$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa File: 4ac12027-491f-3aff-8379-47ac6a88e681.roa (raw, json) Hash identifier: vX+jauZtTtzFJWw4YYQ1YTVi9H7PQwGHcRuqElG5bRk= Subject key identifier: 30:B6:90:4C:F1:72:E5:AA:E9:2F:D3:E0:DD:F3:CC:8A:71:FE:0D:F7 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584AA03D17F351E4C71702F63F00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa Signing time: Thu 24 Jul 2025 15:13:12 +0000 ROA not before: Thu 24 Jul 2025 15:13:12 +0000 ROA not after: Wed 22 Oct 2025 15:13:12 +0000 asID: 21534 IP address blocks: 139.177.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:3d:17:f3:51:e4:c7:17:02:f6:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 24 15:13:12 2025 GMT Not After : Oct 22 15:13:12 2025 GMT Subject: CN=f72eecee-ad05-4805-ad75-d556c86eedc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:bb:83:f8:08:7f:49:55:6b:03:36:08:97: cc:87:c1:d3:42:f0:75:e8:b5:d0:f1:ae:8d:88:89: 98:91:3f:c0:ed:4e:11:20:e3:89:80:dd:59:51:c2: fc:f9:b5:3f:8c:71:45:3a:11:59:78:fb:60:c4:31: 59:39:7b:0f:60:35:c1:98:b8:34:00:f9:dc:94:f0: b0:e2:78:23:25:01:71:c4:73:29:35:2b:8e:32:06: f8:3b:df:df:77:74:ee:c9:17:2a:c0:17:4f:9c:0d: 3b:6d:74:25:88:5b:c8:a3:8b:4b:b1:f3:0e:78:b2: 84:72:5a:23:af:85:22:cf:46:c3:19:46:c9:4f:df: 14:b3:60:57:89:6d:7d:06:4d:9a:11:13:67:69:36: d3:46:04:4b:82:4e:db:a0:29:14:99:14:f8:7e:82: 34:4c:19:f5:75:8a:9f:fc:65:c2:d2:5e:88:3c:48: 9f:75:a0:fd:9e:9d:64:0c:26:3f:4d:94:ce:99:d3: 74:d8:4a:30:56:56:9c:7e:c2:11:89:24:6c:8e:d2: 43:fa:fb:c2:4e:46:b5:df:0f:85:2e:4d:84:cc:9a: f0:cb:0f:24:b6:3b:09:29:96:32:a6:97:91:89:37: cc:0a:67:79:ca:19:d6:b9:69:98:35:42:02:2b:3f: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B6:90:4C:F1:72:E5:AA:E9:2F:D3:E0:DD:F3:CC:8A:71:FE:0D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/4ac12027-491f-3aff-8379-47ac6a88e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 139.177.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5f:b2:ba:1d:4e:31:cc:97:f5:bc:95:94:f3:af:b7:8f:85: 1c:e5:2c:36:b6:03:b8:7b:ba:15:b0:2a:0c:fb:05:ec:f0:3d: e9:c0:8e:fd:48:15:f9:75:20:99:58:3e:2b:cc:e7:2f:10:b4: 2e:7f:26:e4:e2:4e:fd:02:ef:fc:22:ac:df:cd:9b:d2:7f:68: ce:24:09:e4:eb:82:9d:42:71:85:e5:59:f9:d7:1f:97:5c:4b: 3c:87:61:fc:d8:7d:95:b5:78:9a:86:50:57:14:91:ce:39:f9: a7:45:ec:5c:bb:cb:cf:c0:65:c3:f4:1d:39:e5:4f:9a:66:ff: 3b:2e:f9:42:37:28:f6:a8:51:42:93:85:b8:93:b7:3b:42:1b: 9f:93:49:47:d7:d2:58:a7:6c:c5:54:72:84:f9:9c:24:be:11: 88:07:f8:9f:94:49:79:8f:34:41:5c:89:a3:a7:eb:12:b6:67: e3:a0:da:9f:b7:ef:3e:d6:ba:df:2b:94:2b:8e:85:45:6e:11: a5:76:1f:f6:87:da:84:9e:10:94:8c:f1:be:64:66:fe:47:8c: 3b:5e:5c:10:9f:80:1d:b1:5f:b7:12:38:67:db:d2:d1:5e:b4: 85:1d:a9:66:22:67:35:d2:8c:57:95:22:dd:1b:62:c0:6a:a6: a8:a1:f4:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqgPRfzUeTHFwL2PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDcyNDE1MTMxMloXDTI1MTAyMjE1MTMxMlowLzEtMCsGA1UEAxMk ZjcyZWVjZWUtYWQwNS00ODA1LWFkNzUtZDU1NmM4NmVlZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/K7g/gIf0lVawM2CJfMh8HTQvB16LXQ8a6N iImYkT/A7U4RIOOJgN1ZUcL8+bU/jHFFOhFZePtgxDFZOXsPYDXBmLg0APnclPCw 4ngjJQFxxHMpNSuOMgb4O9/fd3TuyRcqwBdPnA07bXQliFvIo4tLsfMOeLKEcloj r4Uiz0bDGUbJT98Us2BXiW19Bk2aERNnaTbTRgRLgk7boCkUmRT4foI0TBn1dYqf /GXC0l6IPEifdaD9np1kDCY/TZTOmdN02EowVlacfsIRiSRsjtJD+vvCTka13w+F Lk2EzJrwyw8ktjsJKZYyppeRiTfMCmd5yhnWuWmYNUICKz+HJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC2kEzxcuWq6S/T4N3zzIpx/g33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNGFjMTIwMjctNDkxZi0z YWZmLTgzNzktNDdhYzZhODhlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7FGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpfsrodTjHMl/W8lZTzr7ePhRzlLDa2A7h7uhWwKgz7BezwPenAjv1I Ffl1IJlYPivM5y8QtC5/JuTiTv0C7/wirN/Nm9J/aM4kCeTrgp1CcYXlWfnXH5dc SzyHYfzYfZW1eJqGUFcUkc45+adF7Fy7y8/AZcP0HTnlT5pm/zsu+UI3KPaoUUKT hbiTtztCG5+TSUfX0linbMVUcoT5nCS+EYgH+J+USXmPNEFciaOn6xK2Z+Og2p+3 7z7Wut8rlCuOhUVuEaV2H/aH2oSeEJSM8b5kZv5HjDteXBCfgB2xX7cSOGfb0tFe tIUdqWYiZzXSjFeVIt0bYsBqpqih9BA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:05:38 2025 by rpki-client