$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa File: a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa (raw, json) Hash identifier: axMNDAhOl2hS0eQadIboHNCQtuB96JxJEWahMrUHgLg= Subject key identifier: 4A:22:7B:E3:3E:FA:FC:BA:FD:D2:CF:C5:0F:BF:E5:86:63:66:26:C3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1E4ADF623E85CE7AA370 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 139.138.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:4a:df:62:3e:85:ce:7a:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=d6444f49-a115-453b-9175-f6f54cc2f9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:1c:78:7c:2f:5e:ba:87:28:06:45:1d:54: 7c:37:0d:0c:05:ad:63:0a:90:6b:89:6a:2c:72:cd: 74:90:89:e5:ab:54:c1:4a:30:d0:75:7f:66:80:2e: 5d:d0:0c:e3:f3:aa:80:b0:97:7f:c6:53:43:43:ed: d5:9d:10:47:d3:14:6c:28:c0:d1:fe:48:65:bd:fb: 5e:f4:52:55:11:09:c0:56:b8:19:76:08:d5:36:e5: 24:2f:16:5c:00:27:28:84:72:fe:5b:e7:de:ee:02: 81:c4:23:4f:d0:a7:49:19:01:4e:87:53:e8:64:d6: 1c:dd:cb:be:1f:a5:7b:e9:e6:89:5b:9e:81:63:52: 2f:21:9e:87:be:7e:90:ca:45:fc:b6:75:13:a8:e9: a4:24:9a:b2:be:21:54:a5:e9:dc:60:f7:55:98:ec: df:9c:dc:06:f5:49:14:36:27:e1:c6:14:6e:2a:02: 69:33:d1:0c:6f:f6:e2:09:94:9b:0e:07:fe:a9:91: 37:a4:37:66:24:50:9a:48:b3:b9:c9:46:ad:13:00: 69:cb:48:ca:40:e4:ed:ce:a3:5a:2c:f4:55:90:d8: 26:53:52:63:86:24:0b:3d:81:81:c2:1d:bd:1e:02: b6:4a:aa:b6:ea:f1:67:a3:7c:5b:36:30:11:4a:0c: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:7B:E3:3E:FA:FC:BA:FD:D2:CF:C5:0F:BF:E5:86:63:66:26:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:43:aa:c5:b5:b1:4b:7b:e9:9a:dd:db:8e:10:34:17:42:89: 7e:9f:93:57:2f:c9:dc:89:43:49:67:dd:47:62:b5:7c:15:5b: 79:f0:76:9a:05:53:1d:cf:5e:63:2f:ef:06:67:6f:9e:5a:0a: b4:f8:0f:a9:3e:1c:36:50:d5:bd:f3:f2:81:45:e4:1d:45:44: 63:e0:a3:9c:af:1b:04:df:e5:bb:88:23:58:60:16:17:13:ea: 25:fe:e5:51:c3:7c:88:93:23:a1:00:3b:c6:04:91:d6:ee:1f: 91:b1:58:ed:37:5b:9a:d2:b7:be:ac:c0:6c:49:95:9b:24:fc: a8:88:b3:2c:84:0e:ff:f8:1a:7a:d2:61:e5:ba:76:84:62:c8: e9:af:4a:21:89:84:5f:4d:fc:d1:e6:47:c2:e1:b9:6b:10:a4: 73:00:97:90:13:7a:cd:1a:19:c9:44:31:0c:d7:2f:46:89:6a: 06:d0:51:b2:4e:c1:aa:d4:f1:03:db:62:5c:16:ee:8e:39:5a: df:b1:e7:8b:a1:5f:dc:ee:0f:29:d8:17:52:aa:57:94:04:8f: 38:72:05:be:2d:43:2b:e4:0a:3b:78:3b:24:3d:c6:ff:fe:af: c6:da:fa:47:45:df:7d:e1:52:22:6a:5e:2a:20:23:4f:f0:4f: 7a:f1:64:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx5K32I+hc56o3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDY0NDRmNDktYTExNS00NTNiLTkxNzUtZjZmNTRjYzJmOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizcceHwvXrqHKAZFHVR8Nw0MBa1jCpBriWos cs10kInlq1TBSjDQdX9mgC5d0Azj86qAsJd/xlNDQ+3VnRBH0xRsKMDR/khlvfte 9FJVEQnAVrgZdgjVNuUkLxZcACcohHL+W+fe7gKBxCNP0KdJGQFOh1PoZNYc3cu+ H6V76eaJW56BY1IvIZ6Hvn6QykX8tnUTqOmkJJqyviFUpencYPdVmOzfnNwG9UkU NifhxhRuKgJpM9EMb/biCZSbDgf+qZE3pDdmJFCaSLO5yUatEwBpy0jKQOTtzqNa LPRVkNgmU1JjhiQLPYGBwh29HgK2Sqq26vFno3xbNjARSgxSUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoie+M++vy6/dLPxQ+/5YZjZibDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYThjNGJmOGMtYWQ4MC0z NWU4LWE3OWUtYzQ0NDQwYWY3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINDqsW1sUt76Zrd244QNBdCiX6fk1cvydyJQ0ln3UditXwVW3nwdpoF Ux3PXmMv7wZnb55aCrT4D6k+HDZQ1b3z8oFF5B1FRGPgo5yvGwTf5buII1hgFhcT 6iX+5VHDfIiTI6EAO8YEkdbuH5GxWO03W5rSt76swGxJlZsk/KiIsyyEDv/4GnrS YeW6doRiyOmvSiGJhF9N/NHmR8LhuWsQpHMAl5ATes0aGclEMQzXL0aJagbQUbJO warU8QPbYlwW7o45Wt+x54uhX9zuDynYF1KqV5QEjzhyBb4tQyvkCjt4OyQ9xv/+ r8ba+kdF333hUiJqXiogI0/wT3rxZOA= -----END CERTIFICATE-----Generated at Mon Jun 30 03:49:35 2025 by rpki-client