$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa File: 057636be-53d3-33be-86cc-79dd80d5e92f.roa (raw, json) Hash identifier: 2u4eYoZzSzPr5hy+GmsF8+c3veaYv8g1Uac6QEF563U= Subject key identifier: E2:07:69:F3:BA:F6:D8:C5:A4:8C:CE:61:29:01:2D:B2:80:60:7D:72 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC133D2BCA87620BF3A3D40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 139.138.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:33:d2:bc:a8:76:20:bf:3a:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=307df159-3b8c-4d99-86cb-88823f6f5988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:2e:53:d2:ba:78:99:5a:f1:f7:c4:d2:6c: 2f:f6:b8:4b:8d:e9:6d:fa:56:f5:d8:0b:62:91:89: 89:eb:29:87:7b:d0:9e:ab:ee:d6:ee:b2:86:2b:5d: a5:a6:9d:0c:f0:d9:cd:8a:fc:56:a0:cf:a8:60:e4: 0f:be:c5:88:d2:7c:a0:5f:94:c6:12:fb:ec:89:36: 32:d7:a9:9e:00:ea:4a:9e:c4:fc:7a:70:b0:02:12: 89:61:86:d0:b9:31:bf:24:78:9d:43:a8:55:c0:4b: 99:82:79:2e:45:55:af:5c:fb:5a:d0:4e:4e:ef:42: ab:ce:a4:f8:6f:04:92:57:a0:96:2c:02:d0:10:08: 78:ff:17:bf:39:ae:07:50:d3:df:5a:44:87:22:52: 3a:19:1d:d4:a7:a3:04:95:17:be:ca:36:cd:93:72: fa:2e:9c:a1:ad:0b:22:b1:8a:79:02:8e:57:30:a0: 67:5a:e0:6c:bc:21:09:d5:b4:a7:8f:e8:14:d3:8e: 25:44:82:76:5d:93:4b:af:44:52:8b:82:36:b9:37: a5:21:3c:db:fe:6c:65:1b:c5:02:ea:ff:35:f8:db: 17:b2:ff:ff:24:47:5e:6f:13:92:4f:de:cb:ac:c5: ff:9f:dd:aa:99:17:2e:fb:b6:11:06:13:46:5b:40: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:69:F3:BA:F6:D8:C5:A4:8C:CE:61:29:01:2D:B2:80:60:7D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:91:15:cb:cd:27:ff:33:bd:f2:e3:14:94:1b:4b:23:e7:a9: 8b:70:92:29:dc:8d:be:2d:d5:20:ee:7f:a3:f0:e1:f3:f3:00: 00:bf:21:b3:ca:a9:4e:a4:cd:c2:7f:16:22:17:e8:a1:b3:bc: cb:aa:96:5c:92:a7:5b:8a:28:13:ea:0e:e7:14:a2:0b:9c:43: 32:19:56:81:ff:a4:a2:41:fa:a7:20:0d:50:d5:29:39:f2:00: 84:2b:f4:04:59:20:0c:e1:bb:70:27:ac:d4:ff:1a:45:b6:ff: da:94:8f:77:48:a8:96:36:61:3b:5b:15:94:a6:e6:86:d4:59: e6:d6:5d:3a:a7:04:30:1a:dd:b3:4c:f0:4e:a2:eb:14:45:8d: 9c:e2:3d:a5:69:b1:bd:6c:a0:88:7f:a8:66:2b:a3:e0:e3:99: 98:04:cf:76:1d:ed:34:a7:bc:19:65:ab:bf:1f:a9:bb:41:f0: 8c:ba:f3:d0:19:b5:d1:d1:a9:2b:f8:55:37:71:36:a3:cc:8b: 8f:56:e7:69:9c:98:ae:5b:24:7b:72:a4:ce:19:94:a4:82:0a: f7:7f:b6:e7:a0:93:65:42:6a:7d:59:09:d7:b0:22:2d:db:97: d3:07:48:57:61:c2:4e:a4:6c:e7:e3:b6:63:24:96:da:d3:55: d9:9e:ed:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTPSvKh2IL86PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzA3ZGYxNTktM2I4Yy00ZDk5LTg2Y2ItODg4MjNmNmY1OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIAuU9K6eJla8ffE0mwv9rhLjelt+lb12Ati kYmJ6ymHe9Ceq+7W7rKGK12lpp0M8NnNivxWoM+oYOQPvsWI0nygX5TGEvvsiTYy 16meAOpKnsT8enCwAhKJYYbQuTG/JHidQ6hVwEuZgnkuRVWvXPta0E5O70KrzqT4 bwSSV6CWLALQEAh4/xe/Oa4HUNPfWkSHIlI6GR3Up6MElRe+yjbNk3L6LpyhrQsi sYp5Ao5XMKBnWuBsvCEJ1bSnj+gU044lRIJ2XZNLr0RSi4I2uTelITzb/mxlG8UC 6v81+NsXsv//JEdebxOST97LrMX/n92qmRcu+7YRBhNGW0A3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIHafO69tjFpIzOYSkBLbKAYH1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDU3NjM2YmUtNTNkMy0z M2JlLTg2Y2MtNzlkZDgwZDVlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSRFcvNJ/8zvfLjFJQbSyPnqYtwkincjb4t1SDuf6Pw4fPzAAC/IbPK qU6kzcJ/FiIX6KGzvMuqllySp1uKKBPqDucUogucQzIZVoH/pKJB+qcgDVDVKTny AIQr9ARZIAzhu3AnrNT/GkW2/9qUj3dIqJY2YTtbFZSm5obUWebWXTqnBDAa3bNM 8E6i6xRFjZziPaVpsb1soIh/qGYro+DjmZgEz3Yd7TSnvBllq78fqbtB8Iy689AZ tdHRqSv4VTdxNqPMi49W52mcmK5bJHtypM4ZlKSCCvd/tuegk2VCan1ZCdewIi3b l9MHSFdhwk6kbOfjtmMkltrTVdme7TY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:25 2025 by rpki-client