$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa File: 28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa (raw, json) Hash identifier: BFvvL4nVly9nxn/QN6Pfpm9LXvEmmuW9dwCKVK8QoD8= Subject key identifier: 87:00:CB:2D:F9:F9:92:38:A9:3B:C8:05:38:E3:ED:27:A9:A3:7A:E9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E784952F10F46B0D639080 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:95:2f:10:f4:6b:0d:63:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=cad0ab98-f4bb-4ffe-ac28-4cc3c5ba2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:4f:55:0c:a8:15:0d:0d:e3:15:f6:f1:64: 20:7c:b2:2d:fc:48:29:2a:1e:53:7b:63:12:95:d9: 25:6c:1a:81:4f:ce:35:4b:e1:e8:b3:aa:ac:ef:c7: 08:55:f2:a1:fb:e5:da:47:04:93:bf:c5:4b:67:97: 5a:c1:83:36:7a:28:cb:d5:52:85:a7:17:4c:32:be: 1b:8a:49:b8:9e:fe:d2:5d:c3:9d:08:ec:f8:97:a6: f5:df:45:0d:0e:1b:88:b8:5f:ab:34:7a:ad:ad:34: 5f:c7:1f:7c:a6:6e:dc:63:8d:62:10:f0:06:e9:02: 3c:82:2a:dd:65:71:79:0b:73:c6:cf:e4:52:aa:0c: e7:38:ea:f4:7b:fb:e5:29:2c:19:5d:73:5c:d6:ba: 9c:07:c6:4b:32:de:37:c9:9f:c1:1f:e2:22:20:81: 45:41:09:9f:d3:3a:8b:8d:76:f4:fa:81:5d:d5:e0: 97:37:b7:1e:72:55:32:8e:8d:18:5b:ff:b6:1a:eb: 04:bd:7e:6a:c4:25:44:1f:7f:70:df:90:fb:a1:91: d9:21:f5:32:e9:c0:72:45:c2:59:a4:0e:00:60:a6: 37:f9:33:74:5f:83:92:20:35:94:b6:60:08:c2:0b: 3e:62:c2:0c:47:e3:a5:c7:bd:8e:c4:70:d0:7b:be: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:00:CB:2D:F9:F9:92:38:A9:3B:C8:05:38:E3:ED:27:A9:A3:7A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:40:e2:69:a5:ec:fa:6b:29:e7:27:42:ad:6a:bd:57:a8:ea: 06:19:ea:dd:c0:ed:ce:c0:b4:20:29:c9:df:32:41:b1:f9:1a: 66:e3:8f:b8:b9:fe:5c:bf:05:cc:0e:84:dd:4b:b4:b5:3e:98: dc:0d:a6:5b:2b:20:ec:e6:37:77:4b:7e:57:2e:0a:1b:68:e1: f9:f4:8f:03:cd:3c:b0:7e:47:2b:22:e7:c6:1e:0e:9f:e7:72: 48:78:89:11:ab:02:fc:c6:8e:c7:8a:f4:d0:bf:bc:7a:c0:3b: 99:41:5f:ec:8c:e4:1b:d8:53:a0:ca:8b:45:0e:72:6a:c2:be: 52:b3:62:3c:84:60:3a:3b:d6:99:94:f0:d0:08:08:ec:1d:86: b0:25:7e:94:f7:62:2c:a4:2f:9c:a7:60:9c:23:d5:1e:e6:f0: e3:63:59:da:c3:e3:23:eb:82:e2:8e:1a:ed:c1:3b:07:81:22: f9:d1:8c:87:40:22:c1:52:95:0e:47:0d:dc:b0:87:20:fa:52: 4e:a6:b3:76:b2:d1:90:4c:a5:e4:5b:86:cb:c8:d7:34:2a:33: f1:b2:88:ab:86:23:e2:10:58:a5:e1:0c:ff:ef:5f:c0:28:cd: d1:13:81:4e:58:8f:b2:97:23:d8:87:4c:41:b5:79:87:85:37: 32:1a:c5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54SVLxD0aw1jkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2FkMGFiOTgtZjRiYi00ZmZlLWFjMjgtNGNjM2M1YmEyNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx69PVQyoFQ0N4xX28WQgfLIt/EgpKh5Te2MS ldklbBqBT841S+Hos6qs78cIVfKh++XaRwSTv8VLZ5dawYM2eijL1VKFpxdMMr4b ikm4nv7SXcOdCOz4l6b130UNDhuIuF+rNHqtrTRfxx98pm7cY41iEPAG6QI8gird ZXF5C3PGz+RSqgznOOr0e/vlKSwZXXNc1rqcB8ZLMt43yZ/BH+IiIIFFQQmf0zqL jXb0+oFd1eCXN7ceclUyjo0YW/+2GusEvX5qxCVEH39w35D7oZHZIfUy6cByRcJZ pA4AYKY3+TN0X4OSIDWUtmAIwgs+YsIMR+Olx72OxHDQe75CWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcAyy35+ZI4qTvIBTjj7Sepo3rpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxOTU4OTgtM2ZmZi0z ZTdlLThjYzktM2FlYzZkZTBkZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFA4mml7PprKecnQq1qvVeo6gYZ6t3A7c7AtCApyd8yQbH5Gmbjj7i5 /ly/BcwOhN1LtLU+mNwNplsrIOzmN3dLflcuChto4fn0jwPNPLB+Rysi58YeDp/n ckh4iRGrAvzGjseK9NC/vHrAO5lBX+yM5BvYU6DKi0UOcmrCvlKzYjyEYDo71pmU 8NAICOwdhrAlfpT3YiykL5ynYJwj1R7m8ONjWdrD4yPrguKOGu3BOweBIvnRjIdA IsFSlQ5HDdywhyD6Uk6ms3ay0ZBMpeRbhsvI1zQqM/GyiKuGI+IQWKXhDP/vX8Ao zdETgU5Yj7KXI9iHTEG1eYeFNzIaxQk= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:41 2025 by rpki-client