$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: kZhs0QK19AXwtSv8RdFPbhW7xG3Xm+duglZ31QfWT4k= Subject key identifier: 5A:37:89:05:71:63:AF:CD:A6:9B:AF:1F:63:32:CB:CF:76:15:9E:E3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1E8AE2A83F7388C90100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:8a:e2:a8:3f:73:88:c9:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=7bc7726a-d3c1-43ea-a047-f16932b1f48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:1f:54:e4:6c:5a:95:81:6c:a5:27:f3:9f: bd:7d:43:a0:e3:08:ad:ef:41:ad:11:22:38:66:6d: 66:ab:06:fc:89:44:f1:f9:76:b8:96:91:99:ea:dd: b4:6b:32:32:e8:61:7a:5b:dd:96:0e:61:a7:95:c2: 0d:5f:8f:15:ae:f2:b6:53:57:fc:2f:d2:d2:76:9e: 76:36:c9:a8:57:43:f1:75:6f:dd:23:fb:e5:0c:7f: a8:cc:de:d6:f5:ca:52:45:af:f6:ac:6c:82:57:f2: 3b:63:a0:3f:82:5f:41:90:6e:7d:80:85:07:66:5a: 30:05:ba:5d:7e:42:97:f3:f6:81:68:58:25:e8:78: 93:ab:98:23:aa:69:ea:9f:53:39:f2:6a:10:dd:20: ef:03:9a:c5:08:52:f7:a7:5a:3b:8a:f2:3a:dd:b9: 36:2e:bc:e0:77:f1:70:b1:cb:92:02:cc:03:75:e7: 04:89:ef:96:7f:d6:b9:3d:ab:13:4a:64:01:2c:f5: 39:bc:84:cc:b9:bc:fb:ee:71:e9:e4:af:64:22:40: 38:9d:b0:18:35:30:5f:d4:c6:52:34:70:e6:49:8b: a3:29:ea:f3:e9:b2:5d:7d:a9:53:a3:d8:f3:b2:1d: 20:b9:a2:1a:6c:94:1c:eb:4c:a5:18:a4:b4:8d:9d: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:37:89:05:71:63:AF:CD:A6:9B:AF:1F:63:32:CB:CF:76:15:9E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1e:b2:4c:23:94:76:d8:e0:68:6a:76:5e:a4:4c:f9:9e:7d: ac:a4:1f:1a:98:2e:aa:49:40:00:60:40:87:0f:09:9a:49:e3: a4:4b:1c:44:e3:39:50:d6:5e:59:76:3b:54:8b:93:7f:da:3c: 9b:12:90:5f:3c:89:e2:8a:9e:86:f6:ed:e4:62:11:d4:65:db: 90:0b:e7:59:20:43:6f:f0:b5:cd:83:7a:60:0d:ec:67:62:23: 1f:44:43:63:73:82:c7:39:ad:f5:5c:b1:f5:63:01:02:20:8f: 9b:38:32:34:33:c2:41:22:49:4d:6c:81:fc:f4:e3:a5:d2:66: 87:18:f8:50:4e:0a:e5:63:a0:06:23:d6:f1:b8:57:a7:7f:2f: 33:75:57:f8:f9:08:10:4c:aa:55:fd:6f:62:e0:f9:67:d4:6f: a5:16:28:34:05:b3:44:3b:0c:0f:85:7e:df:17:78:10:92:0b: 91:dd:d4:a9:3e:28:56:8a:a9:1f:2f:21:5e:db:5b:cf:06:43: d9:2a:55:89:7e:64:28:86:9f:d6:ca:94:3c:e6:ff:51:90:50: 76:c2:70:bf:7a:d8:b9:70:55:ef:a9:f5:2b:d7:30:75:7b:0c: 3c:d3:ec:f0:a4:cd:ad:5e:24:06:f7:06:9a:b5:f7:2a:49:83: c7:f7:71:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx6K4qg/c4jJAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk N2JjNzcyNmEtZDNjMS00M2VhLWEwNDctZjE2OTMyYjFmNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngfVORsWpWBbKUn85+9fUOg4wit70GtESI4 Zm1mqwb8iUTx+Xa4lpGZ6t20azIy6GF6W92WDmGnlcINX48VrvK2U1f8L9LSdp52 NsmoV0PxdW/dI/vlDH+ozN7W9cpSRa/2rGyCV/I7Y6A/gl9BkG59gIUHZlowBbpd fkKX8/aBaFgl6HiTq5gjqmnqn1M58moQ3SDvA5rFCFL3p1o7ivI63bk2Lrzgd/Fw scuSAswDdecEie+Wf9a5PasTSmQBLPU5vITMubz77nHp5K9kIkA4nbAYNTBf1MZS NHDmSYujKerz6bJdfalTo9jzsh0guaIabJQc60ylGKS0jZ33ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo3iQVxY6/NppuvH2Myy892FZ7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFceskwjlHbY4Ghqdl6kTPmefaykHxqYLqpJQABgQIcPCZpJ46RLHETj OVDWXll2O1SLk3/aPJsSkF88ieKKnob27eRiEdRl25AL51kgQ2/wtc2DemAN7Gdi Ix9EQ2Nzgsc5rfVcsfVjAQIgj5s4MjQzwkEiSU1sgfz046XSZocY+FBOCuVjoAYj 1vG4V6d/LzN1V/j5CBBMqlX9b2Lg+WfUb6UWKDQFs0Q7DA+Fft8XeBCSC5Hd1Kk+ KFaKqR8vIV7bW88GQ9kqVYl+ZCiGn9bKlDzm/1GQUHbCcL962LlwVe+p9SvXMHV7 DDzT7PCkza1eJAb3Bpq19ypJg8f3cW0= -----END CERTIFICATE-----Generated at Mon Jun 30 05:25:15 2025 by rpki-client