$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa File: 7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa (raw, json) Hash identifier: f5xqu8UaPcX5BbMJTR3BquHUZOF9oD4w0mrlljuNMIE= Subject key identifier: D8:8E:6D:17:EC:B9:21:C9:4B:78:3D:30:20:7D:22:42:FD:8F:CA:2B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E784EEA937D2419DC7F480 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:ee:a9:37:d2:41:9d:c7:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5b427dee-ae7e-4a78-9c8a-15c62097ebe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:b0:22:a7:b1:ee:55:32:29:77:86:de:b4: bd:ab:2b:a2:c1:75:2f:44:5b:68:ae:ca:76:5d:6d: 79:25:25:df:a6:cf:04:12:d0:d7:03:84:72:25:60: e0:77:f6:e5:d5:34:23:f2:18:32:0b:81:58:5d:a0: 5f:b8:3f:e7:03:97:b8:1a:42:b7:88:8f:15:22:07: fd:30:1b:50:ee:31:86:fb:97:fd:52:a2:64:10:b8: 68:90:d6:57:4a:dd:c6:c2:77:d4:90:d1:78:b3:9b: 12:09:a2:25:80:0c:41:04:ea:1a:98:b3:74:bb:fb: e8:53:78:a4:3e:5e:cf:56:80:91:c1:72:d3:3d:e4: 18:b9:51:66:ff:18:78:fc:1c:af:5f:9d:5b:7e:b2: a4:cf:46:65:69:43:c3:b6:32:2a:6c:d4:1d:d6:47: e7:11:37:33:81:ae:58:23:f5:37:83:03:57:f8:8a: 69:d9:a2:60:15:be:4c:7c:9a:d8:a6:51:d4:07:4c: ee:3e:08:0f:30:e1:62:78:86:49:b2:69:53:62:69: f4:2e:c1:71:be:64:33:c1:cf:28:61:83:7d:85:cb: 4c:fc:36:0f:71:b8:39:cd:24:bd:d7:20:a4:69:f7: 92:86:f7:df:49:5b:87:33:f3:7e:f6:2b:5b:5f:63: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8E:6D:17:EC:B9:21:C9:4B:78:3D:30:20:7D:22:42:FD:8F:CA:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fe:b8:10:a3:5e:5c:08:91:d2:d9:38:83:a0:e9:e5:b2:6b: 9a:06:43:a8:9e:96:4f:7a:70:57:38:ba:bd:51:43:79:cf:1c: d7:d3:a6:ab:4d:f5:67:a5:97:12:0c:bc:ca:ae:89:9d:71:c2: ca:6b:fd:d2:0a:e6:2e:24:31:a4:27:96:69:db:7e:13:d2:b6: 88:7b:05:f6:99:99:30:7e:ee:00:52:85:cc:e2:11:e4:f4:8e: d8:43:42:98:da:87:da:c7:73:aa:76:f9:88:db:54:e2:fc:53: b2:b8:c6:bb:1d:e8:c2:c9:c0:bd:eb:9b:b2:5d:bd:40:5a:6b: a9:a9:99:9d:46:e2:9a:87:37:44:56:c5:16:07:e6:1c:fb:5a: 40:b6:25:a4:54:50:d8:3d:4c:8d:5f:3c:a9:a8:26:19:0c:7a: 02:cc:34:3c:57:ef:d1:12:ad:00:b1:b4:44:7a:63:26:06:a4: ef:fd:bc:da:cf:42:30:3f:5d:19:6e:44:8a:1c:15:e5:14:76: 07:bd:e9:07:56:77:01:04:9f:ff:8e:e0:b6:2b:c1:23:76:92: f7:66:16:ab:3c:e3:60:0d:c7:f6:d3:31:3a:b1:18:ae:e0:d4: c4:c6:27:54:9c:40:66:86:0c:02:37:67:88:9e:a9:76:9f:61: a6:b4:d2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54TuqTfSQZ3H9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWI0MjdkZWUtYWU3ZS00YTc4LTljOGEtMTVjNjIwOTdlYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeiwIqex7lUyKXeG3rS9qyuiwXUvRFtorsp2 XW15JSXfps8EEtDXA4RyJWDgd/bl1TQj8hgyC4FYXaBfuD/nA5e4GkK3iI8VIgf9 MBtQ7jGG+5f9UqJkELhokNZXSt3GwnfUkNF4s5sSCaIlgAxBBOoamLN0u/voU3ik Pl7PVoCRwXLTPeQYuVFm/xh4/ByvX51bfrKkz0ZlaUPDtjIqbNQd1kfnETczga5Y I/U3gwNX+Ipp2aJgFb5MfJrYplHUB0zuPggPMOFieIZJsmlTYmn0LsFxvmQzwc8o YYN9hctM/DYPcbg5zSS91yCkafeShvffSVuHM/N+9itbX2PEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiObRfsuSHJS3g9MCB9IkL9j8orMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2I5YWRhZWMtZWI4NC0z YWI4LWIyNGEtNmYwMmY3MzMzNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz+uBCjXlwIkdLZOIOg6eWya5oGQ6ielk96cFc4ur1RQ3nPHNfTpqtN 9WellxIMvMquiZ1xwspr/dIK5i4kMaQnlmnbfhPStoh7BfaZmTB+7gBShcziEeT0 jthDQpjah9rHc6p2+YjbVOL8U7K4xrsd6MLJwL3rm7JdvUBaa6mpmZ1G4pqHN0RW xRYH5hz7WkC2JaRUUNg9TI1fPKmoJhkMegLMNDxX79ESrQCxtER6YyYGpO/9vNrP QjA/XRluRIocFeUUdge96QdWdwEEn/+O4LYrwSN2kvdmFqs842ANx/bTMTqxGK7g 1MTGJ1ScQGaGDAI3Z4ieqXafYaa00oE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:36 2025 by rpki-client