$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: C8mHuqyNml4nSI+3/xdj0r7lzpJQBALHnr9+lN05RpU= Subject key identifier: F1:D5:16:07:9D:88:D9:2E:71:CA:C8:31:5D:BE:20:0A:36:3B:71:17 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA774D8EA86F3195AC80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:77:4d:8e:a8:6f:31:95:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=39da8d55-8b0b-4bc0-ad0e-4ae35142657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a1:7a:eb:33:30:e8:04:79:a8:0e:74:0e:97: a8:56:c2:0e:46:4a:0c:66:e3:97:4f:13:48:1e:4e: e1:7c:2d:b7:79:fa:40:11:53:11:2f:b9:4d:a3:57: 6c:b4:e9:fa:e4:c7:6c:1b:a0:d4:05:bd:5f:2f:f2: 2a:f0:2e:b4:e3:5e:d3:70:51:1c:86:43:ae:a5:d5: 78:ea:74:aa:75:d6:2a:7a:c9:74:ec:3a:be:6a:47: 17:46:68:88:6c:2d:7e:56:1e:1b:68:0d:83:f8:af: 42:d8:52:d4:4a:ae:50:95:85:2a:29:a3:67:2b:83: 5c:a3:1a:68:0b:1a:58:8a:5c:68:11:a4:33:a4:ff: 9a:4a:3d:5a:48:07:3c:59:ef:31:5d:b2:6f:d6:70: 3b:fd:44:49:ad:37:d9:4c:81:2d:76:b0:85:ac:79: 3e:1c:a5:07:75:59:fd:78:26:07:47:11:7d:a7:49: eb:31:f3:c0:a5:65:e9:e2:65:41:6c:55:c5:92:0d: 5f:30:93:e4:df:46:8a:72:a8:e4:43:e6:f2:53:46: 34:6c:23:98:11:01:65:b4:79:de:0f:89:9a:99:00: b2:9b:64:14:e6:79:49:3e:23:a6:c8:56:09:42:ec: a8:a2:d9:6b:d0:ec:bb:6c:a8:af:fd:5f:2b:c9:d1: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:16:07:9D:88:D9:2E:71:CA:C8:31:5D:BE:20:0A:36:3B:71:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f6:13:0d:c6:98:64:a8:e0:aa:a1:ed:62:c0:82:21:18:8b: 35:a5:b4:43:d7:a4:d6:11:d0:b8:5f:29:8e:c8:33:23:56:f4: 60:06:da:b6:13:a4:d9:cf:00:b4:2d:42:06:b8:2a:2d:6b:88: ce:66:01:72:03:8d:90:cb:aa:cc:0b:de:da:6b:b3:09:85:57: 70:b3:87:8d:a0:f1:76:4c:96:53:fb:3e:b8:38:5c:11:e5:af: b2:3d:33:69:28:2c:a0:01:71:1d:f5:c8:8a:2a:6f:5f:e9:77: c0:d4:5f:14:8f:1d:92:cc:37:fd:c8:eb:dc:4d:04:c3:d0:fd: 9f:16:0f:ff:f6:fa:72:63:85:10:ca:e9:de:b4:1d:d1:8e:91: 65:eb:f3:39:2e:6a:9a:b0:bd:b5:dc:8a:88:26:06:db:9a:d3: ae:33:23:e9:1b:84:f2:69:56:56:09:6e:73:b7:d1:4c:9e:72: d3:d9:53:c4:98:2e:80:34:d2:16:1d:90:82:ae:cd:09:66:5a: 63:53:98:35:fb:d9:64:ff:07:94:63:9c:0e:58:d4:23:35:8c: ca:0f:73:38:db:b3:b0:de:2d:1b:6d:a0:e2:80:08:84:7f:bf: 4f:51:93:13:03:97:8c:21:b8:66:d1:6c:8b:97:12:d6:01:b1: 38:20:81:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vup3TY6obzGVrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MzlkYThkNTUtOGIwYi00YmMwLWFkMGUtNGFlMzUxNDI2NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aF66zMw6AR5qA50DpeoVsIORkoMZuOXTxNI Hk7hfC23efpAEVMRL7lNo1dstOn65MdsG6DUBb1fL/Iq8C60417TcFEchkOupdV4 6nSqddYqesl07Dq+akcXRmiIbC1+Vh4baA2D+K9C2FLUSq5QlYUqKaNnK4Ncoxpo CxpYilxoEaQzpP+aSj1aSAc8We8xXbJv1nA7/URJrTfZTIEtdrCFrHk+HKUHdVn9 eCYHRxF9p0nrMfPApWXp4mVBbFXFkg1fMJPk30aKcqjkQ+byU0Y0bCOYEQFltHne D4mamQCym2QU5nlJPiOmyFYJQuyootlr0Oy7bKiv/V8rydFEEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHVFgediNkuccrIMV2+IAo2O3EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv2Ew3GmGSo4Kqh7WLAgiEYizWltEPXpNYR0LhfKY7IMyNW9GAG2rYT pNnPALQtQga4Ki1riM5mAXIDjZDLqswL3tprswmFV3Czh42g8XZMllP7Prg4XBHl r7I9M2koLKABcR31yIoqb1/pd8DUXxSPHZLMN/3I69xNBMPQ/Z8WD//2+nJjhRDK 6d60HdGOkWXr8zkuapqwvbXciogmBtua064zI+kbhPJpVlYJbnO30UyectPZU8SY LoA00hYdkIKuzQlmWmNTmDX72WT/B5RjnA5Y1CM1jMoPczjbs7DeLRttoOKACIR/ v09RkxMDl4whuGbRbIuXEtYBsTgggbs= -----END CERTIFICATE-----Generated at Tue Sep 16 02:35:15 2025 by rpki-client