$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a17072c-583c-3abb-82b5-e58987f99c30.roa File: 1a17072c-583c-3abb-82b5-e58987f99c30.roa (raw, json) Hash identifier: 9xbKCwycUzrtAsXToskOdFF4GI5pepiDSjZtFRybWII= Subject key identifier: 2E:93:91:E9:F1:2D:87:59:64:95:35:C9:C0:B1:D1:F6:58:EE:B6:FC Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B960CFEA9C28DDE5EA9798D80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a17072c-583c-3abb-82b5-e58987f99c30.roa Signing time: Mon 20 Oct 2025 16:25:08 +0000 ROA not before: Mon 20 Oct 2025 16:25:08 +0000 ROA not after: Sun 18 Jan 2026 17:25:08 +0000 asID: 834 IP address blocks: 139.177.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:0c:fe:a9:c2:8d:de:5e:a9:79:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 20 16:25:08 2025 GMT Not After : Jan 18 17:25:08 2026 GMT Subject: CN=6dce932d-a332-4cfe-9ea0-e2ffbddaf5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:f1:d2:2f:72:a1:58:f4:f9:67:c4:d9:1c: 6c:85:a9:84:3b:dc:47:39:02:7e:b0:dc:87:0c:96: 29:69:e6:8d:83:7e:eb:1a:0f:2b:0d:02:29:bf:4c: 83:58:b0:a0:ef:0b:b6:9d:9a:fa:8d:be:6f:f1:86: 2d:75:15:99:79:a7:c2:0c:34:63:0a:32:89:9f:74: de:30:a4:0a:2f:db:bd:a8:d6:3d:0a:1e:43:59:80: c0:a8:5f:2d:f0:88:ef:fe:74:b6:61:69:5d:62:60: 16:c4:31:37:e7:a3:1b:88:fc:fc:ba:45:33:33:30: 3b:a2:45:aa:d2:6e:d7:87:ef:23:ef:06:0a:8d:f8: b1:38:b7:6a:8c:ed:23:87:16:3e:7b:9e:cf:8f:3b: 9d:53:22:4c:78:00:ac:e5:d1:8a:d0:17:cd:fb:2c: 4c:1c:75:3b:7f:85:71:ab:8b:94:e3:38:b9:8b:c5: 14:7a:35:4e:28:fa:c7:c8:4d:d8:68:ab:18:e2:bb: e0:e5:1d:61:87:f8:9f:55:80:75:65:63:70:ae:74: 99:da:af:b9:f6:01:46:5e:50:83:80:00:36:75:48: 41:ee:8e:2f:4a:53:69:5d:cd:35:15:ab:83:41:9b: 30:14:79:32:35:c9:cb:a4:36:c0:a5:7f:6d:24:b6: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:91:E9:F1:2D:87:59:64:95:35:C9:C0:B1:D1:F6:58:EE:B6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a17072c-583c-3abb-82b5-e58987f99c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 139.177.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ad:0a:f2:85:fd:42:ca:dc:56:30:e0:ce:83:49:f3:6e:96: 82:e1:a8:83:9a:6c:7b:ee:e4:0d:97:a4:f7:8d:28:aa:d6:32: f7:b8:50:57:e1:52:9e:ef:4a:b4:72:25:95:33:a2:f3:81:8c: b0:2f:ad:65:b1:0b:a3:c4:f6:6e:0a:3a:e5:68:86:99:43:87: 7a:67:3b:33:36:6d:01:5b:3d:bb:e5:ba:88:08:bb:a2:75:28: 84:be:b3:21:79:95:da:77:d9:4b:d1:a8:2b:8c:89:d6:e7:d3: 23:27:08:8c:11:93:71:0a:58:9e:71:01:e6:6b:48:03:8e:ff: 2a:9b:8e:94:40:4c:8e:1f:f7:8d:29:64:1f:76:67:91:12:77: d1:fb:de:87:9e:73:f7:9f:53:40:ff:05:bd:f7:64:7b:f6:ac: 96:ed:58:d5:e3:96:58:16:b3:85:68:56:81:b2:99:32:70:da: ef:ad:32:f5:58:e3:2a:14:2a:3c:31:fd:f7:e6:59:1b:64:31: 66:d3:a6:f7:c7:97:9a:f8:a9:24:49:3d:28:2f:5d:34:c7:18: 51:f5:78:ba:4b:26:84:46:da:2d:2c:33:d3:cb:5f:44:6a:8d: 8e:a3:91:25:86:c5:e9:ca:38:b8:c5:77:26:06:20:9b:57:5e: 01:5e:b3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWDP6pwo3eXql5jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTAyMDE2MjUwOFoXDTI2MDExODE3MjUwOFowLzEtMCsGA1UEAxMk NmRjZTkzMmQtYTMzMi00Y2ZlLTllYTAtZTJmZmJkZGFmNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo3x0i9yoVj0+WfE2RxshamEO9xHOQJ+sNyH DJYpaeaNg37rGg8rDQIpv0yDWLCg7wu2nZr6jb5v8YYtdRWZeafCDDRjCjKJn3Te MKQKL9u9qNY9Ch5DWYDAqF8t8Ijv/nS2YWldYmAWxDE356MbiPz8ukUzMzA7okWq 0m7Xh+8j7wYKjfixOLdqjO0jhxY+e57PjzudUyJMeACs5dGK0BfN+yxMHHU7f4Vx q4uU4zi5i8UUejVOKPrHyE3YaKsY4rvg5R1hh/ifVYB1ZWNwrnSZ2q+59gFGXlCD gAA2dUhB7o4vSlNpXc01FauDQZswFHkyNcnLpDbApX9tJLZHaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6TkenxLYdZZJU1ycCx0fZY7rb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMWExNzA3MmMtNTgzYy0z YWJiLTgyYjUtZTU4OTg3Zjk5YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmtCvKF/ULK3FYw4M6DSfNuloLhqIOabHvu5A2XpPeNKKrWMve4UFfh Up7vSrRyJZUzovOBjLAvrWWxC6PE9m4KOuVohplDh3pnOzM2bQFbPbvluogIu6J1 KIS+syF5ldp32UvRqCuMidbn0yMnCIwRk3EKWJ5xAeZrSAOO/yqbjpRATI4f940p ZB92Z5ESd9H73oeec/efU0D/Bb33ZHv2rJbtWNXjllgWs4VoVoGymTJw2u+tMvVY 4yoUKjwx/ffmWRtkMWbTpvfHl5r4qSRJPSgvXTTHGFH1eLpLJoRG2i0sM9PLX0Rq jY6jkSWGxenKOLjFdyYGIJtXXgFes7k= -----END CERTIFICATE-----Generated at Tue Oct 21 16:46:52 2025 by rpki-client