$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa File: 3284b412-8828-3c30-abd3-dffc9d12cb9a.roa (raw, json) Hash identifier: JcJ0I2gWZ1XlQle7CoHdladd0lA8ts+gVdEeSsNbEoQ= Subject key identifier: 84:CC:94:DB:45:47:D9:5D:8C:21:74:80:F2:50:F2:3F:18:60:61:86 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AF5214D4CE67ACDF506F76B1A Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4d:4c:e6:7a:cd:f5:06:f7:6b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5797c4fe-66f7-48f8-8ff9-f0c800a5d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:27:ca:c7:a5:28:6d:aa:fb:a5:e6:e5:88: c0:b2:53:0e:59:91:41:51:20:bf:b2:92:64:0a:31: 35:25:03:2b:03:31:5b:5b:f2:fa:2b:09:79:1c:86: 20:25:f9:71:de:70:ba:50:a4:08:5c:ed:ad:7a:c9: af:4b:f7:9e:bf:11:72:c6:be:33:21:fd:62:94:c8: 99:7e:8f:65:6c:b1:27:66:78:54:aa:b5:b3:ab:31: 44:5c:a7:c4:79:b8:c7:38:6f:ae:05:1d:ba:63:d0: e7:59:f0:dc:50:67:a9:0c:f0:af:a7:c2:8f:80:31: ad:3c:07:fe:9d:f8:bd:83:d7:c5:cc:93:7c:9d:4c: 9a:15:c0:56:a7:2b:8d:cb:a5:89:f4:9a:69:c9:90: a4:e0:05:68:11:a7:3f:f8:11:22:cf:18:3e:f4:07: 2c:8e:84:0d:ee:2f:5b:cb:b7:9b:15:80:b8:04:7b: 79:ce:91:27:1f:e8:1c:75:2e:f0:73:7b:62:b9:4b: 41:01:f0:ea:b5:3d:42:de:ab:54:82:31:d3:14:66: 98:d7:0b:34:87:4f:6c:b5:cf:38:84:2d:9a:f1:83: 89:bd:b4:d5:4b:a3:a7:02:61:ed:98:3e:3d:4a:f5: 33:f0:cd:d8:33:e9:00:55:ee:be:ae:47:39:65:dc: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:94:DB:45:47:D9:5D:8C:21:74:80:F2:50:F2:3F:18:60:61:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/3284b412-8828-3c30-abd3-dffc9d12cb9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a3:a3:a2:34:90:7c:87:2c:85:a5:6e:bd:f3:54:76:15:7d: d6:f0:66:0a:26:5b:ab:6d:2d:f6:1e:33:89:38:d5:36:57:9c: dd:bf:21:ca:a0:ea:d3:fd:41:f1:6e:82:34:08:fd:db:4e:57: 3d:f3:81:ca:ad:94:58:ef:fd:ee:df:01:9b:47:1c:a9:0d:73: 4a:f6:3b:8e:a5:5b:5e:35:04:29:51:8c:79:7b:5d:93:b0:1b: a1:b5:f6:a6:1c:0e:83:84:20:e9:8d:d8:e3:c1:31:7b:24:f0: 27:c5:75:ca:6d:e7:e7:9a:42:d3:9d:6c:30:8b:08:f5:08:fb: fc:c1:32:1a:dd:41:ee:c8:25:64:de:7f:38:5f:23:f9:f3:46: 68:da:0e:03:0d:86:ee:d1:f8:77:09:97:89:dc:d3:ae:1a:c7: 77:99:e0:1b:fa:e6:0d:49:92:32:47:e1:06:7c:3f:13:97:e3: c9:06:85:29:0a:1a:de:af:3d:f3:de:2c:6b:63:34:60:c4:6e: 19:b0:3e:36:7b:fb:54:fc:2d:ec:ba:3a:ce:82:98:64:22:c3: 89:eb:5d:27:4f:49:3c:89:3b:c5:4c:94:db:db:bb:e1:cd:ec: 17:7f:45:6d:71:ae:18:ff:ca:c7:b2:ef:83:45:53:6c:5a:b1: 10:0c:9a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU1M5nrN9Qb3axowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTc5N2M0ZmUtNjZmNy00OGY4LThmZjktZjBjODAwYTVkNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniAnyselKG2q+6Xm5YjAslMOWZFBUSC/spJk CjE1JQMrAzFbW/L6Kwl5HIYgJflx3nC6UKQIXO2tesmvS/eevxFyxr4zIf1ilMiZ fo9lbLEnZnhUqrWzqzFEXKfEebjHOG+uBR26Y9DnWfDcUGepDPCvp8KPgDGtPAf+ nfi9g9fFzJN8nUyaFcBWpyuNy6WJ9JppyZCk4AVoEac/+BEizxg+9AcsjoQN7i9b y7ebFYC4BHt5zpEnH+gcdS7wc3tiuUtBAfDqtT1C3qtUgjHTFGaY1ws0h09stc84 hC2a8YOJvbTVS6OnAmHtmD49SvUz8M3YM+kAVe6+rkc5ZdyjCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITMlNtFR9ldjCF0gPJQ8j8YYGGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMzI4NGI0MTItODgyOC0z YzMwLWFiZDMtZGZmYzlkMTJjYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi4PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWjo6I0kHyHLIWlbr3zVHYVfdbwZgomW6ttLfYeM4k41TZXnN2/Icqg 6tP9QfFugjQI/dtOVz3zgcqtlFjv/e7fAZtHHKkNc0r2O46lW141BClRjHl7XZOw G6G19qYcDoOEIOmN2OPBMXsk8CfFdcpt5+eaQtOdbDCLCPUI+/zBMhrdQe7IJWTe fzhfI/nzRmjaDgMNhu7R+HcJl4nc064ax3eZ4Bv65g1JkjJH4QZ8PxOX48kGhSkK Gt6vPfPeLGtjNGDEbhmwPjZ7+1T8Ley6Os6CmGQiw4nrXSdPSTyJO8VMlNvbu+HN 7Bd/RW1xrhj/ysey74NFU2xasRAMmtY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:28 2025 by rpki-client