$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b7096971-494c-3634-9452-2afd2bc0ef9a.roa File: b7096971-494c-3634-9452-2afd2bc0ef9a.roa (raw, json) Hash identifier: N01KgmB70pmRL9FlWPz6Wx52uTKNCd/TpTtU7xqCLI0= Subject key identifier: D0:C5:E0:2D:D6:A2:5F:09:D4:FE:5A:2B:0B:D7:CE:E9:A1:33:05:EC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A30503ED5EA181B86BE63FC00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b7096971-494c-3634-9452-2afd2bc0ef9a.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 30215 IP address blocks: 139.138.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3e:d5:ea:18:1b:86:be:63:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=dc6d08d0-5c79-4871-812a-fbfc1b68e4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:15:e5:23:70:47:06:61:47:7c:8a:bd:48: 0f:25:76:55:d5:e9:31:30:2b:e5:b9:6d:5b:5d:25: 7a:37:6d:88:b2:09:08:53:e0:ad:39:57:2a:e8:82: 56:5d:a0:17:4b:91:14:71:3e:cd:47:98:14:e9:6d: c6:40:65:22:e4:23:98:bd:1d:fe:a4:58:9e:1e:59: 18:83:50:2a:56:1a:37:0c:c4:43:53:80:45:5e:b8: a8:33:b7:c7:59:ac:e5:51:00:f0:88:77:32:b2:b7: cb:a2:f5:8b:19:e8:de:34:68:d1:a9:f7:8d:06:fa: 6a:f4:fc:af:9b:2f:25:70:ee:ac:16:92:a7:13:04: e8:f3:5e:f5:0c:86:1c:9f:76:dd:96:39:75:f9:76: 78:31:3d:67:ac:19:a6:1b:1c:02:70:63:fd:20:11: 82:b4:59:dd:e7:64:59:fc:a9:6a:a9:bb:d6:84:ad: 82:28:1a:33:98:9d:af:ca:15:2d:68:e4:bb:d4:22: e0:9d:ca:7f:f2:35:e4:ef:45:b9:33:33:50:55:7d: 83:79:54:93:c5:62:f0:cb:02:e8:9b:32:11:3c:a5: 9c:5c:86:50:e2:05:a6:bd:69:e0:9a:a5:ee:7e:aa: 14:49:b1:5e:23:9b:a4:17:93:a8:fa:67:cc:26:b3: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:E0:2D:D6:A2:5F:09:D4:FE:5A:2B:0B:D7:CE:E9:A1:33:05:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b7096971-494c-3634-9452-2afd2bc0ef9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:20:31:21:ff:e3:63:40:e8:25:80:e3:2e:ef:e8:84:42:74: 10:1d:1b:93:58:36:87:fc:dc:7b:62:31:f3:69:4a:cf:ed:09: 11:75:18:34:82:c5:ed:68:4c:ad:9a:2b:24:35:f6:f8:b7:28: 70:ed:d4:89:91:e8:b7:41:26:c6:8c:65:6e:73:2f:8f:a1:ae: 7d:a8:a9:7e:ca:96:74:e7:5b:9b:1b:44:48:19:d6:59:29:18: c2:f4:a2:f7:5b:dc:d7:37:95:9e:34:ed:0e:46:7b:4e:03:db: 36:40:67:ab:a7:fe:db:71:38:42:c3:25:f1:6a:ab:cc:60:29: db:87:fa:d3:8c:06:aa:a5:79:ae:75:77:62:7a:da:22:8a:39: 98:16:a7:f9:d0:02:3e:36:6d:53:96:16:d8:68:a4:f9:bd:90: 31:20:e0:a5:6b:4f:ef:2a:a4:b6:ec:34:84:36:fb:d3:52:56: f0:f7:82:71:5f:08:d9:a8:c8:f6:73:ee:20:5e:01:58:50:7f: b4:e0:d4:71:e0:8c:24:93:55:a3:f1:c6:6f:f0:c6:2e:a2:16: 16:cf:de:19:21:cb:95:4f:8a:f4:cb:a4:7e:39:4d:b9:61:2e: 64:a7:2b:13:c2:54:6b:04:65:25:d8:ad:a0:f5:6f:c4:62:86: dc:c8:ac:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUD7V6hgbhr5j/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGM2ZDA4ZDAtNWM3OS00ODcxLTgxMmEtZmJmYzFiNjhlNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxusV5SNwRwZhR3yKvUgPJXZV1ekxMCvluW1b XSV6N22IsgkIU+CtOVcq6IJWXaAXS5EUcT7NR5gU6W3GQGUi5COYvR3+pFieHlkY g1AqVho3DMRDU4BFXrioM7fHWazlUQDwiHcysrfLovWLGejeNGjRqfeNBvpq9Pyv my8lcO6sFpKnEwTo8171DIYcn3bdljl1+XZ4MT1nrBmmGxwCcGP9IBGCtFnd52RZ /KlqqbvWhK2CKBozmJ2vyhUtaOS71CLgncp/8jXk70W5MzNQVX2DeVSTxWLwywLo mzIRPKWcXIZQ4gWmvWngmqXufqoUSbFeI5ukF5Oo+mfMJrO89wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDF4C3Wol8J1P5aKwvXzumhMwXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjcwOTY5NzEtNDk0Yy0z NjM0LTk0NTItMmFmZDJiYzBlZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4otMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUgMSH/42NA6CWA4y7v6IRCdBAdG5NYNof83HtiMfNpSs/tCRF1GDSC xe1oTK2aKyQ19vi3KHDt1ImR6LdBJsaMZW5zL4+hrn2oqX7KlnTnW5sbREgZ1lkp GML0ovdb3Nc3lZ407Q5Ge04D2zZAZ6un/ttxOELDJfFqq8xgKduH+tOMBqqlea51 d2J62iKKOZgWp/nQAj42bVOWFthopPm9kDEg4KVrT+8qpLbsNIQ2+9NSVvD3gnFf CNmoyPZz7iBeAVhQf7Tg1HHgjCSTVaPxxm/wxi6iFhbP3hkhy5VPivTLpH45Tblh LmSnKxPCVGsEZSXYraD1b8RihtzIrDk= -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:53 2025 by rpki-client