$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa File: d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json) Hash identifier: JvbdECRelpV0rzTz1RP4XEKXt35B7x0lFU0LrpnWNj0= Subject key identifier: F0:88:6E:B9:B8:A7:63:27:EA:D7:77:23:5C:E1:25:1E:B6:24:49:7A Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584B0CDC0E4FEA4BD774E315C480 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 53927 IP address blocks: 139.131.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0e:4f:ea:4b:d7:74:e3:15:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=dd3a150e-5047-474a-8bc7-dddd1863c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:67:c1:09:a8:28:80:b3:76:37:f7:b0:e7: 6b:15:4b:54:07:b9:21:18:72:f6:2d:53:9c:9a:3a: 51:42:1b:8e:db:b4:da:e7:bb:2a:b8:07:ea:68:f8: d6:87:ed:58:11:5a:97:1e:8e:29:f3:0f:d8:21:31: 5d:a9:fd:53:2c:73:0f:c5:60:ae:2c:31:40:31:7c: 6f:5e:95:17:7b:cc:e2:f7:e9:69:e0:58:98:13:48: 9d:b5:4f:b1:1b:8c:14:56:14:93:0c:90:6e:64:d7: d3:6c:d1:3a:8a:5f:b8:66:4b:02:f1:f3:41:19:bc: c5:af:7b:c6:87:57:5e:39:8e:85:7c:28:80:51:f5: 2f:95:db:0d:e8:e6:bb:49:e7:39:32:a7:11:33:dc: 1b:38:46:63:36:01:bd:cb:bf:5e:06:fe:83:11:69: 74:78:e7:a5:f6:29:66:52:91:b0:70:18:53:f0:4d: b6:fe:f3:f8:b6:fa:0d:e9:36:a3:2d:2d:df:71:5a: 74:e7:ad:d2:c1:ee:db:ef:c7:95:96:6b:ff:90:24: c3:a6:d5:f9:c2:d4:ef:c7:69:2e:46:c7:e8:fe:c5: 5d:aa:c0:b9:8c:ba:17:00:c4:f8:63:0b:0d:4b:d2: 5e:b9:cc:a9:a0:15:6a:d5:0c:63:cf:25:70:62:d7: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:88:6E:B9:B8:A7:63:27:EA:D7:77:23:5C:E1:25:1E:B6:24:49:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:91:97:19:4d:58:38:d3:3a:53:6d:0b:77:e5:66:10:9d:8d: d1:58:28:c5:56:d4:01:69:dd:52:76:85:03:eb:6d:5a:e2:61: b2:0a:f3:d2:1c:0c:f1:80:4e:92:55:97:44:ba:85:c2:77:04: e8:2b:ab:17:97:af:3c:f3:fa:0f:37:0c:83:54:10:09:fb:e9: 0d:ef:c4:b8:e8:99:45:71:d7:27:03:43:58:5c:89:f7:45:e4: bd:ac:1c:f1:d0:92:e2:7a:19:76:9e:cd:fd:ab:20:ce:9a:34: 3e:24:c3:1a:2c:fa:bc:c4:f6:4e:d1:06:85:49:35:58:d4:ca: 0c:3c:8f:29:d4:f6:18:ad:e0:08:d7:86:6a:9b:27:fd:fa:b5: d2:a1:e3:92:7d:34:d5:b8:5d:68:46:e0:8a:60:61:48:ab:ce: fb:1b:b0:a8:19:08:9d:35:97:56:e5:51:f4:87:d7:51:2d:6e: 1e:82:74:cf:e9:49:81:a5:14:9a:e5:a8:a5:bc:3f:87:42:b8: 56:f4:1b:4d:9b:14:71:43:e6:2c:eb:3f:1d:66:16:f3:24:72: 0e:e6:c5:b1:d3:35:41:6d:1d:ae:c6:13:95:cc:89:79:70:cb: 85:68:86:37:d4:f7:63:6a:fc:f0:f9:f3:a6:52:d7:0b:31:8d: 56:d7:a4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3A5P6kvXdOMVxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZGQzYTE1MGUtNTA0Ny00NzRhLThiYzctZGRkZDE4NjNjMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb5nwQmoKICzdjf3sOdrFUtUB7khGHL2LVOc mjpRQhuO27Ta57squAfqaPjWh+1YEVqXHo4p8w/YITFdqf1TLHMPxWCuLDFAMXxv XpUXe8zi9+lp4FiYE0idtU+xG4wUVhSTDJBuZNfTbNE6il+4ZksC8fNBGbzFr3vG h1deOY6FfCiAUfUvldsN6Oa7Sec5MqcRM9wbOEZjNgG9y79eBv6DEWl0eOel9ilm UpGwcBhT8E22/vP4tvoN6TajLS3fcVp0563Swe7b78eVlmv/kCTDptX5wtTvx2ku Rsfo/sVdqsC5jLoXAMT4YwsNS9JeucypoBVq1QxjzyVwYtdVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCIbrm4p2Mn6td3I1zhJR62JEl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDMzZGRhY2MtMjMyZi0z Y2M1LWE2YzYtODMzMTU2MTI3ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4PUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKRlxlNWDjTOlNtC3flZhCdjdFYKMVW1AFp3VJ2hQPrbVriYbIK89Ic DPGATpJVl0S6hcJ3BOgrqxeXrzzz+g83DINUEAn76Q3vxLjomUVx1ycDQ1hcifdF 5L2sHPHQkuJ6GXaezf2rIM6aND4kwxos+rzE9k7RBoVJNVjUygw8jynU9hit4AjX hmqbJ/36tdKh45J9NNW4XWhG4IpgYUirzvsbsKgZCJ01l1blUfSH11Etbh6CdM/p SYGlFJrlqKW8P4dCuFb0G02bFHFD5izrPx1mFvMkcg7mxbHTNUFtHa7GE5XMiXlw y4VohjfU92Nq/PD586ZS1wsxjVbXpBM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:27:02 2025 by rpki-client