$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa File: 1a850553-c1f9-3561-bb79-65835fe4fee4.roa (raw, json) Hash identifier: LHF4Bd8w+CHgGpH+NdFrMBLXVNj4OwqTxlGdK0I7u4c= Subject key identifier: E1:7F:5C:26:4E:9D:6A:5D:4C:0B:78:64:89:78:EA:EA:11:EF:31:8E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A2D858D29B5D99707B69A7F50 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 30215 IP address blocks: 139.138.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8d:29:b5:d9:97:07:b6:9a:7f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=72552872-59de-4fb0-a60e-d6601f49c732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:8e:63:a3:92:a8:75:d3:ec:ca:4e:d3:9f: 97:dd:60:ef:3e:e7:42:8a:15:9e:03:93:4d:59:4e: 58:83:40:89:82:2f:c9:6c:fb:b5:c7:58:d6:e8:dd: d8:d6:22:28:d7:1b:c6:e8:f0:c2:e9:a2:40:49:4f: 7f:38:2d:8d:87:a2:e6:4e:f2:3f:26:11:f2:39:55: 0e:2a:25:6b:a7:54:39:49:c1:c6:21:20:5c:44:01: 75:b0:c8:56:df:cd:4f:02:75:75:1d:b1:ed:c6:42: d6:55:89:49:cd:4d:a3:00:7b:1c:0c:b4:81:5a:c4: 36:5a:63:9c:13:7b:17:17:47:49:df:f5:8b:91:7d: 8a:d3:af:d6:b9:aa:dd:1b:85:30:cf:12:9c:68:79: b2:68:d2:5e:61:fb:e2:a3:d6:af:9f:3b:9b:72:fb: 7d:75:22:b5:ec:81:cb:31:b0:7c:2c:b2:9d:16:ab: 26:4d:8f:4a:c9:d6:d2:75:fa:3e:49:0d:d8:d8:1b: 38:49:c3:45:2e:3e:0c:73:d7:84:72:38:fa:08:4e: 19:89:35:4e:f2:7e:29:d4:70:b0:36:6e:83:ea:41: d2:d0:f3:f0:52:3b:72:23:ab:03:39:20:e7:77:00: a8:bb:3c:46:6b:c3:a9:ad:a5:26:a7:fc:54:f9:b3: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:5C:26:4E:9D:6A:5D:4C:0B:78:64:89:78:EA:EA:11:EF:31:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6d:76:96:a5:0d:39:fd:9b:97:0d:f8:58:6f:3a:5a:05:59: d2:71:f6:c3:80:00:f0:63:92:0f:d9:4c:bb:6b:52:6d:a7:84: 86:5c:0f:0a:86:e3:a7:63:da:6f:a1:6a:7e:3e:bc:5b:73:15: 0d:27:43:70:f1:65:3d:7d:af:1f:24:dd:24:87:6a:9d:7f:d7: 25:64:8f:0a:23:2a:90:42:60:7b:0a:91:a8:e1:98:f0:3e:4c: eb:c5:50:ae:fd:c5:11:25:e0:e7:f2:ec:66:5f:c1:1f:bd:70: 7f:3f:ea:ad:bd:c3:e3:ae:25:36:7e:be:40:4a:fe:ef:68:1e: bd:39:f7:10:f0:47:4d:b3:13:ee:66:3c:ae:df:bd:46:75:ec: c5:7a:17:a4:50:35:0e:08:15:03:44:67:78:b8:b1:ef:a7:ef: 8e:6f:37:31:93:eb:84:8a:f5:2b:ae:ad:88:e2:9a:e0:30:97: ee:d9:e4:b4:14:c1:68:c5:53:91:41:77:d4:17:2a:1a:62:e2: 48:4c:d1:d0:36:50:da:7a:3e:a1:b8:3c:36:dd:4a:70:e3:96: d3:27:47:ee:b2:a8:31:bf:c0:08:93:42:c2:bb:54:db:8f:44: 87:24:c0:12:6f:63:00:d7:cc:b3:20:00:6b:66:3d:c6:0d:1e: 54:d3:c8:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothY0ptdmXB7aaf1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NzI1NTI4NzItNTlkZS00ZmIwLWE2MGUtZDY2MDFmNDljNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4OOY6OSqHXT7MpO05+X3WDvPudCihWeA5NN WU5Yg0CJgi/JbPu1x1jW6N3Y1iIo1xvG6PDC6aJASU9/OC2Nh6LmTvI/JhHyOVUO KiVrp1Q5ScHGISBcRAF1sMhW381PAnV1HbHtxkLWVYlJzU2jAHscDLSBWsQ2WmOc E3sXF0dJ3/WLkX2K06/WuardG4UwzxKcaHmyaNJeYfvio9avnzubcvt9dSK17IHL MbB8LLKdFqsmTY9KydbSdfo+SQ3Y2Bs4ScNFLj4Mc9eEcjj6CE4ZiTVO8n4p1HCw Nm6D6kHS0PPwUjtyI6sDOSDndwCouzxGa8OpraUmp/xU+bNfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF/XCZOnWpdTAt4ZIl46uoR7zGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWE4NTA1NTMtYzFmOS0z NTYxLWJiNzktNjU4MzVmZTRmZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACptdpalDTn9m5cN+FhvOloFWdJx9sOAAPBjkg/ZTLtrUm2nhIZcDwqG 46dj2m+han4+vFtzFQ0nQ3DxZT19rx8k3SSHap1/1yVkjwojKpBCYHsKkajhmPA+ TOvFUK79xREl4Ofy7GZfwR+9cH8/6q29w+OuJTZ+vkBK/u9oHr059xDwR02zE+5m PK7fvUZ17MV6F6RQNQ4IFQNEZ3i4se+n745vNzGT64SK9SuurYjimuAwl+7Z5LQU wWjFU5FBd9QXKhpi4khM0dA2UNp6PqG4PDbdSnDjltMnR+6yqDG/wAiTQsK7VNuP RIckwBJvYwDXzLMgAGtmPcYNHlTTyDM= -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:08 2025 by rpki-client