$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa File: 49d76c1a-ff7d-31b6-8857-cab10d46025d.roa (raw, json) Hash identifier: mL/jtHqlMFjZpF+aXvDJxSnwpgL3DBXJRadH2zTEQ04= Subject key identifier: 21:C5:C9:2C:62:C2:57:F8:A4:92:04:B0:6D:14:D8:37:73:63:40:37 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584A6C55DD9A8CA59C7626BC8780 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14297 IP address blocks: 139.131.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dd:9a:8c:a5:9c:76:26:bc:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=3755b18a-bd48-4a31-b672-90c9e714da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:87:d7:96:93:5d:3d:5f:4b:00:67:76:5b: f6:57:f2:e7:b9:69:f6:50:6f:eb:4b:ec:c7:6a:87: 8d:70:91:4b:11:58:1e:9e:e8:90:c3:84:c4:92:90: ab:13:cf:28:78:38:45:a4:48:3c:92:94:48:50:88: 12:04:5e:2f:ac:ad:09:ea:4a:71:7b:08:d6:66:3d: 3e:80:bc:d2:47:47:b8:37:be:2e:24:30:63:ff:ff: e9:ca:94:3d:32:e5:37:66:c9:35:97:48:5c:de:bb: 00:55:72:22:70:8d:b7:b2:cc:2f:9a:79:48:7c:23: 77:01:c6:26:94:76:f4:f0:cb:0a:33:2b:27:2f:60: 24:53:5f:be:fb:60:f3:41:f2:84:ed:fe:fa:6d:3a: 74:9d:c0:b8:cd:d3:1f:3d:3d:c9:81:4a:1d:45:73: 04:f0:cc:61:30:3f:8f:16:89:53:17:9d:65:9c:5f: 30:48:06:5f:22:22:21:60:37:43:3f:4e:d6:8c:8d: 50:d9:b7:df:81:60:a8:9a:88:50:b7:7c:71:65:45: fb:df:c3:42:6b:77:17:cc:0f:3a:7a:28:b7:ab:b2: d2:bc:48:ec:e6:53:f2:46:29:6b:28:fa:1a:90:15: 8d:cf:aa:63:76:20:e6:6f:5a:28:f5:8a:91:91:fa: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C5:C9:2C:62:C2:57:F8:A4:92:04:B0:6D:14:D8:37:73:63:40:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fd:d2:57:e2:cc:2f:60:e2:6a:3f:48:50:29:a2:8d:93:8c: bf:06:12:6d:58:c5:bd:77:86:0c:72:b5:13:95:6e:e5:de:5b: e6:ed:17:db:0b:a1:dd:79:5f:b2:7c:b3:da:16:b9:53:c0:d2: ce:db:fb:54:3d:ca:b9:96:48:d4:5c:e9:89:6e:a1:b9:ef:51: 73:92:6f:ec:09:96:89:d9:9f:24:90:e3:d5:50:c3:c8:cf:78: 72:dc:0b:c1:12:dd:5b:fd:57:cb:76:2d:7e:07:86:fa:f2:9d: fa:f5:0d:f2:96:45:d3:a5:1e:86:ee:f5:b4:17:d3:29:cd:71: 68:b1:f3:4f:5f:8b:41:c9:68:e8:db:a8:e6:b5:17:ce:01:2c: 05:22:1d:89:5d:cd:a3:00:7c:94:24:4a:fa:ab:c7:14:94:a7: ba:67:c0:35:71:ed:7c:e6:9b:80:5f:71:d5:48:87:61:7a:6c: e1:58:a8:19:4d:54:5f:8a:18:11:81:9f:d6:0e:2d:4f:37:78: 13:08:56:5a:bb:ed:80:e1:ba:b6:3b:b0:b6:75:79:2a:f1:a1: 35:25:bc:d8:52:d6:7d:ac:30:2a:37:c8:40:59:74:cc:84:b3: 7a:f1:33:aa:e2:b0:62:d9:68:4a:67:91:2f:d2:d5:a1:8a:a6: 03:ff:32:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd2ajKWcdia8h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Mzc1NWIxOGEtYmQ0OC00YTMxLWI2NzItOTBjOWU3MTRkYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnWH15aTXT1fSwBndlv2V/LnuWn2UG/rS+zH aoeNcJFLEVgenuiQw4TEkpCrE88oeDhFpEg8kpRIUIgSBF4vrK0J6kpxewjWZj0+ gLzSR0e4N74uJDBj///pypQ9MuU3Zsk1l0hc3rsAVXIicI23sswvmnlIfCN3AcYm lHb08MsKMysnL2AkU1+++2DzQfKE7f76bTp0ncC4zdMfPT3JgUodRXME8MxhMD+P FolTF51lnF8wSAZfIiIhYDdDP07WjI1Q2bffgWComohQt3xxZUX738NCa3cXzA86 eii3q7LSvEjs5lPyRilrKPoakBWNz6pjdiDmb1oo9YqRkfrUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHFySxiwlf4pJIEsG0U2DdzY0A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDlkNzZjMWEtZmY3ZC0z MWI2LTg4NTctY2FiMTBkNDYwMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf90lfizC9g4mo/SFApoo2TjL8GEm1Yxb13hgxytROVbuXeW+btF9sL od15X7J8s9oWuVPA0s7b+1Q9yrmWSNRc6YluobnvUXOSb+wJlonZnySQ49VQw8jP eHLcC8ES3Vv9V8t2LX4Hhvrynfr1DfKWRdOlHobu9bQX0ynNcWix809fi0HJaOjb qOa1F84BLAUiHYldzaMAfJQkSvqrxxSUp7pnwDVx7Xzmm4BfcdVIh2F6bOFYqBlN VF+KGBGBn9YOLU83eBMIVlq77YDhurY7sLZ1eSrxoTUlvNhS1n2sMCo3yEBZdMyE s3rxM6risGLZaEpnkS/S1aGKpgP/Mjs= -----END CERTIFICATE-----Generated at Tue Jul 29 01:51:06 2025 by rpki-client