$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa File: 0a788a24-b681-3c92-b517-2e067d686116.roa (raw, json) Hash identifier: 4YnnWx/KFUYUIrOsZPDKvkJF6VQO+YgIFkSyADL6LoQ= Subject key identifier: B2:4F:53:2A:77:DB:2B:0B:0F:43:84:0E:51:7F:6C:40:A7:E6:E0:40 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584B0CDC0E29EFF3F3D2BD472F30 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 53927 IP address blocks: 139.131.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0e:29:ef:f3:f3:d2:bd:47:2f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=1de1a3db-e752-49e5-8da4-fa059bf5772b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:3e:90:ce:24:d4:0b:95:3d:32:11:fe:77: 87:8c:35:0e:6a:29:dc:6c:af:89:43:9d:9e:62:e1: 01:0d:fe:81:65:38:e5:fb:94:df:4b:20:97:e7:e5: e5:5f:2e:3d:68:cc:b6:76:52:59:1f:54:9b:0a:f5: ae:ab:f1:ad:23:8c:30:99:3b:84:f9:7e:52:8c:2d: 5f:13:2a:a6:26:74:ff:0b:9f:ff:77:08:e1:c4:f7: c5:71:ac:0f:26:58:16:42:ff:74:57:33:61:be:4a: 35:13:ca:ac:2e:56:d1:1b:4d:5d:c1:2e:66:32:7d: 10:c0:01:2f:8e:a3:44:ac:c8:a6:ea:c3:04:98:88: 5d:5e:e0:82:b3:17:2e:36:f5:32:48:74:64:5f:ac: ef:20:9f:78:49:3f:7b:2b:cf:c7:dd:82:64:03:7e: e1:79:13:1f:69:d2:0b:ca:f9:b1:63:fc:49:4e:3f: d9:d4:57:fe:c8:27:64:5c:44:93:0a:88:1e:9b:aa: 96:f1:a6:c1:d5:cb:76:2f:50:42:cb:42:f3:5a:84: ce:8f:04:2e:79:a0:38:31:a7:e1:cb:30:65:8d:92: b7:1c:bb:fc:f8:e4:3f:1d:63:f7:2c:86:85:96:5c: ef:d6:6f:82:89:aa:0d:aa:76:c1:7d:4f:3d:9f:1b: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:53:2A:77:DB:2B:0B:0F:43:84:0E:51:7F:6C:40:A7:E6:E0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0a788a24-b681-3c92-b517-2e067d686116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4b:e8:11:f6:79:86:59:17:57:3d:34:bf:e9:49:8c:0a:0f: dd:cc:2b:87:25:77:0e:f9:ab:b4:a3:a0:9b:6a:f2:4e:74:62: e9:a6:75:8f:19:76:cb:64:d6:c1:43:ad:a3:b8:b1:7a:24:90: a5:e5:24:17:dd:98:b6:ea:b8:ed:01:9d:66:ea:bf:26:6d:1a: 56:df:40:d9:eb:5f:6e:e7:12:05:96:51:c9:48:4f:67:fb:ef: a0:3b:c3:00:42:0e:93:6a:b6:28:a7:43:11:c4:46:27:6e:cf: 0e:ae:7e:07:4d:b5:d4:b9:ad:0f:66:c8:f8:a6:7b:69:c3:e0: a8:d0:80:73:c9:ab:b2:90:ba:66:49:50:f8:54:8f:08:f9:12: 65:e4:9a:13:68:53:6d:77:20:db:3d:fe:1b:4b:fc:d5:4c:e8: cb:a4:f0:f4:58:38:63:1f:ca:41:cc:f4:48:2b:bb:f7:23:9d: 9b:52:1f:2a:b3:5d:78:b9:33:32:5d:56:65:ce:3c:34:f2:d9: cd:76:1b:16:48:e3:24:d1:10:c9:84:b9:5a:94:0d:75:bf:f8: a3:03:09:5d:fa:cb:c4:b8:03:ec:38:8f:43:26:d7:1a:b8:b6: 43:e7:d0:d4:45:34:8c:83:77:a7:82:b1:45:8f:5f:f1:f4:bc: 7f:91:62:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3A4p7/Pz0r1HLzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MWRlMWEzZGItZTc1Mi00OWU1LThkYTQtZmEwNTliZjU3NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbA+kM4k1AuVPTIR/neHjDUOaincbK+JQ52e YuEBDf6BZTjl+5TfSyCX5+XlXy49aMy2dlJZH1SbCvWuq/GtI4wwmTuE+X5SjC1f EyqmJnT/C5//dwjhxPfFcawPJlgWQv90VzNhvko1E8qsLlbRG01dwS5mMn0QwAEv jqNErMim6sMEmIhdXuCCsxcuNvUySHRkX6zvIJ94ST97K8/H3YJkA37heRMfadIL yvmxY/xJTj/Z1Ff+yCdkXESTCogem6qW8abB1ct2L1BCy0LzWoTOjwQueaA4Mafh yzBljZK3HLv8+OQ/HWP3LIaFllzv1m+CiaoNqnbBfU89nxtm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJPUyp32ysLD0OEDlF/bECn5uBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMGE3ODhhMjQtYjY4MS0z YzkyLWI1MTctMmUwNjdkNjg2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlL6BH2eYZZF1c9NL/pSYwKD93MK4cldw75q7SjoJtq8k50YummdY8Z dstk1sFDraO4sXokkKXlJBfdmLbquO0BnWbqvyZtGlbfQNnrX27nEgWWUclIT2f7 76A7wwBCDpNqtiinQxHERiduzw6ufgdNtdS5rQ9myPime2nD4KjQgHPJq7KQumZJ UPhUjwj5EmXkmhNoU213INs9/htL/NVM6Muk8PRYOGMfykHM9Egru/cjnZtSHyqz XXi5MzJdVmXOPDTy2c12GxZI4yTREMmEuVqUDXW/+KMDCV36y8S4A+w4j0Mm1xq4 tkPn0NRFNIyDd6eCsUWPX/H0vH+RYrk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:26:29 2025 by rpki-client