$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json) Hash identifier: PI/CrQ+bUTCwDk88nbDh8pLBYzL9LK89fcS07Ssyq/8= Subject key identifier: 60:66:1A:C7:01:DD:32:6E:62:DD:9C:64:E0:F2:29:96:B9:6D:A4:D6 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1E3B2AA9B3D9E1028C00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 139.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:3b:2a:a9:b3:d9:e1:02:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=a40db123-b8ab-4466-a900-e88e5a3542a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:52:d2:90:80:07:3b:c4:ca:67:8f:38:6f: f6:ce:fc:4b:b3:26:16:c5:54:a0:a3:58:84:4a:a4: 7e:36:00:b3:0d:dd:be:06:1f:7c:e1:d6:e9:0b:1b: 9f:7d:cd:5e:a4:88:be:d1:f5:44:90:ca:8c:7a:68: d0:81:fa:24:ae:13:69:4a:c9:5a:7d:2c:fb:0e:0a: 2d:0a:a1:d9:4a:97:b3:33:20:ac:c5:24:14:1f:37: 6a:2c:9c:9d:30:ae:78:42:4c:44:5a:c0:1e:f6:53: 15:07:96:03:d8:ad:83:ca:28:59:7b:4c:90:f7:af: c3:b6:5b:00:46:4c:ea:0d:bf:03:dc:7f:9a:73:6b: 28:2b:c5:02:43:64:e8:db:e2:30:eb:fb:c0:16:ab: 11:60:8e:72:49:8e:f8:97:81:d6:c5:91:55:cf:41: 87:c4:4e:f2:2a:14:ba:74:fb:71:96:19:64:cf:a2: 9b:d9:fe:c7:ac:b4:22:22:dd:3c:2b:61:15:ab:76: b6:f1:c2:13:65:bd:2f:09:ab:78:d8:ef:06:d8:db: ed:d9:10:7f:31:c5:c9:6e:e4:e5:77:71:18:ed:51: 1f:f1:eb:f2:4c:1b:00:00:7e:71:71:58:84:5a:bb: af:6f:45:ff:a7:9e:56:5a:bb:a8:ce:44:41:41:3a: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:1A:C7:01:DD:32:6E:62:DD:9C:64:E0:F2:29:96:B9:6D:A4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:b9:4d:0a:2f:f3:8b:66:4b:eb:02:83:57:04:01:76:9f:44: 46:34:a7:b4:97:f6:39:3b:61:7a:16:d6:84:c1:f1:73:5e:b2: e0:a3:27:a5:08:cf:93:48:b1:20:ce:d5:05:88:bd:7b:88:72: 49:d7:cb:ad:17:d2:83:04:d3:eb:7d:75:78:b2:15:62:5c:fb: df:e7:da:22:35:ca:2c:5c:0e:9c:5b:77:81:21:88:14:7e:83: df:d1:2e:e3:3b:e9:02:56:57:19:9b:92:6a:aa:c6:81:69:7c: c7:d3:84:8e:d6:0c:70:68:d4:d1:be:36:85:17:88:aa:6a:e9: 69:e3:82:99:52:bb:1e:b2:79:3e:c6:60:1c:28:e7:4f:a8:01: 79:d2:e5:46:93:f9:f0:ed:47:1c:20:f6:3e:07:fc:9c:30:84: 83:a5:fa:22:b1:49:cf:50:a4:8c:55:51:89:40:8c:25:b9:af: 5c:1b:05:21:ce:6c:dc:69:79:39:98:20:08:2e:91:b2:ec:2f: ac:db:7f:5e:62:26:08:71:43:a1:c4:db:37:76:d1:96:25:c2: 3b:f2:f0:bc:11:cd:dc:6f:2b:3e:cb:ab:93:9f:7f:86:18:bc: 79:22:59:8f:be:30:50:de:33:0b:c8:7d:a8:ad:02:4d:ce:7c: d6:b4:0c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx47Kqmz2eECjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YTQwZGIxMjMtYjhhYi00NDY2LWE5MDAtZTg4ZTVhMzU0MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVZS0pCABzvEymePOG/2zvxLsyYWxVSgo1iE SqR+NgCzDd2+Bh984dbpCxuffc1epIi+0fVEkMqMemjQgfokrhNpSslafSz7Dgot CqHZSpezMyCsxSQUHzdqLJydMK54QkxEWsAe9lMVB5YD2K2DyihZe0yQ96/DtlsA RkzqDb8D3H+ac2soK8UCQ2To2+Iw6/vAFqsRYI5ySY74l4HWxZFVz0GHxE7yKhS6 dPtxlhlkz6Kb2f7HrLQiIt08K2EVq3a28cITZb0vCat42O8G2Nvt2RB/McXJbuTl d3EY7VEf8evyTBsAAH5xcViEWruvb0X/p55WWruozkRBQTrWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBmGscB3TJuYt2cZODyKZa5baTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALW5TQov84tmS+sCg1cEAXafREY0p7SX9jk7YXoW1oTB8XNesuCjJ6UI z5NIsSDO1QWIvXuIcknXy60X0oME0+t9dXiyFWJc+9/n2iI1yixcDpxbd4EhiBR+ g9/RLuM76QJWVxmbkmqqxoFpfMfThI7WDHBo1NG+NoUXiKpq6WnjgplSux6yeT7G YBwo50+oAXnS5UaT+fDtRxwg9j4H/JwwhIOl+iKxSc9QpIxVUYlAjCW5r1wbBSHO bNxpeTmYIAgukbLsL6zbf15iJghxQ6HE2zd20ZYlwjvy8LwRzdxvKz7Lq5Off4YY vHkiWY++MFDeMwvIfaitAk3OfNa0DG8= -----END CERTIFICATE-----Generated at Mon Jun 30 07:27:14 2025 by rpki-client