$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa File: 0f29e9e3-b308-38df-9241-83ea7184df8a.roa (raw, json) Hash identifier: IkKCQj+zqpeCX+zfjiEf5ft4jjCZYuN5sh6nG2DdvXg= Subject key identifier: E7:6E:C3:36:1D:5F:73:B4:89:8C:4C:79:A1:DF:92:67:EF:BD:40:5E Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584A2C20157525C565DD8223B77A Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 53927 IP address blocks: 139.131.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:15:75:25:c5:65:dd:82:23:b7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=c50c6d08-a48a-4cf0-a315-4f82cf7c5aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:73:30:a7:9d:6c:7b:13:7d:4a:14:79:cc: 07:9a:aa:e0:38:cd:c7:b5:21:79:d3:3e:65:55:ba: 60:c9:41:22:95:43:ab:56:04:00:b1:d9:49:a2:40: 9e:b2:10:65:33:d4:9e:37:57:11:74:e6:f9:a0:c5: 51:24:96:54:78:31:9b:1c:2b:0c:d3:c9:58:97:93: f4:da:d2:05:ce:ee:d5:4e:f6:c4:4a:96:da:aa:29: 08:a9:27:8a:84:54:43:7e:35:d2:50:61:d4:85:89: 72:09:4a:12:be:39:52:c3:ab:5f:92:41:59:5b:24: 10:83:e9:55:7e:6a:88:1b:cb:fa:cc:62:d7:27:26: fa:64:2e:3c:fa:82:f6:26:80:f6:64:5a:91:01:19: f3:b4:dd:4c:ea:4e:f2:2b:68:6c:5a:48:73:4f:d7: 0d:d5:c2:37:9f:d2:e3:41:8b:d4:8a:88:bb:18:54: 69:28:e6:5f:18:b6:df:3f:0a:49:4b:4b:7a:74:f4: a7:a1:86:1d:f7:53:d1:48:10:45:5e:44:cc:05:9a: 03:b3:1e:b9:c5:64:66:5c:53:dd:57:a8:74:30:01: eb:fe:18:ea:57:70:97:69:22:01:b3:8e:ee:c9:f2: ac:26:b5:4e:93:70:c3:f9:dd:b1:f7:86:ab:d2:8b: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:C3:36:1D:5F:73:B4:89:8C:4C:79:A1:DF:92:67:EF:BD:40:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d6:44:17:06:3f:3a:ba:1c:8d:ba:88:41:9d:c3:cb:9b:20: 15:27:5e:e4:90:85:d4:a2:ba:90:f2:50:b3:f0:dc:00:c9:bd: 65:03:66:1b:7b:d6:36:6d:4f:c8:cb:fc:f9:8f:f6:5d:11:49: e7:2a:ff:d3:8e:2d:54:5c:1c:ae:39:8c:00:fe:74:57:6a:ed: 5a:b3:02:38:6d:42:76:88:4f:93:b2:5e:0c:a8:51:6d:3c:e9: ad:d7:70:f2:86:76:78:ab:f0:57:92:28:4a:0a:8d:69:3d:bf: 92:5c:a0:0b:1a:ce:85:ec:bb:db:64:df:09:f1:7d:5f:4b:aa: 33:4b:28:ab:64:df:c8:fb:4a:3e:40:57:5e:0d:c8:ec:76:0c: 03:ae:c7:bd:12:ab:ec:f2:bc:70:1a:23:4f:09:da:d5:a2:7f: ac:02:7b:89:41:b3:56:ae:11:34:be:57:b4:1a:80:3b:4a:53: d8:fb:6a:89:90:79:75:ae:d8:1c:59:9a:45:9d:55:11:e6:80: 47:66:9d:bc:ee:1c:c3:f8:de:a2:26:36:fd:58:1c:cb:48:e5: 14:d9:27:e6:af:f6:0b:74:87:62:99:c0:3b:57:b7:0f:ca:36: 53:2d:33:94:f5:0e:fc:d8:7a:0e:46:08:5d:2f:fa:43:0f:a9: 9d:c2:e6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBV1JcVl3YIjt3owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YzUwYzZkMDgtYTQ4YS00Y2YwLWEzMTUtNGY4MmNmN2M1YWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDNzMKedbHsTfUoUecwHmqrgOM3HtSF50z5l VbpgyUEilUOrVgQAsdlJokCeshBlM9SeN1cRdOb5oMVRJJZUeDGbHCsM08lYl5P0 2tIFzu7VTvbESpbaqikIqSeKhFRDfjXSUGHUhYlyCUoSvjlSw6tfkkFZWyQQg+lV fmqIG8v6zGLXJyb6ZC48+oL2JoD2ZFqRARnztN1M6k7yK2hsWkhzT9cN1cI3n9Lj QYvUioi7GFRpKOZfGLbfPwpJS0t6dPSnoYYd91PRSBBFXkTMBZoDsx65xWRmXFPd V6h0MAHr/hjqV3CXaSIBs47uyfKsJrVOk3DD+d2x94ar0osb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOduwzYdX3O0iYxMeaHfkmfvvUBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMGYyOWU5ZTMtYjMwOC0z OGRmLTkyNDEtODNlYTcxODRkZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLWRBcGPzq6HI26iEGdw8ubIBUnXuSQhdSiupDyULPw3ADJvWUDZht7 1jZtT8jL/PmP9l0RSecq/9OOLVRcHK45jAD+dFdq7VqzAjhtQnaIT5OyXgyoUW08 6a3XcPKGdnir8FeSKEoKjWk9v5JcoAsazoXsu9tk3wnxfV9LqjNLKKtk38j7Sj5A V14NyOx2DAOux70Sq+zyvHAaI08J2tWif6wCe4lBs1auETS+V7QagDtKU9j7aomQ eXWu2BxZmkWdVRHmgEdmnbzuHMP43qImNv1YHMtI5RTZJ+av9gt0h2KZwDtXtw/K NlMtM5T1DvzYeg5GCF0v+kMPqZ3C5jA= -----END CERTIFICATE-----Generated at Sat Jun 14 00:49:09 2025 by rpki-client