$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa File: ba7363a2-8649-3b98-93b5-6f704982a180.roa (raw, json) Hash identifier: PvN3VeK4JnVidR6ZefDYMdilyb3cLn26vQNNaMPmnwY= Subject key identifier: A3:D8:0C:BA:E0:B0:A5:CA:0C:7C:A8:81:B3:1D:B6:C4:C3:35:0E:3C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA8FB36177B62C789100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:8f:b3:61:77:b6:2c:78:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ff1c8eca-fc32-4fb3-a8c8-2b70cec236e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:81:5c:0d:c5:c6:48:41:c6:c1:87:68:81:f5: b0:a6:bd:20:e9:c6:c4:ea:13:91:0f:e4:c1:32:56: 01:69:3f:0f:76:ec:61:91:ac:78:d3:e2:e6:ed:03: f2:1d:92:64:92:2a:2d:2a:5d:97:2d:08:5b:3e:c5: ef:6d:9d:65:41:f7:c1:1a:45:b4:8e:ed:30:7e:52: 99:1a:b1:ed:03:15:81:48:1b:e8:22:41:fe:48:57: 13:f4:12:be:0a:cb:c1:77:ad:25:d8:4e:31:04:c9: fd:5c:96:d3:55:93:05:b4:2b:d5:49:ac:44:42:f5: ff:1a:79:31:4a:df:18:02:69:86:c7:62:69:c7:8c: 95:36:bd:00:d6:be:c7:40:94:1f:8b:39:26:92:be: 88:79:96:3c:df:84:bf:10:1a:42:5a:c4:8e:03:12: 4b:5f:fb:fa:5c:58:f0:61:08:cf:f2:9a:59:c4:35: cb:ad:6f:e8:fa:fa:fa:9b:30:39:d1:2c:87:3b:a3: 95:0f:1d:f1:ef:05:9e:5e:4e:14:38:20:27:65:12: 24:b6:75:b6:69:e3:bc:1f:19:3d:37:72:53:df:b8: 50:9e:1c:86:76:8f:31:e6:2f:be:2e:ca:75:1b:56: f1:7f:ed:c0:ce:77:bd:f3:c3:1f:14:93:60:db:02: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D8:0C:BA:E0:B0:A5:CA:0C:7C:A8:81:B3:1D:B6:C4:C3:35:0E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4f:c0:00:39:af:32:bc:0f:dd:48:5a:ac:35:47:ea:28:8c: 4a:3c:27:57:af:84:71:68:22:88:1f:bd:f5:46:a2:47:71:67: 82:a4:44:c7:6c:f5:b0:ca:da:78:e7:e2:74:9e:30:4d:e4:aa: 44:8b:3c:6b:a6:8e:b1:15:38:9d:1a:4e:60:bf:95:b0:0c:bb: 06:60:ab:95:da:7f:2b:1d:8d:92:af:cd:71:e4:f2:11:03:f3: 18:c1:48:e6:ab:f4:f1:ad:43:7a:15:2a:d2:30:0c:c8:04:cc: b5:6d:ed:cc:c2:17:90:45:ec:de:a3:4d:f3:e7:42:cf:8d:f4: d9:e2:7a:58:b0:ec:66:a6:c9:9c:16:68:95:fe:f6:d2:90:f4: 0d:82:ef:4b:6a:46:ba:0c:2a:65:b4:8a:e3:b3:2c:48:2d:5b: e2:40:c6:66:e8:6c:dd:f4:88:52:d0:7c:55:a7:e5:5f:a2:8e: 58:10:94:42:d7:11:fa:04:66:cf:b5:97:df:e2:37:56:3b:da: 4e:a0:40:ca:32:c8:5f:08:72:41:09:5c:91:46:13:ca:97:5d: 4e:55:69:3c:df:36:62:18:8e:73:12:3d:d8:6c:1b:e4:58:8b: 79:6b:09:8a:85:a1:dd:87:b9:c9:5a:d1:a4:09:11:93:67:6e: 1a:35:f6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuqPs2F3tix4kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmYxYzhlY2EtZmMzMi00ZmIzLWE4YzgtMmI3MGNlYzIzNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4FcDcXGSEHGwYdogfWwpr0g6cbE6hORD+TB MlYBaT8Pduxhkax40+Lm7QPyHZJkkiotKl2XLQhbPsXvbZ1lQffBGkW0ju0wflKZ GrHtAxWBSBvoIkH+SFcT9BK+CsvBd60l2E4xBMn9XJbTVZMFtCvVSaxEQvX/Gnkx St8YAmmGx2Jpx4yVNr0A1r7HQJQfizkmkr6IeZY834S/EBpCWsSOAxJLX/v6XFjw YQjP8ppZxDXLrW/o+vr6mzA50SyHO6OVDx3x7wWeXk4UOCAnZRIktnW2aeO8Hxk9 N3JT37hQnhyGdo8x5i++Lsp1G1bxf+3Azne988MfFJNg2wJwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPYDLrgsKXKDHyogbMdtsTDNQ48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmE3MzYzYTItODY0OS0z Yjk4LTkzYjUtNmY3MDQ5ODJhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5PwAA5rzK8D91IWqw1R+oojEo8J1evhHFoIogfvfVGokdxZ4KkRMds 9bDK2njn4nSeME3kqkSLPGumjrEVOJ0aTmC/lbAMuwZgq5XafysdjZKvzXHk8hED 8xjBSOar9PGtQ3oVKtIwDMgEzLVt7czCF5BF7N6jTfPnQs+N9Nnieliw7GamyZwW aJX+9tKQ9A2C70tqRroMKmW0iuOzLEgtW+JAxmbobN30iFLQfFWn5V+ijlgQlELX EfoEZs+1l9/iN1Y72k6gQMoyyF8IckEJXJFGE8qXXU5VaTzfNmIYjnMSPdhsG+RY i3lrCYqFod2Hucla0aQJEZNnbho19pY= -----END CERTIFICATE-----Generated at Tue Sep 16 02:38:08 2025 by rpki-client