$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa File: 1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa (raw, json) Hash identifier: q03ETehsKOllpgt+k7bMx+vDUGGX8UjxVrh+8YQuTbQ= Subject key identifier: 05:40:7E:1F:18:EA:B7:7A:F5:76:62:1B:02:46:C6:5F:4D:11:1F:A8 Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Certificate serial: 010D0C9F4328584B821CC38481CAFF807174C180 Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 139.180.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c3:84:81:ca:ff:80:71:74:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=bfa206d3-1f93-4206-b890-9ccf63569226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:0c:68:86:59:7e:2b:3c:c5:fb:59:0d:9f: 79:2a:d1:88:ba:05:a6:8d:79:09:16:6a:6e:02:76: 54:ce:60:8a:cb:f1:6b:b5:b3:9f:b5:cd:a1:64:cb: 99:18:b8:df:94:0a:8a:51:5d:20:08:8f:9f:d5:17: 3a:37:fa:f8:9e:83:64:bf:63:76:98:e8:4f:13:4c: f1:19:16:f6:0f:72:eb:0c:bb:65:4b:86:ba:0f:dd: 5c:de:45:1f:eb:9e:cb:2e:34:ef:e4:43:af:b5:62: d6:27:52:2c:4e:82:9e:3e:6c:fe:11:1d:81:16:5c: 42:f4:65:9a:89:c1:a0:0c:6a:51:a7:85:13:09:f7: 23:19:ac:4e:57:7e:7c:6b:fd:e5:ed:a2:a8:1e:82: 9f:65:14:e5:66:db:34:e8:ce:82:20:2e:67:9c:ec: a4:1f:f0:32:43:01:a0:38:a1:75:5c:5b:6f:e9:d7: a9:66:c2:16:44:99:eb:22:02:e9:7f:f6:04:e1:a5: be:ed:7d:4e:65:57:3a:37:d2:28:58:38:97:82:6a: 91:4c:fe:95:4c:3c:cd:16:10:23:2e:f7:2d:3f:90: b8:d1:da:fc:0b:1e:12:34:a6:00:ff:7d:16:20:44: fa:4d:65:b8:26:38:62:f0:cd:db:27:85:e6:2f:c4: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:7E:1F:18:EA:B7:7A:F5:76:62:1B:02:46:C6:5F:4D:11:1F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl X509v3 Authority Key Identifier: keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer sbgp-ipAddrBlock: critical IPv4: 139.180.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:59:71:4f:ac:3c:1f:7a:f9:12:f0:a7:e1:bc:97:19:8b:dc: 5d:b4:a5:f9:29:af:ca:48:f9:5c:1a:05:bf:f7:06:f4:55:07: 82:71:67:7f:57:2f:a5:43:fb:6b:11:ab:7b:a4:ae:34:7d:d2: ad:e2:2d:d7:04:82:83:b1:fa:3b:a1:f2:54:e2:94:4e:ca:a5: 53:f1:f5:02:b4:c6:a4:d2:48:cb:96:d8:9d:3d:be:51:97:00: e0:27:d0:ad:27:60:cc:96:73:a0:66:de:4f:b6:79:78:08:ce: 9f:31:9f:e4:ca:cb:01:c6:1a:d6:c2:a0:81:61:b7:8e:0c:61: 8c:3c:fa:bd:1b:c7:25:fd:73:68:7e:d9:f8:68:cc:73:c0:b0: 83:1c:ed:7a:68:42:7f:5a:49:39:d7:4d:fc:ec:f9:8f:a6:d7: b2:cf:ec:b2:b5:37:c5:c3:bf:1e:ed:1f:b9:23:71:f3:2d:64: 43:d6:cf:4f:7a:f5:46:2f:ff:a9:91:8d:ed:05:8c:8c:47:f1: b1:6f:b5:b1:13:b4:a6:08:6e:43:e7:5c:6e:e3:78:23:15:17: 41:e0:50:a2:ce:a2:7e:63:a4:4a:44:c6:d1:a7:c9:56:a8:5e: 1d:8e:5d:09:5c:63:44:94:65:02:9d:9b:9e:3f:97:44:42:52: ad:01:4b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMOEgcr/gHF0wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky MmU2MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YmZhMjA2ZDMtMWY5My00MjA2LWI4OTAtOWNjZjYzNTY5MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyEMaIZZfis8xftZDZ95KtGIugWmjXkJFmpu AnZUzmCKy/FrtbOftc2hZMuZGLjflAqKUV0gCI+f1Rc6N/r4noNkv2N2mOhPE0zx GRb2D3LrDLtlS4a6D91c3kUf657LLjTv5EOvtWLWJ1IsToKePmz+ER2BFlxC9GWa icGgDGpRp4UTCfcjGaxOV358a/3l7aKoHoKfZRTlZts06M6CIC5nnOykH/AyQwGg OKF1XFtv6depZsIWRJnrIgLpf/YE4aW+7X1OZVc6N9IoWDiXgmqRTP6VTDzNFhAj LvctP5C40dr8Cx4SNKYA/30WIET6TWW4Jjhi8M3bJ4XmL8TNMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVAfh8Y6rd69XZiGwJGxl9NER+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4 OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvMTA2MGFmMmUtOWNlNi0z OTMwLTllYzItMmQ0MjllZDhiMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5 MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7QfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNZcU+sPB96+RLwp+G8lxmL3F20pfkpr8pI+VwaBb/3BvRVB4JxZ39X L6VD+2sRq3ukrjR90q3iLdcEgoOx+juh8lTilE7KpVPx9QK0xqTSSMuW2J09vlGX AOAn0K0nYMyWc6Bm3k+2eXgIzp8xn+TKywHGGtbCoIFht44MYYw8+r0bxyX9c2h+ 2fhozHPAsIMc7XpoQn9aSTnXTfzs+Y+m17LP7LK1N8XDvx7tH7kjcfMtZEPWz096 9UYv/6mRje0FjIxH8bFvtbETtKYIbkPnXG7jeCMVF0HgUKLOon5jpEpExtGnyVao Xh2OXQlcY0SUZQKdm54/l0RCUq0BS6I= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:11 2025 by rpki-client