$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa File: 3002eb1b-37d6-3480-85a8-73539969148e.roa (raw, json) Hash identifier: CTQOTAh0f1Y0tZi4Gbl4+VZnOwheGOyhtXKJvBdySkg= Subject key identifier: 8F:11:DA:CA:B2:2A:AD:BE:0A:1D:63:F9:35:56:FA:52:37:A0:BB:D5 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D116C066E5CD5808B334C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 139.138.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:16:c0:66:e5:cd:58:08:b3:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=6cf9c16b-7051-453b-a296-2e3859171365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:ae:a5:f6:c5:9a:9c:c8:57:04:4c:f2:4a: de:c7:45:4d:96:9e:3e:0f:c6:e2:7a:e5:5b:a3:a2: 50:5e:07:10:2e:8a:65:cb:1d:b3:3e:62:31:4b:c5: 87:cd:fb:60:21:47:80:51:ef:f1:ca:f9:d8:f2:57: cc:bc:d9:e6:cb:df:7a:17:24:06:96:a7:8f:b9:14: 23:ac:b4:7b:40:13:d6:f9:1b:c0:fe:0a:c8:51:33: 6c:b7:0b:76:13:f4:4c:fb:0a:90:fa:28:1b:3a:95: db:76:3a:d2:1b:ce:fc:df:8c:d4:0a:6a:7a:ba:23: a8:74:94:82:35:5e:ba:b6:35:19:8a:bb:ad:ce:b5: a2:46:ae:b8:bc:49:f1:39:da:dc:c8:22:08:c2:4d: e3:98:f8:8e:66:03:8a:00:ba:0d:6d:3f:f6:25:c0: 63:1d:de:8d:1a:ac:75:77:8b:0d:6f:e4:df:4a:0d: d7:53:00:1c:f2:58:14:ae:17:58:06:c2:59:9f:27: c0:ab:19:00:12:1a:ef:60:de:de:f2:fd:c7:65:76: 08:74:4a:e4:d9:d5:b0:0b:ed:3a:91:1f:bc:df:0f: d1:91:be:cc:19:6d:33:2b:88:0e:64:cf:b3:c9:92: 3e:87:50:f1:e5:4d:ee:9e:90:48:50:89:34:1f:35: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:DA:CA:B2:2A:AD:BE:0A:1D:63:F9:35:56:FA:52:37:A0:BB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:9b:a0:f3:11:18:22:68:19:16:68:73:eb:98:32:ef:c6:ba: 66:75:cf:92:a8:69:69:fd:cf:38:c3:6e:a4:44:bc:1b:55:23: 18:36:8a:57:e9:37:ce:2d:ff:86:d6:0d:59:14:a3:d8:c6:51: 57:cc:d8:b1:56:34:19:38:05:28:0d:ba:00:83:1c:e2:3e:16: e1:04:34:81:5a:f4:d2:ed:c7:ab:b3:14:35:61:bf:7a:79:56: c4:7e:91:6d:f2:50:3b:47:bd:8c:79:1c:17:34:fe:26:35:0d: ee:ae:dc:20:e7:65:fe:03:25:8d:64:99:66:1e:13:6e:4e:6b: d5:e9:b2:fd:33:fd:13:fe:df:8c:be:79:b4:ab:94:4e:ee:86: 30:90:1d:73:f0:c3:a0:d8:d3:d3:92:31:9f:77:21:28:2f:96: 24:9a:0f:32:05:d8:66:96:a3:27:f5:d1:29:58:36:6d:10:cc: 63:8e:0d:3a:27:81:f6:86:c8:02:d5:64:e1:da:2e:bc:49:ed: cd:a7:4f:2d:96:ad:57:31:5a:e0:a4:19:90:ae:c0:40:53:43: 4d:78:12:23:0c:58:a2:7b:ef:7f:cd:d7:7f:97:b2:64:0d:1a: a5:60:3b:01:45:20:a9:27:d8:17:f3:6c:71:12:cc:fb:b8:15: 0b:10:8e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RbAZuXNWAizNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NmNmOWMxNmItNzA1MS00NTNiLWEyOTYtMmUzODU5MTcxMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpyupfbFmpzIVwRM8krex0VNlp4+D8bieuVb o6JQXgcQLoplyx2zPmIxS8WHzftgIUeAUe/xyvnY8lfMvNnmy996FyQGlqePuRQj rLR7QBPW+RvA/grIUTNstwt2E/RM+wqQ+igbOpXbdjrSG87834zUCmp6uiOodJSC NV66tjUZirutzrWiRq64vEnxOdrcyCIIwk3jmPiOZgOKALoNbT/2JcBjHd6NGqx1 d4sNb+TfSg3XUwAc8lgUrhdYBsJZnyfAqxkAEhrvYN7e8v3HZXYIdErk2dWwC+06 kR+83w/Rkb7MGW0zK4gOZM+zyZI+h1Dx5U3unpBIUIk0HzVHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8R2sqyKq2+Ch1j+TVW+lI3oLvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzAwMmViMWItMzdkNi0z NDgwLTg1YTgtNzM1Mzk5NjkxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiboPMRGCJoGRZoc+uYMu/GumZ1z5KoaWn9zzjDbqREvBtVIxg2ilfp N84t/4bWDVkUo9jGUVfM2LFWNBk4BSgNugCDHOI+FuEENIFa9NLtx6uzFDVhv3p5 VsR+kW3yUDtHvYx5HBc0/iY1De6u3CDnZf4DJY1kmWYeE25Oa9Xpsv0z/RP+34y+ ebSrlE7uhjCQHXPww6DY09OSMZ93ISgvliSaDzIF2GaWoyf10SlYNm0QzGOODTon gfaGyALVZOHaLrxJ7c2nTy2WrVcxWuCkGZCuwEBTQ014EiMMWKJ773/N13+XsmQN GqVgOwFFIKkn2BfzbHESzPu4FQsQjnk= -----END CERTIFICATE-----Generated at Sun Aug 24 06:14:16 2025 by rpki-client