$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa File: 429c2c19-e860-3ce9-8432-d4cd3f987677.roa (raw, json) Hash identifier: 16Z1UnqIZ7kVUyNFgSVbXW7rOmkC2+pNZThLlYynEzA= Subject key identifier: FD:D6:CF:A9:D0:0C:BA:05:69:25:63:DD:8E:DD:BE:BD:0A:D9:02:C3 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584AC2E0E93B0BD7646603A242C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 14297 IP address blocks: 139.131.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e9:3b:0b:d7:64:66:03:a2:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=a1fe5c97-ee72-4330-bcb3-1d439738dcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:7a:9a:c6:62:82:7f:c8:04:0e:34:35:2a: c6:1b:9e:59:f9:7d:87:72:7b:78:d4:bc:3c:ed:4b: f5:41:88:0b:a3:f7:53:5d:1e:ff:c0:32:99:52:97: 9c:06:d6:de:09:ad:88:25:7d:2b:2f:48:f5:47:4a: 27:43:a5:8f:8b:d7:f5:5d:49:97:52:7d:fd:eb:87: b7:65:6a:24:e5:7d:60:99:2f:fe:37:63:07:0a:44: a9:e0:0d:cf:28:f3:38:a6:9c:81:93:b4:4d:8e:ea: 4b:0f:19:65:2a:87:61:71:52:71:d8:a1:60:b0:e4: f7:67:9a:06:27:a6:82:74:54:ba:d4:ad:3b:83:7b: 48:0d:c5:9d:c3:ab:db:d7:b0:d0:0d:91:62:09:d2: 6d:97:e1:db:1a:46:08:14:ac:79:07:94:49:1b:dd: 0d:53:22:9b:1a:ad:17:df:29:87:1a:68:88:c5:0b: 28:88:15:2b:cc:1a:16:cf:83:b4:6a:75:6a:e6:5f: 29:5a:7f:4b:76:ef:f5:75:3c:9b:00:dd:bd:76:52: 80:ea:2e:1b:2b:9e:cf:1e:22:ad:f4:9c:cf:f4:10: 24:38:32:a2:e0:38:42:42:80:0b:90:55:b4:a1:9f: fa:4a:95:2c:54:f7:f4:17:a9:ca:64:7d:4d:2f:96: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D6:CF:A9:D0:0C:BA:05:69:25:63:DD:8E:DD:BE:BD:0A:D9:02:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/429c2c19-e860-3ce9-8432-d4cd3f987677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:71:9b:52:5f:cd:95:77:0d:8e:93:50:45:56:94:11:55: c9:4b:66:ac:d8:4b:9c:d2:28:47:d5:52:84:bb:3e:9d:6c:9b: a6:3c:3a:b5:54:21:8d:a3:fe:ff:d9:13:17:9c:6f:22:8a:1b: 24:bc:8e:dd:7d:d0:74:c1:0c:e9:e9:15:27:79:11:31:33:90: 22:dc:5e:97:fe:46:9c:23:3a:0e:a6:1f:53:6f:7d:42:0a:d6: 2f:6f:fe:d2:0d:ec:02:14:e7:cf:32:e0:7b:91:96:c2:29:fb: d5:17:e2:46:96:99:f1:2a:d2:ff:e7:89:8c:2e:51:5d:38:d4: 54:6e:07:96:07:56:7f:67:0d:f8:36:75:f3:33:6e:b2:7a:d7: 3d:dc:84:12:06:56:3c:4c:b7:4e:c4:d3:55:cb:eb:aa:f0:ca: cc:4f:c5:20:d3:19:3a:8f:20:f7:a1:2f:74:11:fa:24:d4:c7: 2f:95:dd:2b:fe:a2:b7:5d:e3:1b:66:14:46:07:33:8d:5e:3b: 5c:6f:7f:ad:79:0d:15:55:f3:f5:fa:4a:81:c4:1a:e0:8e:2e: ff:e9:c1:c7:74:8d:a4:3a:85:db:a9:e8:3c:ad:9d:d5:a8:8c: 5a:a8:2b:7f:21:54:79:1b:7d:9f:9f:8a:d8:3d:c6:0e:44:e7: 43:53:60:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Ok7C9dkZgOiQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTFmZTVjOTctZWU3Mi00MzMwLWJjYjMtMWQ0Mzk3MzhkY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUh6msZign/IBA40NSrGG55Z+X2Hcnt41Lw8 7Uv1QYgLo/dTXR7/wDKZUpecBtbeCa2IJX0rL0j1R0onQ6WPi9f1XUmXUn3964e3 ZWok5X1gmS/+N2MHCkSp4A3PKPM4ppyBk7RNjupLDxllKodhcVJx2KFgsOT3Z5oG J6aCdFS61K07g3tIDcWdw6vb17DQDZFiCdJtl+HbGkYIFKx5B5RJG90NUyKbGq0X 3ymHGmiIxQsoiBUrzBoWz4O0anVq5l8pWn9Ldu/1dTybAN29dlKA6i4bK57PHiKt 9JzP9BAkODKi4DhCQoALkFW0oZ/6SpUsVPf0F6nKZH1NL5Z5qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3Wz6nQDLoFaSVj3Y7dvr0K2QLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDI5YzJjMTktZTg2MC0z Y2U5LTg0MzItZDRjZDNmOTg3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4MSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbgcZtSX82Vdw2Ok1BFVpQRVclLZqzYS5zSKEfVUoS7Pp1sm6Y8OrVU IY2j/v/ZExecbyKKGyS8jt190HTBDOnpFSd5ETEzkCLcXpf+RpwjOg6mH1NvfUIK 1i9v/tIN7AIU588y4HuRlsIp+9UX4kaWmfEq0v/niYwuUV041FRuB5YHVn9nDfg2 dfMzbrJ61z3chBIGVjxMt07E01XL66rwysxPxSDTGTqPIPehL3QR+iTUxy+V3Sv+ ordd4xtmFEYHM41eO1xvf615DRVV8/X6SoHEGuCOLv/pwcd0jaQ6hdup6DytndWo jFqoK38hVHkbfZ+fitg9xg5E50NTYIc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:12 2025 by rpki-client