$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/9e7468e6-82ee-328b-b983-f50c68ba5294.roa File: 9e7468e6-82ee-328b-b983-f50c68ba5294.roa (raw, json) Hash identifier: 611RGULXkTZsojbq7FDKJ8RvRDA0EZ+t62+85Sbo6SI= Subject key identifier: 57:F9:63:BC:09:61:7C:03:AB:5C:8F:38:24:61:D3:8F:7F:D4:C0:7C Certificate issuer: /CN=2805bc8b-434a-454a-85db-2fe9075e8548 Certificate serial: 010D0C9F4328584B84E77812FC1427EDF3008860 Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/9e7468e6-82ee-328b-b983-f50c68ba5294.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 139.60.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:78:12:fc:14:27:ed:f3:00:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=973d5cfe-2320-4981-9d04-9c343149c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:a7:bd:91:4e:ac:86:85:19:25:4f:c4:54: 6e:f3:03:74:01:17:c9:b4:a8:86:42:64:5e:d9:cb: 6f:15:c5:89:33:6a:ef:ca:6d:99:c9:83:64:15:a4: 69:ca:e3:80:06:57:29:f5:8f:61:e6:bb:4d:f9:f9: 08:20:be:c9:3a:9a:d2:61:3f:73:13:26:f8:f8:a2: 9f:7e:a0:49:15:be:db:8c:7c:e9:ba:ad:74:8a:43: 3d:64:cb:39:cd:53:5a:d2:6a:84:3d:45:1c:f8:3a: b6:b1:ce:f0:29:31:e9:c2:76:51:e8:2f:49:32:8b: 32:86:24:33:ce:ff:f2:fd:06:6f:39:12:ee:1d:a0: 00:30:00:49:da:01:8e:72:1b:4a:f3:f6:cb:85:d0: 8b:b6:d7:0d:39:f0:e2:09:41:d4:de:f0:0d:33:dd: 88:7b:70:a8:64:7e:64:ef:65:a6:25:e5:d0:6b:b2: d6:85:31:ec:07:ea:6a:98:4e:18:2d:62:10:9c:bb: ab:97:d6:a4:52:6b:6e:e1:66:64:d8:ed:7d:c8:75: 87:bd:5c:3b:8f:ff:60:7a:6e:52:0f:c3:e2:be:27: 50:5c:eb:35:8f:54:4a:8f:04:e5:9c:5c:3f:da:b6: ad:27:77:c3:c7:3b:4e:d9:2d:10:fd:c4:07:c9:eb: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F9:63:BC:09:61:7C:03:AB:5C:8F:38:24:61:D3:8F:7F:D4:C0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/9e7468e6-82ee-328b-b983-f50c68ba5294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl X509v3 Authority Key Identifier: keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer sbgp-ipAddrBlock: critical IPv4: 139.60.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:86:ca:a2:33:24:c5:6b:ff:b5:05:47:1c:72:6b:f8:ca:3b: 84:50:f7:1c:35:5f:28:f8:a0:67:1e:d0:7e:89:f8:2a:ca:47: 6f:97:4b:88:e1:05:a0:10:60:59:14:25:52:db:ee:74:00:08: f3:d0:d2:23:e1:34:de:20:9c:8f:b5:d6:88:b4:dd:7b:f5:57: 1e:0a:10:c2:e2:eb:ea:03:e4:51:ea:a9:62:8d:54:22:74:dc: d1:fa:c3:b5:6f:4c:78:8c:b8:29:0d:8e:b8:f0:f8:45:df:4c: d3:19:f5:ae:26:7d:d7:28:cb:e2:bd:a4:ca:8c:eb:08:82:3f: db:5a:bc:7a:35:8e:38:80:09:fe:6e:a6:7b:1c:14:8d:db:ac: ed:0f:9f:01:a9:c0:83:a7:f7:5c:f3:78:e9:ad:af:16:e4:c0: fc:60:ad:c3:3f:50:45:4f:ac:89:8a:21:7c:27:eb:b3:44:2a: 5f:8f:ac:2f:0d:76:21:e8:55:f6:95:e3:fd:75:8f:9e:c3:21: 3b:74:f2:cf:41:70:0a:e1:49:f4:65:65:13:38:d8:9e:58:4f: 9e:65:3d:2f:7f:6e:e2:75:7a:09:03:d3:99:68:b9:19:8a:61: 32:04:da:9c:92:57:96:10:26:91:97:43:e1:6d:d5:ff:46:9f: c7:cb:8c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53gS/BQn7fMAiGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwNWJjOGItNDM0YS00NTRhLTg1ZGItMmZlOTA3NWU4 NTQ4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTczZDVjZmUtMjMyMC00OTgxLTlkMDQtOWMzNDMxNDljMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9KnvZFOrIaFGSVPxFRu8wN0ARfJtKiGQmRe 2ctvFcWJM2rvym2ZyYNkFaRpyuOABlcp9Y9h5rtN+fkIIL7JOprSYT9zEyb4+KKf fqBJFb7bjHzpuq10ikM9ZMs5zVNa0mqEPUUc+Dq2sc7wKTHpwnZR6C9JMosyhiQz zv/y/QZvORLuHaAAMABJ2gGOchtK8/bLhdCLttcNOfDiCUHU3vANM92Ie3CoZH5k 72WmJeXQa7LWhTHsB+pqmE4YLWIQnLurl9akUmtu4WZk2O19yHWHvVw7j/9gem5S D8PividQXOs1j1RKjwTlnFw/2ratJ3fDxztO2S0Q/cQHyeu7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf5Y7wJYXwDq1yPOCRh049/1MB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1 YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5MDc1ZTg1NDgvOWU3NDY4ZTYtODJlZS0z MjhiLWI5ODMtZjUwYzY4YmE1Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjgwNWJjOGItNDM0YS00NTRhLTg1 ZGItMmZlOTA3NWU4NTQ4LzI4MDViYzhiLTQzNGEtNDU0YS04NWRiLTJmZTkwNzVl ODU0OC5jcmwwHwYDVR0jBBgwFoAUqb0VXP54V+vKV3bJUl/3V7wi31QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5 MDc1ZTg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2GyqIzJMVr/7UFRxxya/jKO4RQ9xw1Xyj4oGce0H6J+CrKR2+XS4jh BaAQYFkUJVLb7nQACPPQ0iPhNN4gnI+11oi03Xv1Vx4KEMLi6+oD5FHqqWKNVCJ0 3NH6w7VvTHiMuCkNjrjw+EXfTNMZ9a4mfdcoy+K9pMqM6wiCP9tavHo1jjiACf5u pnscFI3brO0PnwGpwIOn91zzeOmtrxbkwPxgrcM/UEVPrImKIXwn67NEKl+PrC8N diHoVfaV4/11j57DITt08s9BcArhSfRlZRM42J5YT55lPS9/buJ1egkD05louRmK YTIE2pySV5YQJpGXQ+Ft1f9Gn8fLjKk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:56 2025 by rpki-client