$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa File: 3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa (raw, json) Hash identifier: 1ITfdIT2IRQ9RzQgP03YdFyd1mGHc/gw+PJ0fAKr/Gc= Subject key identifier: 6B:EC:09:81:4D:41:65:6B:93:01:DB:11:A6:CF:6F:4C:76:BB:AE:69 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D116D24980338DD0D42120 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 139.138.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:16:d2:49:80:33:8d:d0:d4:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d5c63b80-e8e4-48fc-bdf3-a29f9bbc97d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:ba:10:2a:c6:e9:ba:78:59:67:6c:34:c4: 6e:39:4b:0a:a8:5b:b4:9f:e4:84:97:fe:0c:c8:9f: 75:f5:7e:d1:53:af:7f:0e:d3:0d:2a:7b:4c:dd:4a: dd:2e:2f:ca:2d:a7:a3:5b:61:47:59:ad:ad:39:fd: c0:73:7d:b5:b8:79:55:88:0c:2a:68:70:fe:1c:08: 96:9b:28:bd:77:ce:3e:c8:75:87:4e:ca:19:b1:01: 2a:b4:12:b4:20:9c:be:85:c6:d5:56:70:cd:67:ef: b9:1f:9d:18:b7:5c:ee:8f:60:18:6e:46:0d:6e:ba: 56:ab:a8:c4:f3:f4:e8:d1:35:c4:66:b4:8d:04:39: 2a:ff:0d:f0:0d:3f:a8:15:35:16:34:0e:9f:05:c3: ef:8b:af:64:68:e8:e9:c2:75:48:da:31:5c:11:79: 5e:7b:4e:ef:39:b5:46:4a:60:7a:d1:54:f9:6a:18: f4:51:76:ec:fe:58:ec:a6:bb:7e:8b:70:b5:d9:d8: 79:3e:32:09:48:b3:b1:9a:fc:aa:34:09:07:94:63: 54:2c:f9:03:4d:96:a8:03:10:40:b3:96:98:f9:1e: 81:0c:f3:22:7b:20:84:2a:63:40:6a:ad:fe:5d:54: e8:ee:bb:a2:ec:bf:5b:69:19:56:09:84:62:ab:62: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:09:81:4D:41:65:6B:93:01:DB:11:A6:CF:6F:4C:76:BB:AE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:dd:61:95:10:09:27:6c:32:74:62:54:bc:a0:50:b5:aa:35: 85:09:79:a5:a7:bf:45:29:95:83:e9:c0:0e:45:e0:e2:b5:aa: fc:42:88:f4:c4:c0:c4:99:9b:b2:8a:c7:1d:e9:b5:fb:63:b3: da:40:9f:ca:a6:e9:6d:74:bf:a2:0d:27:c9:dd:b2:7f:a7:80: 84:28:08:a9:7e:05:fa:3c:ca:db:7a:d7:db:0c:15:69:97:7c: a6:67:27:ba:d2:4f:67:3c:0f:d8:73:e0:97:f2:e3:6d:0c:4b: ae:23:23:33:6f:ee:23:f8:f0:50:e9:34:56:ae:43:6c:37:87: f9:34:a7:7c:6c:f9:c3:e3:88:0d:29:04:37:3c:9a:16:4d:66: 54:6c:fc:ff:fe:af:a7:b4:6e:f9:df:14:02:4f:02:d9:a0:bc: ba:b1:76:87:85:c8:5e:ed:96:7b:17:63:44:c9:ad:a4:ec:0d: ba:a7:1b:1b:e8:48:fe:19:1a:7c:42:22:e5:2b:5c:39:e3:82: cf:53:cd:c3:f8:33:f1:16:c5:62:ac:8a:a7:c9:87:f0:fb:38: 93:ef:6d:9a:52:73:b8:4d:61:a7:82:b2:04:22:f8:20:33:28: 3d:54:1f:29:e3:f2:8e:7e:06:fe:6b:28:a2:ad:2b:1f:09:5f: 5d:09:eb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RbSSYAzjdDUISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDVjNjNiODAtZThlNC00OGZjLWJkZjMtYTI5ZjliYmM5N2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K66ECrG6bp4WWdsNMRuOUsKqFu0n+SEl/4M yJ919X7RU69/DtMNKntM3UrdLi/KLaejW2FHWa2tOf3Ac321uHlViAwqaHD+HAiW myi9d84+yHWHTsoZsQEqtBK0IJy+hcbVVnDNZ++5H50Yt1zuj2AYbkYNbrpWq6jE 8/To0TXEZrSNBDkq/w3wDT+oFTUWNA6fBcPvi69kaOjpwnVI2jFcEXlee07vObVG SmB60VT5ahj0UXbs/ljsprt+i3C12dh5PjIJSLOxmvyqNAkHlGNULPkDTZaoAxBA s5aY+R6BDPMieyCEKmNAaq3+XVTo7rui7L9baRlWCYRiq2JMhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvsCYFNQWVrkwHbEabPb0x2u65pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2U1ZTYyYjgtZjQ1Yi0z MDZkLTlhZTItMGFhZTNmNjYxNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4okMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLdYZUQCSdsMnRiVLygULWqNYUJeaWnv0UplYPpwA5F4OK1qvxCiPTE wMSZm7KKxx3ptftjs9pAn8qm6W10v6INJ8ndsn+ngIQoCKl+Bfo8ytt619sMFWmX fKZnJ7rST2c8D9hz4Jfy420MS64jIzNv7iP48FDpNFauQ2w3h/k0p3xs+cPjiA0p BDc8mhZNZlRs/P/+r6e0bvnfFAJPAtmgvLqxdoeFyF7tlnsXY0TJraTsDbqnGxvo SP4ZGnxCIuUrXDnjgs9TzcP4M/EWxWKsiqfJh/D7OJPvbZpSc7hNYaeCsgQi+CAz KD1UHynj8o5+Bv5rKKKtKx8JX10J66w= -----END CERTIFICATE-----Generated at Sun Aug 24 06:02:34 2025 by rpki-client