$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa File: cd0060f5-e37a-3324-8658-1489af29e5de.roa (raw, json) Hash identifier: kEZkr2L+8tmRGkjdcYd/oKv3j1T21WCkb00hHLlaGw8= Subject key identifier: 61:31:6C:14:F3:C0:A5:10:58:25:49:29:13:1E:65:DA:EC:31:65:2F Certificate issuer: /CN=2805bc8b-434a-454a-85db-2fe9075e8548 Certificate serial: 010D0C9F4328584B84E774C32AC01E35AFE29500 Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397299 IP address blocks: 139.60.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:74:c3:2a:c0:1e:35:af:e2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9d04a361-a69d-4e41-a70d-a92e42890656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:c9:da:1a:3b:ee:5c:42:26:1c:b7:68:84: 23:d8:0e:ba:fe:22:30:31:af:c9:1d:ea:ab:d9:3f: a0:7c:21:10:7b:99:56:c9:5e:cc:0f:de:ce:2c:ad: 2b:f2:74:eb:45:48:1f:3b:14:8b:39:71:4f:15:69: 28:10:28:db:85:01:19:66:d6:16:0f:63:a3:b7:4b: 83:37:7e:18:75:5b:52:8f:eb:19:53:49:5f:60:db: 99:83:59:09:a0:8f:f3:9b:32:e6:d8:e4:9b:3d:f9: ad:70:f1:c2:5a:5b:09:9d:48:f4:29:be:79:a6:7e: cd:2e:d6:77:80:8f:f9:41:2d:07:9f:65:b8:2c:15: 66:b1:ab:57:44:88:86:37:b4:a5:0d:34:7d:d0:66: ea:17:10:63:2d:56:01:c5:d7:3d:f2:22:93:69:80: 4f:ce:62:8f:ac:02:93:a9:2d:2e:a5:78:b3:0f:13: 3e:18:f6:f0:e7:f2:9b:47:0a:38:38:a8:91:fb:dc: ba:ad:3a:44:47:58:76:41:84:31:94:c7:48:5e:52: 04:8d:30:5b:35:9d:cb:14:b7:2f:3b:f7:51:5f:52: 14:56:45:dc:a0:86:aa:f9:6a:57:61:15:14:3b:6f: 49:74:ca:82:1c:35:6d:b4:ee:23:d7:d8:4b:9d:d4: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:31:6C:14:F3:C0:A5:10:58:25:49:29:13:1E:65:DA:EC:31:65:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl X509v3 Authority Key Identifier: keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer sbgp-ipAddrBlock: critical IPv4: 139.60.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:05:99:a9:45:e8:ce:ff:73:b9:2e:08:68:3f:85:41:0f:2a: 3b:a5:c2:d5:54:37:ac:e0:84:d0:59:4f:e7:f9:70:3a:e4:9d: 10:02:ef:63:06:04:53:f4:b8:9d:df:61:4e:82:e2:59:b8:f8: 01:ec:99:e1:5d:ec:ba:f1:57:b0:5f:30:f6:8e:e7:c8:97:08: 55:74:76:cc:60:f6:43:20:e6:a6:8b:07:77:fd:85:46:3e:76: 2f:d5:1a:de:cb:2e:dc:78:64:07:34:2e:04:8e:e1:58:7a:49: c0:18:54:cb:ea:c5:b9:27:02:65:b8:78:27:22:d1:c7:be:7d: 51:03:5a:d4:05:6b:3a:6e:e5:24:91:79:f9:b3:bb:22:7a:b6: 36:fd:83:c3:84:6f:5f:e2:bc:a3:0a:49:76:1b:f0:f1:91:70: 7e:97:45:d8:e0:90:78:23:b9:c2:1c:3f:0f:bb:74:e3:9b:0e: 16:27:20:d8:02:61:70:eb:37:7f:27:30:18:76:1d:06:c5:e0: ac:76:bd:8a:cb:c7:65:10:7c:6c:45:83:2a:ae:aa:dd:7a:bc: 5a:50:13:1c:50:e0:91:78:e6:ef:31:03:52:ed:c5:ee:46:c6: 05:fd:1b:64:f9:a9:e9:b8:5c:51:a8:15:da:5e:8d:62:f3:24: 96:1f:9c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53TDKsAeNa/ilQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwNWJjOGItNDM0YS00NTRhLTg1ZGItMmZlOTA3NWU4 NTQ4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWQwNGEzNjEtYTY5ZC00ZTQxLWE3MGQtYTkyZTQyODkwNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhADJ2ho77lxCJhy3aIQj2A66/iIwMa/JHeqr 2T+gfCEQe5lWyV7MD97OLK0r8nTrRUgfOxSLOXFPFWkoECjbhQEZZtYWD2Ojt0uD N34YdVtSj+sZU0lfYNuZg1kJoI/zmzLm2OSbPfmtcPHCWlsJnUj0Kb55pn7NLtZ3 gI/5QS0Hn2W4LBVmsatXRIiGN7SlDTR90GbqFxBjLVYBxdc98iKTaYBPzmKPrAKT qS0upXizDxM+GPbw5/KbRwo4OKiR+9y6rTpER1h2QYQxlMdIXlIEjTBbNZ3LFLcv O/dRX1IUVkXcoIaq+WpXYRUUO29JdMqCHDVttO4j19hLndQtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGExbBTzwKUQWCVJKRMeZdrsMWUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1 YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5MDc1ZTg1NDgvY2QwMDYwZjUtZTM3YS0z MzI0LTg2NTgtMTQ4OWFmMjllNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjgwNWJjOGItNDM0YS00NTRhLTg1 ZGItMmZlOTA3NWU4NTQ4LzI4MDViYzhiLTQzNGEtNDU0YS04NWRiLTJmZTkwNzVl ODU0OC5jcmwwHwYDVR0jBBgwFoAUqb0VXP54V+vKV3bJUl/3V7wi31QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yODA1YmM4Yi00MzRhLTQ1NGEtODVkYi0yZmU5 MDc1ZTg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoFmalF6M7/c7kuCGg/hUEPKjulwtVUN6zghNBZT+f5cDrknRAC72MG BFP0uJ3fYU6C4lm4+AHsmeFd7LrxV7BfMPaO58iXCFV0dsxg9kMg5qaLB3f9hUY+ di/VGt7LLtx4ZAc0LgSO4Vh6ScAYVMvqxbknAmW4eCci0ce+fVEDWtQFazpu5SSR efmzuyJ6tjb9g8OEb1/ivKMKSXYb8PGRcH6XRdjgkHgjucIcPw+7dOObDhYnINgC YXDrN38nMBh2HQbF4Kx2vYrLx2UQfGxFgyquqt16vFpQExxQ4JF45u8xA1Ltxe5G xgX9G2T5qem4XFGoFdpejWLzJJYfnLE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:36 2025 by rpki-client