkQx2lBJQpx2WnpuNvD901 AYv+IZZnXsr+KCS/Ec1PISfcZAz+ffE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:34 2025 by rpki-client