$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa File: 0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa (raw, json) Hash identifier: Pq/S4DfzkT4M4YfdXGPB6ORvJXFkkGxrBPJBzwmC1VM= Subject key identifier: 2B:73:84:F1:CA:1F:73:B1:44:AC:DD:54:ED:A3:99:09:2E:9B:0B:CC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA60845F8723D1FF4100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:60:84:5f:87:23:d1:ff:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=1571de93-be7f-4c53-a9a9-88cf6d9cd95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:5e:3b:db:47:73:ae:ec:02:9b:3c:f2:1a: 0d:86:d8:01:9f:2f:75:34:29:d8:e6:e5:79:87:b7: 81:3b:e8:56:18:77:4c:3a:e1:1f:d6:21:4b:7c:ec: 2d:ac:0d:7f:3c:ac:6f:f3:ed:be:d8:ee:82:9d:a4: 44:c1:b1:25:42:b1:fa:d4:61:08:fa:3c:35:73:ff: 33:46:a3:ba:f1:35:56:cd:ae:2a:33:f8:0b:00:ef: 42:3c:56:8c:74:3e:3f:87:d0:e3:5e:d5:b9:61:58: 22:db:82:ba:60:7f:ff:25:7d:54:6f:8d:23:0a:b4: 15:c4:58:64:21:f9:f1:44:d5:31:2b:95:e7:c5:b4: 80:99:a4:59:20:44:25:a8:32:1a:7b:9f:7e:92:30: 8a:5f:c2:fa:e8:1a:d1:41:1b:9f:c6:25:34:2c:16: a6:e3:99:ed:ee:c7:34:b6:71:78:cf:7e:ac:6f:f3: e5:43:68:52:61:b3:1a:e0:b6:ab:be:47:04:6a:99: 83:aa:65:e9:ef:9b:73:92:c9:5f:5f:dc:af:4d:f0: 28:3f:f7:47:19:6e:0e:b3:c3:84:5e:19:e6:4e:41: 87:3d:5d:d5:74:7e:da:5c:a6:b9:4a:98:0f:70:53: 57:0a:be:0d:e5:7a:9b:09:df:78:5a:50:32:7c:6b: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:84:F1:CA:1F:73:B1:44:AC:DD:54:ED:A3:99:09:2E:9B:0B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e8:fe:5e:a5:8f:68:a1:0b:bc:b4:60:d7:2b:80:bf:c5:2c: 23:77:fd:31:a4:ab:78:5f:6c:01:49:ac:29:b5:0e:ff:92:ac: 4d:c9:4e:40:e2:fc:12:55:c9:52:f9:55:b4:f4:ae:65:14:8f: 68:a0:2f:56:dd:e2:7f:fa:49:08:19:ff:25:fb:dc:41:f0:9f: 66:be:01:12:7b:fa:35:7f:18:c2:da:3f:bd:99:b6:9a:11:76: a3:f7:42:6d:23:d5:30:b6:36:72:c3:a6:3c:ba:fa:07:6f:be: 3e:47:64:3d:a1:42:c5:e1:78:3f:05:35:7d:3d:6f:59:17:38: 62:f8:33:21:78:1f:ea:34:42:fe:a3:9b:c6:a3:77:7b:98:90: 7a:5f:73:7c:78:fb:49:54:40:28:b1:da:24:6a:6c:70:6a:cd: d1:90:0a:93:86:20:26:0b:60:c8:2b:06:d8:7f:1b:98:53:57: 2f:84:15:39:86:a2:56:06:a0:aa:24:80:72:32:59:e0:a2:04: 97:17:5d:94:3b:08:6b:17:eb:eb:e2:ab:22:4b:8f:84:e5:8e: a0:f7:e1:11:dd:cf:e2:b8:34:7f:1d:22:46:13:98:12:75:f5: a3:7e:38:ad:64:c6:4d:9e:78:ca:e5:85:a5:f5:a4:df:8c:e3: b7:05:29:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VupghF+HI9H/QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MTU3MWRlOTMtYmU3Zi00YzUzLWE5YTktODhjZjZkOWNkOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFeO9tHc67sAps88hoNhtgBny91NCnY5uV5 h7eBO+hWGHdMOuEf1iFLfOwtrA1/PKxv8+2+2O6CnaREwbElQrH61GEI+jw1c/8z RqO68TVWza4qM/gLAO9CPFaMdD4/h9DjXtW5YVgi24K6YH//JX1Ub40jCrQVxFhk IfnxRNUxK5XnxbSAmaRZIEQlqDIae59+kjCKX8L66BrRQRufxiU0LBam45nt7sc0 tnF4z36sb/PlQ2hSYbMa4LarvkcEapmDqmXp75tzkslfX9yvTfAoP/dHGW4Os8OE XhnmTkGHPV3VdH7aXKa5SpgPcFNXCr4N5XqbCd94WlAyfGshDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtzhPHKH3OxRKzdVO2jmQkumwvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGVkOTM3YjctN2Y2MC0z NmRmLThkOWYtNjNjODZjNjNiOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLo/l6lj2ihC7y0YNcrgL/FLCN3/TGkq3hfbAFJrCm1Dv+SrE3JTkDi /BJVyVL5VbT0rmUUj2igL1bd4n/6SQgZ/yX73EHwn2a+ARJ7+jV/GMLaP72ZtpoR dqP3Qm0j1TC2NnLDpjy6+gdvvj5HZD2hQsXheD8FNX09b1kXOGL4MyF4H+o0Qv6j m8ajd3uYkHpfc3x4+0lUQCix2iRqbHBqzdGQCpOGICYLYMgrBth/G5hTVy+EFTmG olYGoKokgHIyWeCiBJcXXZQ7CGsX6+viqyJLj4TljqD34RHdz+K4NH8dIkYTmBJ1 9aN+OK1kxk2eeMrlhaX1pN+M47cFKfQ= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:41 2025 by rpki-client