$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa File: 147c0bf2-220f-3c91-9257-37befeaa7a3e.roa (raw, json) Hash identifier: bDiXfJqe3F6KUsRLN7QhL4gKrDQZg3IyNRvievgPWVk= Subject key identifier: 95:B1:F1:59:8A:7D:CA:6C:6C:85:11:90:CF:84:34:9E:CC:39:04:13 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E784B86BE3F8F96AF860C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:b8:6b:e3:f8:f9:6a:f8:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=934c1699-a0bd-4946-9e22-71abd90b5c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:f5:3d:00:8d:40:81:1d:93:b3:64:69:60: 3e:2f:11:07:e8:43:8d:34:b7:61:e1:ed:ac:d7:65: a5:ce:02:98:4a:9d:b0:d7:43:4e:c8:39:81:de:eb: fa:ce:c8:d3:a7:30:4b:be:73:3c:7f:8b:0a:fe:10: d9:71:65:0f:89:9a:79:ff:07:0f:fd:c8:4d:a1:31: ec:1c:d6:9d:c1:0a:40:19:8d:76:50:f2:ff:0f:1e: 70:4c:63:22:cb:22:46:8f:3d:8f:fa:0b:79:7c:6c: 89:51:fe:94:02:0c:ab:03:bf:22:0c:25:47:cc:a5: 92:f0:62:fd:9f:35:56:69:3e:ca:12:a5:e9:47:5b: c1:0a:5f:3f:04:ee:c2:0b:1a:5b:ce:f9:cd:de:ba: 15:e2:86:45:8d:18:f5:ca:f0:52:1d:ea:3b:2d:db: 0b:cd:4d:d4:02:77:f2:11:b4:41:74:09:8b:ca:42: b1:6c:88:61:8a:9b:f9:6d:d9:82:65:63:18:9f:9b: f4:39:d3:83:94:6a:15:27:6e:39:6d:dd:f5:d9:e0: 1c:4f:47:64:d0:7b:8b:6a:89:db:04:f2:f3:17:cf: 70:b1:2d:19:0e:0b:b0:69:7a:e2:7e:e5:b6:16:1f: 61:c3:dd:67:3d:bd:06:d0:d4:76:50:09:2a:90:4f: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B1:F1:59:8A:7D:CA:6C:6C:85:11:90:CF:84:34:9E:CC:39:04:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:64:c3:de:13:cc:2f:89:be:aa:8d:15:c4:da:38:1e:4d:48: bf:4d:02:a8:fc:4e:eb:f1:9f:53:2d:34:4a:ea:40:6e:c4:62: 2b:e2:de:cb:5e:e0:59:00:86:8a:12:57:05:45:ec:32:36:9f: a9:2f:10:19:4b:da:72:be:2e:2c:77:3c:65:2f:0f:12:c7:32: e1:c9:bf:ec:1c:06:37:b3:6a:dc:13:de:78:40:9c:8a:32:49: bd:77:9b:e6:21:d6:a4:1e:f0:a3:33:51:10:15:45:ad:75:75: cc:0e:ac:a0:bd:2e:3b:89:c3:c7:73:07:70:90:28:04:96:ef: 7c:88:23:66:27:26:f8:5a:3e:6f:f1:32:1d:0d:e6:34:e6:97: 9d:36:77:fd:5a:b3:4d:9c:05:71:3e:b8:73:91:ef:81:db:38: cf:df:1a:84:f4:36:ad:90:15:f0:08:13:79:75:c9:d1:51:75: a1:f0:9e:07:c3:09:bd:77:e5:7f:96:7e:b0:da:ed:6e:c7:f4: 96:26:5d:3e:6f:54:fe:31:de:c7:6a:e4:db:b7:78:a7:28:ac: dc:55:eb:bf:99:cf:66:a9:96:50:59:d3:e1:e5:2a:b8:dd:7a: 8a:1c:ce:b2:f4:bd:3e:cc:88:83:d7:69:de:ef:50:2d:d6:f7: 60:a2:2f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54S4a+P4+Wr4YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTM0YzE2OTktYTBiZC00OTQ2LTllMjItNzFhYmQ5MGI1Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSz1PQCNQIEdk7NkaWA+LxEH6EONNLdh4e2s 12WlzgKYSp2w10NOyDmB3uv6zsjTpzBLvnM8f4sK/hDZcWUPiZp5/wcP/chNoTHs HNadwQpAGY12UPL/Dx5wTGMiyyJGjz2P+gt5fGyJUf6UAgyrA78iDCVHzKWS8GL9 nzVWaT7KEqXpR1vBCl8/BO7CCxpbzvnN3roV4oZFjRj1yvBSHeo7LdsLzU3UAnfy EbRBdAmLykKxbIhhipv5bdmCZWMYn5v0OdODlGoVJ245bd312eAcT0dk0HuLaonb BPLzF89wsS0ZDguwaXrifuW2Fh9hw91nPb0G0NR2UAkqkE8fswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWx8VmKfcpsbIURkM+ENJ7MOQQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTQ3YzBiZjItMjIwZi0z YzkxLTkyNTctMzdiZWZlYWE3YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFkw94TzC+JvqqNFcTaOB5NSL9NAqj8Tuvxn1MtNErqQG7EYivi3ste 4FkAhooSVwVF7DI2n6kvEBlL2nK+Lix3PGUvDxLHMuHJv+wcBjezatwT3nhAnIoy Sb13m+Yh1qQe8KMzURAVRa11dcwOrKC9LjuJw8dzB3CQKASW73yII2YnJvhaPm/x Mh0N5jTml502d/1as02cBXE+uHOR74HbOM/fGoT0Nq2QFfAIE3l1ydFRdaHwngfD Cb135X+WfrDa7W7H9JYmXT5vVP4x3sdq5Nu3eKcorNxV67+Zz2apllBZ0+HlKrjd eooczrL0vT7MiIPXad7vUC3W92CiL6s= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:12 2025 by rpki-client