$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa File: ba7363a2-8649-3b98-93b5-6f704982a180.roa (raw, json) Hash identifier: Utt4P+3CSRE3HbPSxVyXTAm42iiD5Zbnhvehj+m3paA= Subject key identifier: B7:EC:6F:70:D5:C3:20:D0:50:2B:83:A0:CA:5C:BA:35:2E:08:3C:B4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1EA22DA4F7F494C86C80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 139.138.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:a2:2d:a4:f7:f4:94:c8:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=40a5b3cf-ff55-4e37-87d0-a2588cab1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:21:e3:5f:97:49:08:9e:a8:a6:31:9f:cb: d1:9d:36:2f:23:dc:44:6c:4e:5b:22:42:49:22:38: 92:0e:d6:c1:30:94:25:ca:d9:d4:c7:50:c4:ee:48: df:fe:99:71:b9:da:26:fc:a8:33:fe:eb:a0:3b:60: f3:8f:48:53:b8:22:b5:46:ac:61:0b:00:7b:ea:a5: 0f:da:94:8e:4f:4e:70:b8:85:76:e6:a1:3e:f0:2f: 2f:79:f4:7f:31:c0:9d:c8:99:54:0e:d2:ed:47:48: b1:21:fd:98:03:1b:2b:50:ff:ca:dd:7d:38:ec:4f: e2:da:33:97:3d:30:2c:fc:cb:41:a1:d6:e3:35:93: ac:10:00:8a:64:85:28:e2:f9:3b:21:d2:de:20:5a: 6d:b5:3e:a6:d9:4b:56:dc:17:f7:a9:61:2c:c5:0c: 60:b6:e2:81:15:ed:cd:26:d1:af:95:96:2d:19:39: 27:c7:80:a9:1c:af:78:cb:5b:05:5a:48:18:45:33: 1e:ea:86:97:42:81:4d:7e:b6:95:01:49:26:7c:e4: 66:83:f2:f2:1a:72:3d:98:63:c8:f2:78:2b:13:98: b3:c5:bb:24:b4:67:bb:68:46:cd:54:18:94:ba:18: ac:99:bc:9b:66:4a:47:43:b2:e1:0a:54:25:2c:38: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EC:6F:70:D5:C3:20:D0:50:2B:83:A0:CA:5C:BA:35:2E:08:3C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:df:59:8b:b9:7c:5e:16:63:e6:89:22:87:6f:20:4a:b5:04: 84:b2:03:1d:14:f1:d9:85:7e:ea:36:24:81:38:d8:d1:90:31: 2d:ce:66:7f:19:91:c6:ad:26:29:16:1e:ba:ea:15:3c:63:4f: e2:a6:58:03:4e:da:f9:b0:33:1b:d6:86:3f:a7:5f:af:a2:04: c8:b3:c4:b6:ac:e8:48:2c:ab:12:af:6d:6d:c5:9c:c9:1c:34: 4a:83:e3:cd:f5:bb:95:6a:84:93:6a:c6:83:53:e9:87:d0:82: cc:ba:27:99:e6:8b:df:6a:34:a2:af:d0:1c:3f:43:77:6b:49: 19:7b:0f:39:31:b1:04:99:4b:b2:b7:53:bb:ce:f4:f1:98:d1: 21:df:8b:ac:7e:25:86:a4:d5:3f:f3:8a:19:7b:5c:98:b5:9c: 47:79:04:bf:64:9c:3d:d7:ef:6c:cb:1d:67:71:b0:77:97:77: 96:e3:f6:6e:25:98:0f:98:c3:95:98:dc:2b:41:3a:f9:a9:9a: 20:d2:aa:07:ae:fa:49:76:79:e8:8e:a5:22:bc:4f:1e:03:a4: 36:ec:44:ad:9a:da:c7:0e:e6:6e:56:a7:38:10:f1:e0:11:29: 79:2f:57:4d:96:33:8d:57:43:46:d7:04:8a:09:8a:a2:be:55: bd:9f:56:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx6iLaT39JTIbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDBhNWIzY2YtZmY1NS00ZTM3LTg3ZDAtYTI1ODhjYWIxOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbsh41+XSQieqKYxn8vRnTYvI9xEbE5bIkJJ IjiSDtbBMJQlytnUx1DE7kjf/plxudom/Kgz/uugO2Dzj0hTuCK1RqxhCwB76qUP 2pSOT05wuIV25qE+8C8vefR/McCdyJlUDtLtR0ixIf2YAxsrUP/K3X047E/i2jOX PTAs/MtBodbjNZOsEACKZIUo4vk7IdLeIFpttT6m2UtW3Bf3qWEsxQxgtuKBFe3N JtGvlZYtGTknx4CpHK94y1sFWkgYRTMe6oaXQoFNfraVAUkmfORmg/LyGnI9mGPI 8ngrE5izxbsktGe7aEbNVBiUuhismbybZkpHQ7LhClQlLDjzAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfsb3DVwyDQUCuDoMpcujUuCDy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmE3MzYzYTItODY0OS0z Yjk4LTkzYjUtNmY3MDQ5ODJhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDfWYu5fF4WY+aJIodvIEq1BISyAx0U8dmFfuo2JIE42NGQMS3OZn8Z kcatJikWHrrqFTxjT+KmWANO2vmwMxvWhj+nX6+iBMizxLas6EgsqxKvbW3FnMkc NEqD4831u5VqhJNqxoNT6YfQgsy6J5nmi99qNKKv0Bw/Q3drSRl7DzkxsQSZS7K3 U7vO9PGY0SHfi6x+JYak1T/zihl7XJi1nEd5BL9knD3X72zLHWdxsHeXd5bj9m4l mA+Yw5WY3CtBOvmpmiDSqgeu+kl2eeiOpSK8Tx4DpDbsRK2a2scO5m5WpzgQ8eAR KXkvV02WM41XQ0bXBIoJiqK+Vb2fVpw= -----END CERTIFICATE-----Generated at Mon Jun 30 13:50:11 2025 by rpki-client