$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa File: 709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa (raw, json) Hash identifier: ZBYQfGc7Mfda76G/O8Z//OYFWV+suH943GCbMuAA8GY= Subject key identifier: 2E:3D:64:C9:B5:35:AF:17:AC:24:B3:EA:92:9F:EE:E0:74:CC:F6:D7 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E784CA586181A5F180B980 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:ca:58:61:81:a5:f1:80:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=abe23c13-ba29-4f4e-b771-589dcd5a25e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:60:b2:13:a2:71:34:8a:9d:1f:59:24:e2: 4f:c7:f1:46:d0:8c:9a:4a:3d:03:51:9b:39:46:46: 1b:d5:db:7c:1c:d4:41:1c:b6:93:9f:e2:f6:ee:8e: ad:d1:3c:2e:8a:44:2f:89:7d:f2:32:5f:f3:1b:d1: d8:09:1b:89:28:67:0a:2f:2e:92:76:f8:6c:af:1c: 03:46:e0:5c:0e:69:c4:4b:7b:21:c1:e0:bf:ff:0b: ed:44:2e:a1:3a:b5:57:11:6c:6f:21:48:51:5f:3f: 7a:66:0d:33:85:c1:64:9b:07:b5:aa:23:00:11:b8: 98:8d:ab:3c:95:a6:30:a3:e0:04:65:96:88:93:ff: 2e:0d:3e:66:38:8e:88:bb:07:82:b3:45:50:4c:35: d3:7c:dc:66:3a:da:cd:23:56:31:df:12:69:d3:bb: cb:c1:bb:40:92:8b:b6:ed:2c:25:68:21:ee:50:a1: 49:3c:16:01:36:73:d7:a5:3a:83:c5:d0:66:4b:e2: ec:4e:bf:64:14:1d:bf:6a:86:a7:db:62:bb:2f:1c: 8e:61:05:de:36:e6:06:78:f7:56:21:fe:1a:62:87: 68:28:87:22:4d:4b:f1:a7:16:a1:4d:25:9e:48:48: c8:68:cf:7b:87:70:cb:cf:d4:d5:a5:04:cd:f4:7b: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3D:64:C9:B5:35:AF:17:AC:24:B3:EA:92:9F:EE:E0:74:CC:F6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/709c6821-5b5b-392c-a3d0-23a3a48c5b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:53:d1:8d:f8:47:83:b1:72:a0:10:81:06:c6:29:3b:c3:52: 22:26:56:5b:8c:bf:aa:da:27:4e:1e:5e:1f:74:b7:05:c3:16: 1c:ab:4e:98:bd:bf:c1:40:fa:25:b9:82:7f:54:35:f5:18:78: 72:29:7c:8b:00:fb:54:bc:b3:b1:71:be:82:9b:7e:2a:71:ea: 0f:40:b4:1d:7e:4c:cb:a8:68:6c:b1:05:de:f8:10:36:bb:86: 5c:58:f9:1b:1b:b5:c0:91:41:c3:17:69:8c:ed:f3:91:b3:f3: 8a:93:b7:4f:00:87:cb:f6:52:e5:45:7b:54:b0:26:eb:d4:2a: a4:0e:24:81:ed:76:7d:d2:82:d4:f1:65:2c:94:1b:3b:0c:30: 40:46:ca:5e:5c:8a:95:57:f0:3a:59:d3:4b:3f:83:ac:d7:07: 6e:d3:60:a8:2b:fb:8b:68:39:97:7f:46:57:39:29:99:4d:b3: 74:bd:44:dc:06:6d:ab:8f:1e:fa:ae:78:75:2e:ab:49:77:9d: 3a:e5:d9:d6:b8:c1:65:cd:7b:aa:29:fb:de:d5:cf:e1:d7:1e: 05:d1:16:d5:1a:e0:cf:51:97:e1:cf:10:39:69:05:c1:49:6c: 25:5b:5c:a3:5b:00:87:f1:77:56:f0:c5:ef:38:1d:fd:9c:cd: d9:cb:4f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54TKWGGBpfGAuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWJlMjNjMTMtYmEyOS00ZjRlLWI3NzEtNTg5ZGNkNWEyNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx5gshOicTSKnR9ZJOJPx/FG0IyaSj0DUZs5 RkYb1dt8HNRBHLaTn+L27o6t0TwuikQviX3yMl/zG9HYCRuJKGcKLy6SdvhsrxwD RuBcDmnES3shweC//wvtRC6hOrVXEWxvIUhRXz96Zg0zhcFkmwe1qiMAEbiYjas8 laYwo+AEZZaIk/8uDT5mOI6IuweCs0VQTDXTfNxmOtrNI1Yx3xJp07vLwbtAkou2 7SwlaCHuUKFJPBYBNnPXpTqDxdBmS+LsTr9kFB2/aoan22K7LxyOYQXeNuYGePdW If4aYodoKIciTUvxpxahTSWeSEjIaM97h3DLz9TVpQTN9HslLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC49ZMm1Na8XrCSz6pKf7uB0zPbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzA5YzY4MjEtNWI1Yi0z OTJjLWEzZDAtMjNhM2E0OGM1YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4omMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdT0Y34R4OxcqAQgQbGKTvDUiImVluMv6raJ04eXh90twXDFhyrTpi9 v8FA+iW5gn9UNfUYeHIpfIsA+1S8s7FxvoKbfipx6g9AtB1+TMuoaGyxBd74EDa7 hlxY+RsbtcCRQcMXaYzt85Gz84qTt08Ah8v2UuVFe1SwJuvUKqQOJIHtdn3SgtTx ZSyUGzsMMEBGyl5cipVX8DpZ00s/g6zXB27TYKgr+4toOZd/Rlc5KZlNs3S9RNwG bauPHvqueHUuq0l3nTrl2da4wWXNe6op+97Vz+HXHgXRFtUa4M9Rl+HPEDlpBcFJ bCVbXKNbAIfxd1bwxe84Hf2czdnLT6A= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:06 2025 by rpki-client