$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa File: 74c8279c-10f7-3816-846a-e6ac1996b71b.roa (raw, json) Hash identifier: yADovDSkaN+KMycz/zO0aM/bDoX4S1vf/BF33czU4IA= Subject key identifier: 76:71:9F:04:18:17:A7:0B:80:64:AE:16:26:F8:F0:90:16:2C:F6:FA Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584B48E1AEA41CE2AEF9731A2300 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 139.177.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ae:a4:1c:e2:ae:f9:73:1a:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4054a2ab-2cd4-46fa-af8c-e33bb9b9258f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:e3:51:c1:19:dc:a9:ff:9e:00:9d:bc:94: d5:c1:95:92:c2:65:c2:52:c0:8a:8e:29:9e:66:a1: fe:59:6d:0b:0f:bc:04:31:0c:2c:8b:56:62:b0:c3: 84:e9:76:89:6b:6b:f1:7f:e7:a4:ad:db:1d:a4:9c: 8b:b0:60:d3:25:2f:7d:ff:39:22:db:9f:4e:73:f2: 22:79:b6:25:eb:ce:ab:a4:25:c5:98:27:ab:f9:18: c0:27:52:3c:72:7e:43:6b:cb:aa:74:5f:5b:4d:af: d5:21:b9:0a:2e:d5:f8:eb:d4:1d:a2:04:60:13:2d: 8b:6b:be:6b:93:94:63:6f:30:c4:9a:31:30:f5:47: 08:d7:3d:e6:a3:6b:5c:74:61:26:43:5e:77:88:88: 56:c4:fc:74:60:ce:72:ba:55:21:ab:e3:3a:44:fe: 3e:dc:16:d3:84:16:91:67:c3:7d:36:bc:3c:21:37: e3:7b:c3:24:69:9c:9c:f9:7d:e1:3a:c5:69:09:2a: c1:04:3f:8c:cf:dc:9c:68:40:0c:c7:bd:c1:33:73: bf:44:9e:23:53:32:c2:ea:57:3c:41:96:58:29:44: 61:d7:f8:39:d6:1b:66:ab:85:b7:c0:35:42:48:b6: 85:3c:a3:86:87:a5:c5:97:d8:3f:fe:bc:a3:43:96: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:71:9F:04:18:17:A7:0B:80:64:AE:16:26:F8:F0:90:16:2C:F6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 139.177.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c0:e1:09:64:29:12:12:74:b4:f7:2b:56:a8:98:3b:59:fa: 2f:0a:1b:f6:a7:32:cf:90:1e:e6:53:76:f8:67:6f:11:48:ce: 48:b9:0e:5b:16:ae:c8:17:ae:82:78:ca:55:7f:15:ec:2a:44: 77:32:12:5b:05:58:0b:67:aa:b9:b3:64:56:db:0f:bb:be:77: 46:c8:0f:fe:e6:50:42:f1:f6:84:04:91:d8:bd:fa:2a:93:00: aa:f2:84:59:08:dc:4f:aa:56:59:fa:ef:ec:85:84:48:02:92: 1e:f1:8a:31:0e:5f:15:b0:0c:6d:68:7d:96:bb:a3:ea:31:1c: 42:49:03:18:23:9b:89:23:83:d9:fa:59:90:a8:11:ee:b6:47: 2a:82:c5:40:de:36:2d:09:f8:1c:6b:d7:ed:b3:d8:78:07:70: b6:52:21:54:f0:57:3f:d6:f8:ed:af:43:0c:c7:eb:b3:52:3a: f3:3c:90:34:5c:9c:35:2c:da:30:1c:10:06:99:ed:53:9b:96: 18:18:b4:35:2a:bf:c3:44:54:7c:0f:8c:b4:7d:34:b0:50:8f: 37:01:f7:34:65:21:8e:a1:04:68:12:7e:89:48:ba:ae:78:eb: 13:9b:95:ff:90:d5:b9:c1:a0:d4:fe:09:d9:74:f9:72:e4:ce: 92:10:50:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4a6kHOKu+XMaIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDA1NGEyYWItMmNkNC00NmZhLWFmOGMtZTMzYmI5YjkyNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0njUcEZ3Kn/ngCdvJTVwZWSwmXCUsCKjime ZqH+WW0LD7wEMQwsi1ZisMOE6XaJa2vxf+ekrdsdpJyLsGDTJS99/zki259Oc/Ii ebYl686rpCXFmCer+RjAJ1I8cn5Da8uqdF9bTa/VIbkKLtX469QdogRgEy2La75r k5RjbzDEmjEw9UcI1z3mo2tcdGEmQ153iIhWxPx0YM5yulUhq+M6RP4+3BbThBaR Z8N9Nrw8ITfje8MkaZyc+X3hOsVpCSrBBD+Mz9ycaEAMx73BM3O/RJ4jUzLC6lc8 QZZYKURh1/g51htmq4W3wDVCSLaFPKOGh6XFl9g//ryjQ5YM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZxnwQYF6cLgGSuFib48JAWLPb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNzRjODI3OWMtMTBmNy0z ODE2LTg0NmEtZTZhYzE5OTZiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPA4QlkKRISdLT3K1aomDtZ+i8KG/anMs+QHuZTdvhnbxFIzki5DlsW rsgXroJ4ylV/FewqRHcyElsFWAtnqrmzZFbbD7u+d0bID/7mUELx9oQEkdi9+iqT AKryhFkI3E+qVln67+yFhEgCkh7xijEOXxWwDG1ofZa7o+oxHEJJAxgjm4kjg9n6 WZCoEe62RyqCxUDeNi0J+Bxr1+2z2HgHcLZSIVTwVz/W+O2vQwzH67NSOvM8kDRc nDUs2jAcEAaZ7VOblhgYtDUqv8NEVHwPjLR9NLBQjzcB9zRlIY6hBGgSfolIuq54 6xOblf+Q1bnBoNT+Cdl0+XLkzpIQUI0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:49:11 2025 by rpki-client