$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa File: f5f1bbca-cda0-335e-a870-10735a4a0b93.roa (raw, json) Hash identifier: 3I7WKp/3+UkP2DL8i7Z7EUkrkjclXBSXD4gtcHPGS3g= Subject key identifier: CB:3D:1D:1F:7C:7D:8B:75:CC:34:6D:DE:BE:DF:B2:5E:D8:F0:D2:2C Certificate issuer: /CN=fc9bd684-883b-41b8-9890-8cd78117898c Certificate serial: 010D0C9F4328584B8BE22EB673EFAE5CD71CD3C0 Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40051 IP address blocks: 139.104.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2e:b6:73:ef:ae:5c:d7:1c:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=1907f2cf-4151-480c-bd82-ad87fe6886f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:73:d4:93:59:11:17:c2:e9:be:26:a7:a4: ed:2a:ce:d3:51:07:47:8d:29:5b:cf:8c:61:7b:07: 70:dd:36:1f:6a:44:ad:9b:18:a0:57:c4:67:ec:e8: 9d:97:f6:71:dc:d9:d9:be:5e:62:76:e3:49:12:5a: 0e:dd:15:5f:93:91:5b:08:cc:25:bf:7b:72:0f:f6: 92:61:e3:bf:8f:b0:71:39:59:d7:18:6f:a2:23:c0: 36:81:4d:24:aa:b7:b1:58:b7:9a:77:ad:bd:61:ac: a1:9f:e6:38:fe:4f:9e:84:77:8d:18:dc:c7:7f:47: 28:3c:d5:81:44:61:e8:a0:92:8a:f7:a0:0b:cd:63: 11:cf:1e:91:d2:db:67:fa:c1:fe:8e:02:82:66:76: d9:04:80:e9:1f:2f:5e:6d:2d:01:b0:f0:b2:82:35: d9:b6:91:d1:35:c1:56:b0:be:fc:95:96:9e:3c:34: 31:83:46:7d:97:1b:2d:94:1d:cd:a2:b6:31:d8:a8: 93:ff:a0:a1:f9:0e:8f:7e:ea:85:91:00:ff:cb:71: d3:fc:21:5a:8c:0e:ac:2a:a0:ff:ee:0c:43:df:e3: bc:4d:58:fe:18:77:5b:b2:b3:50:52:14:03:2e:1d: cd:4a:d8:4d:3d:52:d5:93:7a:7f:d6:f6:a1:7c:08: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:1D:1F:7C:7D:8B:75:CC:34:6D:DE:BE:DF:B2:5E:D8:F0:D2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl X509v3 Authority Key Identifier: keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer sbgp-ipAddrBlock: critical IPv4: 139.104.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:56:ae:9b:fc:3d:b0:d6:9d:61:c9:6c:6a:ec:e9:1f:4e:2e: 95:19:03:42:41:2d:cf:61:76:39:e7:61:04:58:f1:1d:ee:0d: 47:6c:ff:4a:dc:97:3d:81:82:4b:02:18:f0:5f:e4:3b:4c:57: bb:94:c1:ba:8a:2f:27:0f:6d:6c:ac:2f:81:6c:e8:d0:69:94: e1:0e:62:e1:7a:d7:af:0e:85:b8:25:ac:0d:12:ee:b1:ec:08: da:89:d3:2a:34:44:cc:c7:4e:8f:8e:35:70:81:4b:9b:e9:d3: e7:30:93:52:63:f9:48:80:de:a7:57:39:3f:2c:15:d8:ae:6a: c8:ca:02:40:cc:27:c0:b8:db:dd:ba:46:76:6d:f9:a1:c8:ff: 1e:df:80:69:d7:bb:45:a0:98:5d:56:62:64:60:e1:5e:bf:d0: aa:d3:79:42:65:f1:99:51:19:1d:6c:ba:5c:c4:93:2d:c9:d5: f1:04:2c:c2:8f:95:d3:5b:ec:91:e9:06:fe:75:bc:10:a4:8b: 23:51:d5:3e:86:e6:82:50:ac:ea:1b:66:0b:71:9d:a1:54:f2: 9c:88:95:d8:f7:91:90:04:08:60:22:cf:c9:cb:ef:5b:7a:21: e0:24:24:b1:41:8b:ba:72:9e:70:e6:44:41:cf:37:a1:98:65: 01:38:c5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4i62c++uXNcc08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4 OThjMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MTkwN2YyY2YtNDE1MS00ODBjLWJkODItYWQ4N2ZlNjg4NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg61z1JNZERfC6b4mp6TtKs7TUQdHjSlbz4xh ewdw3TYfakStmxigV8Rn7Oidl/Zx3NnZvl5iduNJEloO3RVfk5FbCMwlv3tyD/aS YeO/j7BxOVnXGG+iI8A2gU0kqrexWLead629Yayhn+Y4/k+ehHeNGNzHf0coPNWB RGHooJKK96ALzWMRzx6R0ttn+sH+jgKCZnbZBIDpHy9ebS0BsPCygjXZtpHRNcFW sL78lZaePDQxg0Z9lxstlB3NorYx2KiT/6Ch+Q6PfuqFkQD/y3HT/CFajA6sKqD/ 7gxD3+O8TVj+GHdbsrNQUhQDLh3NSthNPVLVk3p/1vahfAjdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs9HR98fYt1zDRt3r7fsl7Y8NIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvZjVmMWJiY2EtY2RhMC0z MzVlLWE4NzAtMTA3MzVhNGEwYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4 OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3 ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3 ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi2gVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZWrpv8PbDWnWHJbGrs6R9OLpUZA0JBLc9hdjnnYQRY8R3uDUds/0rc lz2BgksCGPBf5DtMV7uUwbqKLycPbWysL4Fs6NBplOEOYuF6168OhbglrA0S7rHs CNqJ0yo0RMzHTo+ONXCBS5vp0+cwk1Jj+UiA3qdXOT8sFdiuasjKAkDMJ8C42926 RnZt+aHI/x7fgGnXu0WgmF1WYmRg4V6/0KrTeUJl8ZlRGR1sulzEky3J1fEELMKP ldNb7JHpBv51vBCkiyNR1T6G5oJQrOobZgtxnaFU8pyIldj3kZAECGAiz8nL71t6 IeAkJLFBi7pynnDmREHPN6GYZQE4xZE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:08 2025 by rpki-client