$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/10a8791b-c368-3176-8cd7-a33258e57b80.roa File: 10a8791b-c368-3176-8cd7-a33258e57b80.roa (raw, json) Hash identifier: 7Xw9Na9dzbcbHv94Isfa//RKPdgM/BDalVdkIr9kVUo= Subject key identifier: 86:B4:54:79:9E:30:91:06:3B:04:65:CE:2E:EE:36:24:D9:DE:98:D5 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584B0A116B56FB3872A1EFE221C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/10a8791b-c368-3176-8cd7-a33258e57b80.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 14297 IP address blocks: 139.131.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6b:56:fb:38:72:a1:ef:e2:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=ee3ad384-a5e7-4ee3-acb6-36647a57f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:40:0f:54:0a:82:62:7e:b9:59:93:b1:5d: 92:6e:88:34:8e:da:4f:77:d4:18:19:c9:b9:96:ab: 04:a4:d2:82:93:c0:27:0c:2c:22:d7:93:1d:d4:1b: 84:11:b1:5c:fa:e4:a2:8d:2b:13:f5:f9:08:23:e3: 21:ff:fe:98:2e:2c:25:77:92:60:46:0f:41:45:3f: 6b:03:c8:3b:cf:13:6c:d2:3f:05:64:5c:cf:de:25: b3:c6:00:a9:0c:f2:f7:d4:c1:8e:b2:86:0b:8c:17: 11:2c:72:29:c2:ce:4a:d6:79:93:db:c7:18:22:30: 6e:d9:bb:81:e7:d9:b5:4a:86:50:fd:4e:c3:88:e9: c4:c1:8b:37:dc:1e:7e:e4:52:c4:a4:ed:ae:c6:dd: 5f:46:40:1b:53:b1:d5:c4:24:1c:bb:6f:d6:c0:24: cc:ce:6f:85:fe:a2:b1:89:b3:38:6a:4e:55:6e:3b: 47:b4:fc:8e:40:e5:65:ef:fd:f9:8d:66:1c:ad:e3: 5d:5c:f9:9d:6a:ca:fd:97:94:f0:6c:e4:22:5b:24: 7e:e9:93:82:5b:62:b0:ea:22:97:a4:c4:71:fa:6e: 34:f8:96:a9:59:d9:dc:3b:17:df:95:57:6c:ce:aa: 55:e3:ca:ec:af:a8:83:72:1f:f0:f3:67:80:49:34: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B4:54:79:9E:30:91:06:3B:04:65:CE:2E:EE:36:24:D9:DE:98:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/10a8791b-c368-3176-8cd7-a33258e57b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bb:85:57:41:5b:5f:20:12:3d:9b:f3:91:fe:e6:5d:b2:40: 02:57:b6:14:5a:78:b7:ed:34:d2:c8:69:44:cf:87:9f:20:3b: a0:23:a8:ab:d2:d7:cf:42:6e:a6:41:28:90:24:65:6a:46:f4: f6:0b:94:19:62:93:b4:32:7c:4d:05:05:8f:54:9c:b2:6a:55: 7b:53:46:5d:e1:e2:70:1e:95:55:4d:41:cb:0b:a5:73:1d:77: ac:ae:ce:01:73:d4:c3:cd:c1:0a:39:6c:1f:ff:cc:ae:9a:e8: ab:6f:72:f2:9c:7e:da:14:8b:68:71:04:8e:79:6f:13:7f:05: 4c:96:24:43:bf:04:41:67:3a:14:83:ce:d0:d4:c0:f0:c8:c5: 8a:e3:30:b2:5d:5c:a8:e5:f7:93:cb:65:2f:52:62:05:53:b5: 8d:40:06:62:89:a9:a2:59:df:f5:a9:e9:58:50:9c:ab:5a:e9: 56:2f:3c:ff:ec:f6:13:a0:05:cc:95:f9:c4:86:61:b9:3a:a0: 71:d6:b4:1c:46:f1:37:47:7b:91:46:b1:ee:e4:9f:4c:63:bf: c7:10:06:8f:33:2b:1e:eb:fd:6c:e2:e4:ca:d1:c5:14:a8:5b: 72:67:3b:55:6d:fe:d7:1b:bb:6d:0e:8c:a5:0a:4d:74:71:ea: 66:2d:13:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWtW+zhyoe/iIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZWUzYWQzODQtYTVlNy00ZWUzLWFjYjYtMzY2NDdhNTdmNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt5AD1QKgmJ+uVmTsV2Sbog0jtpPd9QYGcm5 lqsEpNKCk8AnDCwi15Md1BuEEbFc+uSijSsT9fkII+Mh//6YLiwld5JgRg9BRT9r A8g7zxNs0j8FZFzP3iWzxgCpDPL31MGOsoYLjBcRLHIpws5K1nmT28cYIjBu2buB 59m1SoZQ/U7DiOnEwYs33B5+5FLEpO2uxt1fRkAbU7HVxCQcu2/WwCTMzm+F/qKx ibM4ak5VbjtHtPyOQOVl7/35jWYcreNdXPmdasr9l5TwbOQiWyR+6ZOCW2Kw6iKX pMRx+m40+JapWdncOxfflVdszqpV48rsr6iDch/w82eASTTeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa0VHmeMJEGOwRlzi7uNiTZ3pjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMTBhODc5MWItYzM2OC0z MTc2LThjZDctYTMzMjU4ZTU3YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi4PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi7hVdBW18gEj2b85H+5l2yQAJXthRaeLftNNLIaUTPh58gO6AjqKvS 189CbqZBKJAkZWpG9PYLlBlik7QyfE0FBY9UnLJqVXtTRl3h4nAelVVNQcsLpXMd d6yuzgFz1MPNwQo5bB//zK6a6KtvcvKcftoUi2hxBI55bxN/BUyWJEO/BEFnOhSD ztDUwPDIxYrjMLJdXKjl95PLZS9SYgVTtY1ABmKJqaJZ3/Wp6VhQnKta6VYvPP/s 9hOgBcyV+cSGYbk6oHHWtBxG8TdHe5FGse7kn0xjv8cQBo8zKx7r/Wzi5MrRxRSo W3JnO1Vt/tcbu20OjKUKTXRx6mYtEyc= -----END CERTIFICATE-----Generated at Fri Oct 10 20:26:28 2025 by rpki-client