$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa File: ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa (raw, json) Hash identifier: 0nqmtBaoCqH1MWA1eDSbsJuy9/Fvr0ED9sT2pSXqFso= Subject key identifier: A9:49:ED:27:D2:5C:94:DF:23:42:D6:CD:57:66:57:83:77:83:5D:10 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E784716DB73E3596031B80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:71:6d:b7:3e:35:96:03:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=96e56e15-8935-42cb-8113-b3134b8ef3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:81:a7:ea:7e:27:0a:f2:89:fb:94:f5:5d: 99:6c:0f:ed:53:bc:17:20:d4:e0:8e:91:a8:d1:25: 79:19:e0:61:f6:33:50:4c:23:d7:96:5b:5c:b8:e2: 12:9e:60:23:5a:0f:04:9c:88:fe:47:51:4d:d8:73: 7d:df:8e:14:1f:d2:b7:45:4a:ae:89:1c:23:68:e6: 3b:f1:63:08:2e:93:5c:e4:75:24:d3:e3:91:6f:cb: 97:14:86:9a:6b:7e:e8:60:1f:2a:37:43:97:fe:29: fc:ac:00:3a:61:fc:ea:32:82:24:cd:9d:32:90:46: a5:8f:c0:3e:69:28:fb:88:f9:8c:a3:21:f2:0f:ca: 4d:1e:c7:5e:05:71:02:96:cc:a4:2a:13:22:6b:e3: 1a:ad:16:3e:8f:11:78:06:d2:9e:8a:35:32:63:da: 6b:ce:18:f4:49:76:56:5a:39:3a:07:9c:7f:a9:7b: 51:28:37:4b:75:68:07:d2:78:c1:8b:4b:34:93:bf: bc:1e:b3:fc:97:20:30:8b:11:ba:ea:f1:80:2a:af: 00:34:14:fa:9a:90:93:a0:fe:68:2f:07:a6:dd:a1: 5f:60:b5:80:41:f4:cb:1a:dd:32:4d:35:84:67:80: 36:05:c0:8d:5b:a7:ee:e9:89:aa:4b:c3:1d:1f:6a: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:49:ED:27:D2:5C:94:DF:23:42:D6:CD:57:66:57:83:77:83:5D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cd:91:27:b0:a8:e0:8d:bb:68:89:da:a0:bd:10:f4:63:2c: 80:46:27:d5:fb:0e:58:66:67:86:c9:91:ef:04:9f:6a:4a:45: 16:82:fa:19:aa:18:da:2c:91:f1:fd:2e:3f:08:a4:06:94:79: ca:ab:46:84:9b:00:1e:d8:a2:76:00:b5:4d:22:88:53:5e:04: 2e:ed:ba:af:b7:67:54:f5:0d:93:b1:59:97:ba:05:de:42:f7: ae:88:e2:cf:d4:d8:0b:78:55:af:e1:1e:2f:0b:0e:2d:8b:b0: 20:f0:02:03:2e:90:aa:04:10:7c:20:c7:cb:9f:2c:24:1d:f1: d7:73:df:c5:7c:b2:d9:5d:08:9f:5e:0a:6e:de:f6:9e:db:b7: dd:87:01:59:b9:f1:91:5e:c6:22:09:19:d5:eb:2b:bc:74:8f: c8:c4:ec:6f:08:ca:d0:b1:51:b9:36:96:f2:fe:b6:3a:d3:4a: 16:51:54:ae:40:8c:45:f1:f2:f9:72:ac:b1:9e:67:91:d9:b3: bb:95:a2:b0:f6:18:20:e2:1a:93:c1:93:52:18:c6:95:11:b4: ac:3e:9a:7b:15:18:16:2b:02:7c:36:3f:3c:70:0b:25:9f:7d: 74:db:45:92:d8:b8:a2:e4:3c:e7:b0:c4:ce:6b:0a:4d:00:3c: 52:d8:7c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54Rxbbc+NZYDG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTZlNTZlMTUtODkzNS00MmNiLTgxMTMtYjMxMzRiOGVmM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHiBp+p+JwryifuU9V2ZbA/tU7wXINTgjpGo 0SV5GeBh9jNQTCPXlltcuOISnmAjWg8EnIj+R1FN2HN9344UH9K3RUquiRwjaOY7 8WMILpNc5HUk0+ORb8uXFIaaa37oYB8qN0OX/in8rAA6YfzqMoIkzZ0ykEalj8A+ aSj7iPmMoyHyD8pNHsdeBXEClsykKhMia+MarRY+jxF4BtKeijUyY9przhj0SXZW Wjk6B5x/qXtRKDdLdWgH0njBi0s0k7+8HrP8lyAwixG66vGAKq8ANBT6mpCToP5o Lwem3aFfYLWAQfTLGt0yTTWEZ4A2BcCNW6fu6YmqS8MdH2oebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlJ7SfSXJTfI0LWzVdmV4N3g10QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYWI0M2NmMjAtYjBkYS0z OWI3LTkyYTktOWI1ODIxNjMzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXNkSewqOCNu2iJ2qC9EPRjLIBGJ9X7DlhmZ4bJke8En2pKRRaC+hmq GNoskfH9Lj8IpAaUecqrRoSbAB7YonYAtU0iiFNeBC7tuq+3Z1T1DZOxWZe6Bd5C 966I4s/U2At4Va/hHi8LDi2LsCDwAgMukKoEEHwgx8ufLCQd8ddz38V8stldCJ9e Cm7e9p7bt92HAVm58ZFexiIJGdXrK7x0j8jE7G8IytCxUbk2lvL+tjrTShZRVK5A jEXx8vlyrLGeZ5HZs7uVorD2GCDiGpPBk1IYxpURtKw+mnsVGBYrAnw2PzxwCyWf fXTbRZLYuKLkPOewxM5rCk0APFLYfP0= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:02 2025 by rpki-client