$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: BKFf9kNDgvJAy01CTqUhc3CScxho8qggNQ8RM0DIq/s= Subject key identifier: 2F:C6:F0:24:71:81:8D:5F:15:A7:B6:55:DA:68:36:2C:84:48:56:FD Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584AF2567B4D0DD11BB2D899BB80 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7b:4d:0d:d1:1b:b2:d8:99:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=60e741e3-6ce5-471c-8376-84df99111fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:ad:5d:a9:78:c7:2f:15:ea:94:20:df:52: 58:8e:04:9a:15:a9:18:01:5b:d2:b0:fd:20:41:de: 9f:d2:32:cf:b6:15:76:f1:b4:be:d9:90:b8:0a:b3: d8:e9:df:16:5e:e4:b7:b5:9f:85:43:68:c3:6e:3c: 08:b4:d2:cb:a9:b2:68:a8:85:00:15:ac:b5:8c:6d: 4d:ae:6c:44:53:c7:ba:b8:55:c7:04:b9:5d:fb:ff: 4f:bd:6d:f0:ce:8d:71:c1:b3:eb:f2:85:2d:f6:19: be:e9:e7:0f:14:7c:12:e1:9e:fa:40:17:97:a7:51: ff:c2:d8:5c:3f:c3:6a:db:09:13:92:53:26:d0:1c: 0e:47:de:fe:a4:56:da:3f:62:46:29:04:39:2e:b9: 7b:e4:f3:de:32:aa:a6:29:0e:56:f6:84:e0:79:0f: c7:f2:4d:1b:a4:e0:d4:a8:aa:f6:ab:66:71:da:2e: ac:71:a1:d3:ba:56:6d:50:f8:cc:00:ae:f4:1c:dc: db:c3:b2:4a:da:e9:3d:7a:3f:d0:a4:2c:ed:2a:04: 66:48:41:1d:6a:1b:cf:ff:9b:81:29:94:5b:d4:4f: 39:36:4e:45:bf:b0:61:95:9e:bb:94:0b:f4:c4:e8: 00:49:03:75:f0:f2:09:e7:a0:28:87:bc:a6:04:a9: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:F0:24:71:81:8D:5F:15:A7:B6:55:DA:68:36:2C:84:48:56:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ea:2a:23:e5:23:f9:c5:f8:5e:07:b1:a8:87:39:6f:5d:91: 34:d0:2d:a6:9d:e8:05:fa:55:03:e7:4f:b8:54:29:ea:dc:7a: 1f:76:ea:96:cf:fb:d6:28:83:41:41:72:1f:8f:c6:fa:8e:6e: 4a:28:9a:e1:22:c3:2a:66:e5:28:ac:b6:bb:25:23:63:5b:69: c2:9e:7e:69:33:1d:fd:0a:2f:e6:c5:6c:44:5a:be:08:72:b8: 0c:c2:3e:15:77:6d:25:b9:46:98:02:fb:95:30:c6:6c:9e:bc: 68:02:17:fd:d6:f9:07:42:37:1e:d5:49:6e:55:6c:dd:c5:8b: 31:fd:50:cd:4d:15:1a:88:e4:67:4c:ad:f0:86:25:9e:7d:e3: 3b:aa:7a:b6:56:17:79:bb:21:4b:c0:89:00:39:4c:a8:0b:ed: 74:e8:79:1a:f5:d4:be:af:47:86:83:07:3e:21:2b:ed:c1:ac: a3:77:4b:47:b9:2c:8f:cd:42:0f:cb:d6:84:19:72:b7:88:c5: 88:a0:6b:fe:30:97:a8:50:de:39:3c:d9:c8:86:25:3c:f3:3c: 40:95:12:a9:95:35:2a:ba:58:ed:9b:5d:84:c5:ac:f8:6f:58: d9:1b:f4:0b:49:b9:5d:4a:a5:29:3b:5b:1e:8d:5b:a7:a7:d6: ce:92:60:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVntNDdEbstiZu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NjBlNzQxZTMtNmNlNS00NzFjLTgzNzYtODRkZjk5MTExZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGGtXal4xy8V6pQg31JYjgSaFakYAVvSsP0g Qd6f0jLPthV28bS+2ZC4CrPY6d8WXuS3tZ+FQ2jDbjwItNLLqbJoqIUAFay1jG1N rmxEU8e6uFXHBLld+/9PvW3wzo1xwbPr8oUt9hm+6ecPFHwS4Z76QBeXp1H/wthc P8Nq2wkTklMm0BwOR97+pFbaP2JGKQQ5Lrl75PPeMqqmKQ5W9oTgeQ/H8k0bpODU qKr2q2Zx2i6scaHTulZtUPjMAK70HNzbw7JK2uk9ej/QpCztKgRmSEEdahvP/5uB KZRb1E85Nk5Fv7BhlZ67lAv0xOgASQN18PIJ56Aoh7ymBKlccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/G8CRxgY1fFae2VdpoNiyESFb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTqKiPlI/nF+F4HsaiHOW9dkTTQLaad6AX6VQPnT7hUKerceh926pbP +9Yog0FBch+PxvqObkoomuEiwypm5SistrslI2NbacKefmkzHf0KL+bFbERavghy uAzCPhV3bSW5RpgC+5UwxmyevGgCF/3W+QdCNx7VSW5VbN3FizH9UM1NFRqI5GdM rfCGJZ594zuqerZWF3m7IUvAiQA5TKgL7XToeRr11L6vR4aDBz4hK+3BrKN3S0e5 LI/NQg/L1oQZcreIxYiga/4wl6hQ3jk82ciGJTzzPECVEqmVNSq6WO2bXYTFrPhv WNkb9AtJuV1KpSk7Wx6NW6en1s6SYKk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:32:04 2025 by rpki-client