$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa File: a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa (raw, json) Hash identifier: Grj+j7qdJaM+YZSHIzOJIgkW93qkNYsTfk/1ep1A9SI= Subject key identifier: 0C:9C:F8:49:28:67:8A:85:7A:CE:29:40:29:8B:FB:BE:3E:0F:B5:C1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA23C78FFC11FEEFFF96 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:23:c7:8f:fc:11:fe:ef:ff:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=47ed56e2-67f5-4016-948b-99901ddb4a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:a2:c4:52:40:0f:b1:21:ef:82:a3:d1:75: dd:65:c2:22:c9:61:d2:ee:c3:61:7f:ce:cb:07:3a: 66:fb:a9:93:0a:35:06:7e:bc:82:79:21:05:9b:29: f0:3a:d2:b5:41:de:0a:63:3c:f6:43:1d:2c:e7:6c: 52:43:53:43:29:33:70:16:30:f4:8b:f4:74:77:1d: 1f:08:57:e1:c7:22:58:55:3b:da:af:49:1b:8f:23: 46:94:3c:bf:2a:e1:52:e5:b5:cc:bc:68:71:e3:86: b6:eb:62:4a:60:5d:13:2d:2b:e0:a9:8c:a4:92:cd: 8a:dc:b6:01:67:ba:0d:4e:ac:91:fe:9e:28:fc:66: d0:a1:21:13:eb:0b:50:b2:88:ce:ae:3c:02:11:3c: 73:31:95:51:7f:40:c8:2b:c3:aa:ca:b1:ec:fc:c0: c9:42:8b:eb:04:39:7b:7e:c2:2f:8a:83:9c:89:18: 9e:57:56:fc:9e:f5:5f:34:1c:d7:b0:82:de:23:85: 6e:08:4f:4c:2f:32:f3:de:68:66:31:6f:72:f4:5f: 60:a1:72:fc:d7:2b:88:d5:12:65:36:d9:f1:5d:aa: 06:73:c4:53:da:17:cc:c3:d6:a9:da:a8:19:05:9a: 1c:61:a6:05:24:62:6e:6d:74:b0:e0:03:86:a5:bb: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:F8:49:28:67:8A:85:7A:CE:29:40:29:8B:FB:BE:3E:0F:B5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0a:c7:e6:23:70:e0:64:5b:85:6b:21:11:7b:a6:7f:1f:6d: 76:e3:12:28:b3:66:51:82:17:0b:4f:e6:25:83:f3:51:80:60: f3:92:69:70:9a:db:52:7d:13:be:88:cf:3d:fa:f1:15:45:de: bc:70:fa:57:72:0c:61:19:31:ab:90:33:a8:52:98:94:86:d5: 60:18:1f:2f:84:4a:79:58:0c:2a:82:08:bf:39:62:c0:f3:20: 8e:15:ca:3e:dd:03:60:d5:c8:61:ea:05:90:b2:e4:d6:cb:bd: 75:ce:99:64:36:1f:79:eb:16:4e:87:8f:b2:e7:db:a7:d1:14: 9e:b6:31:b6:4f:d3:29:17:7b:84:8b:05:94:92:d2:c5:99:a4: ac:2e:ab:bb:d1:40:0d:11:7b:98:e0:11:10:d2:b7:c2:ff:b3: 9a:34:46:5e:bc:1f:8b:20:09:d1:aa:96:32:b0:b3:08:e5:df: e1:6b:46:1d:52:69:7a:1b:f5:b8:45:3c:4a:29:b9:37:4a:79: 20:9c:87:0d:0b:4d:1d:85:56:1d:42:f7:01:3d:2d:c5:15:d2: 6b:60:36:ab:48:46:ba:5e:c3:53:00:4f:31:e7:a6:ee:e2:b7: c9:c9:c4:01:c9:f5:6b:52:99:92:11:d6:70:bc:4b:eb:89:92: 5f:02:b1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vuojx4/8Ef7v/5YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NDdlZDU2ZTItNjdmNS00MDE2LTk0OGItOTk5MDFkZGI0YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYOixFJAD7Eh74Kj0XXdZcIiyWHS7sNhf87L Bzpm+6mTCjUGfryCeSEFmynwOtK1Qd4KYzz2Qx0s52xSQ1NDKTNwFjD0i/R0dx0f CFfhxyJYVTvar0kbjyNGlDy/KuFS5bXMvGhx44a262JKYF0TLSvgqYykks2K3LYB Z7oNTqyR/p4o/GbQoSET6wtQsojOrjwCETxzMZVRf0DIK8OqyrHs/MDJQovrBDl7 fsIvioOciRieV1b8nvVfNBzXsILeI4VuCE9MLzLz3mhmMW9y9F9goXL81yuI1RJl NtnxXaoGc8RT2hfMw9ap2qgZBZocYaYFJGJubXSw4AOGpbuz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyc+EkoZ4qFes4pQCmL+74+D7XBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYThjNGJmOGMtYWQ4MC0z NWU4LWE3OWUtYzQ0NDQwYWY3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsKx+YjcOBkW4VrIRF7pn8fbXbjEiizZlGCFwtP5iWD81GAYPOSaXCa 21J9E76Izz368RVF3rxw+ldyDGEZMauQM6hSmJSG1WAYHy+ESnlYDCqCCL85YsDz II4Vyj7dA2DVyGHqBZCy5NbLvXXOmWQ2H3nrFk6Hj7Ln26fRFJ62MbZP0ykXe4SL BZSS0sWZpKwuq7vRQA0Re5jgERDSt8L/s5o0Rl68H4sgCdGqljKwswjl3+FrRh1S aXob9bhFPEopuTdKeSCchw0LTR2FVh1C9wE9LcUV0mtgNqtIRrpew1MATzHnpu7i t8nJxAHJ9WtSmZIR1nC8S+uJkl8CsWU= -----END CERTIFICATE-----Generated at Tue Sep 16 02:40:39 2025 by rpki-client