$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa File: 59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa (raw, json) Hash identifier: ywyfESTG3+wLQDtcxyWfDdZ9g/T/UN8/cmTtpfkAfU0= Subject key identifier: 08:59:05:29:44:5E:BA:76:2F:06:F0:39:B7:08:D9:B4:5D:CE:22:21 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1E6E21C05CA38F229100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 139.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:6e:21:c0:5c:a3:8f:22:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=f3ba93e5-5592-4ee6-b82e-178937864aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:d4:85:99:bb:d6:06:1c:6a:3d:5b:f2:b1: 94:60:16:10:53:c5:97:d2:b4:6b:4b:ee:be:d0:93: f5:75:10:6c:44:72:ed:74:ca:aa:a1:b9:2b:14:dc: 3a:54:fd:f7:2d:b6:91:5f:f1:f1:d9:4f:4a:c5:4b: 79:9a:d4:28:a9:4b:74:6f:2c:2e:9b:54:c1:68:13: aa:73:29:17:3b:5c:01:bf:97:89:d7:d4:d8:7b:fe: b9:af:10:3c:11:fe:89:dc:09:94:22:ce:e3:ea:e1: 32:cd:c0:96:cd:22:c4:19:15:72:8c:e0:d5:28:91: 35:23:7d:93:ab:e6:5f:37:94:75:7f:04:b1:24:2e: b9:24:61:29:82:e9:5a:69:69:4d:83:f2:fc:3a:66: 3a:47:8e:32:e2:97:b3:5e:0f:1b:9c:73:8f:27:f3: a4:3b:da:0b:e8:6f:1a:5d:74:a7:32:22:17:a0:ac: 36:1c:2e:09:f0:53:60:51:84:fe:6e:85:f1:8b:29: 80:f7:1d:dd:84:4e:d8:e0:6b:dd:bd:bd:4a:35:2b: bc:9e:6b:75:2e:fc:17:51:64:2c:a8:d7:ff:f0:3d: f4:3d:ca:13:1c:e8:51:b6:10:8e:06:fc:9d:af:da: d5:e8:5b:34:c2:3f:e6:fd:8c:4d:98:17:c2:d6:a3: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:59:05:29:44:5E:BA:76:2F:06:F0:39:B7:08:D9:B4:5D:CE:22:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:51:0d:1f:b9:89:a5:72:b4:56:30:d4:e7:ed:fd:55:56:c8: e1:96:b4:ca:ec:21:21:5e:df:e3:82:e9:53:a0:c0:e8:7a:7c: 26:6d:d4:16:88:e8:c8:b8:df:db:cd:76:dc:3e:37:50:0c:4a: fe:6a:28:8e:b1:2d:4d:e3:7a:50:d1:5d:04:8b:56:6e:53:65: 17:80:74:3c:6c:6d:26:f9:78:30:48:82:d9:8b:c3:b3:4c:2f: f1:f8:b3:92:8e:90:09:69:12:f2:12:b8:e1:da:54:19:fc:d4: 61:f0:04:6a:3b:9c:14:b3:28:e0:ae:4a:6a:d5:2b:b0:0c:20: be:74:a9:11:fc:78:2e:f5:c5:89:72:2e:6b:01:5e:be:a4:16: ae:77:f2:36:5d:1f:47:8f:81:5f:b1:0f:8c:f6:6b:42:b1:ec: 99:f2:85:1f:d3:77:00:16:6e:bc:23:98:d5:dd:65:8f:f2:3f: 0a:da:cd:8f:76:2b:41:51:75:69:b8:33:79:12:32:ad:8a:05: d5:12:22:28:90:4b:3c:36:f1:b6:92:e3:ac:df:9f:af:56:4b: df:ed:93:01:dc:a0:12:cb:23:79:ce:81:50:6e:54:10:a2:27: dd:a3:cc:e4:b1:c6:26:0f:a0:be:86:88:75:61:eb:fb:a8:1a: b7:4b:6a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx5uIcBco48ikQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZjNiYTkzZTUtNTU5Mi00ZWU2LWI4MmUtMTc4OTM3ODY0YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LUhZm71gYcaj1b8rGUYBYQU8WX0rRrS+6+ 0JP1dRBsRHLtdMqqobkrFNw6VP33LbaRX/Hx2U9KxUt5mtQoqUt0bywum1TBaBOq cykXO1wBv5eJ19TYe/65rxA8Ef6J3AmUIs7j6uEyzcCWzSLEGRVyjODVKJE1I32T q+ZfN5R1fwSxJC65JGEpgulaaWlNg/L8OmY6R44y4pezXg8bnHOPJ/OkO9oL6G8a XXSnMiIXoKw2HC4J8FNgUYT+boXxiymA9x3dhE7Y4Gvdvb1KNSu8nmt1LvwXUWQs qNf/8D30PcoTHOhRthCOBvydr9rV6Fs0wj/m/YxNmBfC1qNQ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhZBSlEXrp2LwbwObcI2bRdziIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTllZGRkN2MtNjU3YS0z Y2MwLTg1YmYtM2MxNTJiZTZiNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdRDR+5iaVytFYw1Oft/VVWyOGWtMrsISFe3+OC6VOgwOh6fCZt1BaI 6Mi439vNdtw+N1AMSv5qKI6xLU3jelDRXQSLVm5TZReAdDxsbSb5eDBIgtmLw7NM L/H4s5KOkAlpEvISuOHaVBn81GHwBGo7nBSzKOCuSmrVK7AMIL50qRH8eC71xYly LmsBXr6kFq538jZdH0ePgV+xD4z2a0Kx7JnyhR/TdwAWbrwjmNXdZY/yPwrazY92 K0FRdWm4M3kSMq2KBdUSIiiQSzw28baS46zfn69WS9/tkwHcoBLLI3nOgVBuVBCi J92jzOSxxiYPoL6GiHVh6/uoGrdLal8= -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:49 2025 by rpki-client