$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa File: 32a203ee-55ea-3425-bf43-24b1958aa53b.roa (raw, json) Hash identifier: BEBhijATEO83UBRil5k6CQmD13DXwJVAMU/I3aw4svA= Subject key identifier: 26:24:BB:D0:0C:90:C0:41:48:BE:21:95:D3:68:FD:96:DB:6B:98:98 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC146E4ED339352D7349380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 139.138.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:e4:ed:33:93:52:d7:34:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e214ce1e-3f3d-42cd-9a6b-9eac32952944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:05:40:6b:15:36:3e:a3:1f:09:95:3c:28: 4b:3d:66:d3:51:31:21:a1:84:be:52:0f:08:9a:05: b8:3b:9b:c4:11:06:5b:e4:20:6a:d4:53:95:3f:ff: bf:db:3b:3c:f2:1e:56:d6:ce:c0:14:a5:0f:a0:9b: 41:de:59:46:4a:64:6c:7c:bd:0c:0f:cb:b2:b2:cd: 6f:97:12:a7:7e:34:80:cf:47:d4:7a:41:2d:6b:2d: 94:0a:26:12:77:00:3a:9c:9c:df:09:9d:25:d7:a0: c8:09:51:30:4e:89:08:ed:c4:a5:d5:cc:f8:63:df: 16:b3:25:58:84:02:d5:9a:eb:52:41:31:00:38:c8: 50:a1:bd:00:90:19:55:08:47:a2:4c:8f:e3:7e:09: 72:bc:5e:13:33:8e:fa:40:b6:3a:da:17:7b:06:fa: 32:ad:d3:14:01:95:5e:8d:8f:35:99:d3:7b:2b:96: 0e:2f:9f:67:73:be:37:71:66:ab:b6:1d:9a:29:bc: 8e:a2:ce:3c:dd:3c:3e:18:03:44:db:3e:97:77:5c: 22:8c:27:6f:e4:72:a0:4b:b9:c7:e8:9c:4a:d9:51: 69:e0:cb:aa:ec:b5:49:b1:c1:9c:6d:01:0a:33:b2: 8f:67:12:54:bf:51:95:8e:64:21:3e:84:14:e3:f3: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:24:BB:D0:0C:90:C0:41:48:BE:21:95:D3:68:FD:96:DB:6B:98:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:24:5b:f5:da:4e:13:18:cf:83:1d:1b:7c:11:0d:4b:a7:36: 20:7a:2c:03:91:8c:4a:33:04:a6:5d:98:d4:83:a2:52:f4:eb: 12:f4:95:a8:56:04:df:a1:16:5f:11:79:0a:71:c2:99:39:61: 21:22:59:21:0e:8b:44:18:43:3a:9a:b7:40:c9:9b:2c:34:94: b0:19:b3:29:df:2d:82:7f:5c:1f:13:35:9a:4b:fb:71:21:39: 75:3d:76:be:d6:37:3c:bd:41:27:d6:63:0c:61:b8:71:9f:ff: c9:7c:6f:f7:ad:4d:da:38:05:e9:3a:55:ec:81:8e:95:4d:42: 30:35:06:c7:1e:be:f9:9f:47:35:69:81:08:36:63:8a:38:93: 81:f6:77:cc:d4:84:bd:de:b4:a2:71:60:1c:3f:fa:79:50:97: d4:65:65:a4:a2:c9:60:b9:85:45:9a:6a:19:61:9d:20:ae:1a: ad:0a:f2:c9:52:e3:d1:1e:fa:52:79:80:85:7f:e6:21:d5:30: 3a:0f:57:41:d6:02:5e:46:79:ea:92:33:52:3b:64:ce:78:20: ae:a9:50:c2:83:69:0f:39:4f:cc:56:1c:c2:ac:c9:20:cc:25: 8b:95:87:0a:e6:ba:89:4b:f3:50:32:b2:0f:6a:95:24:91:77: 39:d1:f6:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUbk7TOTUtc0k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTIxNGNlMWUtM2YzZC00MmNkLTlhNmItOWVhYzMyOTUyOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcFQGsVNj6jHwmVPChLPWbTUTEhoYS+Ug8I mgW4O5vEEQZb5CBq1FOVP/+/2zs88h5W1s7AFKUPoJtB3llGSmRsfL0MD8uyss1v lxKnfjSAz0fUekEtay2UCiYSdwA6nJzfCZ0l16DICVEwTokI7cSl1cz4Y98WsyVY hALVmutSQTEAOMhQob0AkBlVCEeiTI/jfglyvF4TM476QLY62hd7BvoyrdMUAZVe jY81mdN7K5YOL59nc743cWarth2aKbyOos483Tw+GANE2z6Xd1wijCdv5HKgS7nH 6JxK2VFp4Muq7LVJscGcbQEKM7KPZxJUv1GVjmQhPoQU4/NdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYku9AMkMBBSL4hldNo/Zbba5iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzJhMjAzZWUtNTVlYS0z NDI1LWJmNDMtMjRiMTk1OGFhNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4kW/XaThMYz4MdG3wRDUunNiB6LAORjEozBKZdmNSDolL06xL0lahW BN+hFl8ReQpxwpk5YSEiWSEOi0QYQzqat0DJmyw0lLAZsynfLYJ/XB8TNZpL+3Eh OXU9dr7WNzy9QSfWYwxhuHGf/8l8b/etTdo4Bek6VeyBjpVNQjA1BscevvmfRzVp gQg2Y4o4k4H2d8zUhL3etKJxYBw/+nlQl9RlZaSiyWC5hUWaahlhnSCuGq0K8slS 49Ee+lJ5gIV/5iHVMDoPV0HWAl5GeeqSM1I7ZM54IK6pUMKDaQ85T8xWHMKsySDM JYuVhwrmuolL81Aysg9qlSSRdznR9hQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:36 2025 by rpki-client