$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa File: a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json) Hash identifier: DPPqyL7quyJhESg+3Vp2zeGmKUpGbLr2KqOy6xAwX4o= Subject key identifier: DD:63:0A:0E:0A:66:5B:CF:36:FE:13:91:5A:4D:E1:2B:C4:76:B8:A3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B0E41544F2A17A9E32C1FBFC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 30215 IP address blocks: 139.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:54:4f:2a:17:a9:e3:2c:1f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=14c8c8c1-2e7f-4c2f-897d-2fef31fb6e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:f9:4e:03:e1:81:55:cf:0d:dc:79:a2:a0: fa:b8:5e:a9:cd:21:cc:e9:40:80:ee:49:6f:0e:c5: 3a:af:c6:98:62:45:f6:7a:1d:b4:7c:24:f5:eb:73: 66:5c:fc:d1:f9:a3:06:ba:65:58:d1:76:52:c7:ae: 28:46:fd:69:86:fc:2b:dd:1d:58:89:6e:50:c8:89: 23:e9:57:c1:4d:dd:e7:cd:d5:7a:c7:24:17:95:ab: ff:4c:76:8d:13:4b:2c:92:b5:d3:00:a5:82:ed:3d: 8c:f5:04:a8:4c:61:67:a7:7a:d4:5c:67:11:6b:71: 63:e6:75:7b:84:94:de:1f:b1:88:29:62:fd:b4:f0: 07:b4:ec:af:d6:2a:16:89:bc:6a:85:e1:5e:fd:cb: 5d:8a:d2:02:43:bf:96:a3:38:2e:82:61:02:9e:ad: 64:f4:1f:34:1a:65:8c:44:61:77:e9:bc:1f:41:16: 3f:ff:d1:fd:6f:44:8f:ba:8c:4b:b6:49:26:8c:f7: 87:3c:0c:96:f0:01:df:d8:48:42:ff:1b:15:4e:85: 14:8e:80:6b:ea:6e:25:33:77:59:e0:54:91:15:21: a3:b6:92:b5:b2:34:98:17:4f:48:72:b8:89:2d:31: 5f:37:9e:c0:06:4b:ed:5a:b0:bd:82:cd:bc:0b:58: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:63:0A:0E:0A:66:5B:CF:36:FE:13:91:5A:4D:E1:2B:C4:76:B8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:14:f8:8f:49:fa:7b:fe:b7:8f:c2:44:c7:54:b9:c9:33:29: d2:6f:8a:ad:94:0f:b5:ad:9c:b9:b4:4d:3b:b6:3c:86:2f:e6: 65:1a:6f:94:48:65:a5:cc:2c:63:b0:20:f4:b1:06:a0:54:f8: 99:5a:02:59:6f:78:16:14:1c:94:c4:98:64:6e:0c:d0:85:4e: a9:45:ad:72:ba:95:4c:ea:95:7b:24:b1:0c:e0:51:1d:20:37: 1c:ba:51:fa:2a:3b:1e:bf:e4:5c:11:02:1c:93:be:fa:b8:e3: 7c:4e:10:d3:c2:9b:b9:7e:ce:c5:b3:3c:c1:18:c6:e4:07:07: 5b:a2:53:32:c8:fd:c5:df:c0:4e:7a:bf:9a:74:d7:44:eb:c6: 25:59:e1:26:88:d0:42:6e:c1:ef:a2:e1:bc:69:59:d5:c6:eb: ff:09:ef:73:c2:28:51:38:60:61:06:7b:b3:01:82:d3:88:85: 73:4b:06:86:6f:5f:b8:21:8b:bd:47:6d:14:05:22:ec:b2:3c: 84:6d:fc:c6:80:57:0f:e9:98:e2:f0:f5:12:19:b3:d0:2c:f3: bb:5b:61:4d:26:27:b1:a9:17:3f:0f:73:11:43:62:f5:b0:43: 5a:fc:ca:6b:c4:41:99:47:a9:01:e3:b9:23:49:f8:96:52:5a: af:80:73:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVRPKhep4ywfv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTRjOGM4YzEtMmU3Zi00YzJmLTg5N2QtMmZlZjMxZmI2ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquT5TgPhgVXPDdx5oqD6uF6pzSHM6UCA7klv DsU6r8aYYkX2eh20fCT163NmXPzR+aMGumVY0XZSx64oRv1phvwr3R1YiW5QyIkj 6VfBTd3nzdV6xyQXlav/THaNE0sskrXTAKWC7T2M9QSoTGFnp3rUXGcRa3Fj5nV7 hJTeH7GIKWL9tPAHtOyv1ioWibxqheFe/ctditICQ7+WozgugmECnq1k9B80GmWM RGF36bwfQRY//9H9b0SPuoxLtkkmjPeHPAyW8AHf2EhC/xsVToUUjoBr6m4lM3dZ 4FSRFSGjtpK1sjSYF09IcriJLTFfN57ABkvtWrC9gs28C1iYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1jCg4KZlvPNv4TkVpN4SvEdrijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTM1OWQ5YWEtNTA4My0z MjVhLTg3ZTQtNmIyODVhODdlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoU+I9J+nv+t4/CRMdUuckzKdJviq2UD7WtnLm0TTu2PIYv5mUab5RI ZaXMLGOwIPSxBqBU+JlaAllveBYUHJTEmGRuDNCFTqlFrXK6lUzqlXsksQzgUR0g Nxy6UfoqOx6/5FwRAhyTvvq443xOENPCm7l+zsWzPMEYxuQHB1uiUzLI/cXfwE56 v5p010TrxiVZ4SaI0EJuwe+i4bxpWdXG6/8J73PCKFE4YGEGe7MBgtOIhXNLBoZv X7ghi71HbRQFIuyyPIRt/MaAVw/pmOLw9RIZs9As87tbYU0mJ7GpFz8PcxFDYvWw Q1r8ymvEQZlHqQHjuSNJ+JZSWq+Acyo= -----END CERTIFICATE-----Generated at Tue Sep 16 02:41:18 2025 by rpki-client