$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa File: 0e54ccc7-f789-32f8-9918-79d5d323da7c.roa (raw, json) Hash identifier: TOiPPBuYOawbKjudpUDxicwHbDNcTmrR0hxuvDF+dCY= Subject key identifier: 9F:EC:69:C5:1B:AB:79:39:BA:DB:D4:41:1A:C3:84:A4:91:FD:95:13 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B0E415476325161600E658130 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 30215 IP address blocks: 139.138.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:54:76:32:51:61:60:0e:65:81:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=fb5fb723-e231-45a6-bb67-b8d9f296374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:d9:32:6d:c1:f3:8f:cc:06:e8:87:d0:6f: d8:aa:e7:62:0a:fa:55:20:ed:9a:2c:ae:ba:3c:45: 28:d3:27:ba:c9:2e:42:1f:e9:62:67:a9:04:1b:f8: d3:6c:49:e6:41:00:27:ab:39:e0:de:11:23:db:7c: 99:cb:dd:9a:c1:bd:e7:df:fa:25:d9:ec:00:96:9e: 17:df:f2:95:79:bd:62:15:e2:09:e6:27:b0:f7:83: 15:75:8b:ed:01:60:8a:4b:7d:ff:d9:2b:a1:a5:da: 79:85:d5:82:04:9b:4f:42:e8:77:13:a6:39:0f:b8: e3:c9:66:06:40:62:7c:5d:d6:71:48:b6:fb:e4:32: 7f:a3:40:bd:9f:b9:9f:26:21:42:1b:60:80:8c:e2: b4:6b:e4:21:af:42:55:0a:08:6f:f5:76:33:1f:88: 08:b1:5b:2f:61:6a:42:7d:e7:dc:c5:c0:5a:a7:71: 25:31:dd:af:c5:1f:05:d6:38:1c:e5:eb:ea:27:db: 55:db:f4:18:42:ac:c1:e8:e6:9b:ad:2a:16:19:9b: a4:33:1a:1e:89:f4:0e:8c:1a:a9:2e:bd:73:db:e7: d1:fd:11:f1:27:19:e0:d3:51:d8:54:bc:41:21:e0: 6a:ba:6e:2c:1c:c1:32:20:2e:39:fe:04:85:fc:12: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EC:69:C5:1B:AB:79:39:BA:DB:D4:41:1A:C3:84:A4:91:FD:95:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:87:2c:b2:92:78:81:4e:5b:a6:c3:ff:63:5b:90:d1:ae:d5: 7d:a0:9f:36:7e:aa:ab:12:94:fd:2c:22:67:ef:78:9f:21:0f: 8f:16:f8:01:19:c3:8c:da:d4:f9:3f:14:26:79:7e:29:f9:7d: 7d:b1:bf:51:26:78:e0:e9:aa:db:99:08:38:ad:90:6e:87:b8: 12:c1:b7:7f:2a:ea:50:6e:b5:40:4f:72:8f:72:c1:d5:e0:23: da:a0:19:51:f5:30:1c:3c:f3:05:41:6d:c2:d5:80:bc:0f:b4: ef:d4:38:cc:c8:af:8b:05:54:94:fb:1c:4f:3c:d8:39:ba:50: 19:1a:8a:c9:d4:49:ac:fb:41:d3:9b:ee:fb:4a:77:d5:d9:83: 65:5b:12:a6:9e:01:66:45:73:5b:35:3a:25:23:6e:04:27:cc: 15:8d:63:ce:de:76:c0:d3:60:ef:cb:08:9b:65:52:ca:44:40: be:8b:0c:f2:77:bd:4b:f3:53:fb:d0:a2:fd:ab:75:d0:04:d1: 39:4d:e2:29:29:e1:3a:24:9b:cf:ff:0b:cc:9a:e5:51:95:32: 70:b1:0f:fc:d0:c5:83:e4:61:18:a6:79:48:cf:4e:53:b7:bf: b0:9d:66:c2:e9:d1:db:7f:aa:f2:cd:00:b1:b4:51:6c:a2:4b: 68:a1:0f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVR2MlFhYA5lgTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmI1ZmI3MjMtZTIzMS00NWE2LWJiNjctYjhkOWYyOTYzNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfnZMm3B84/MBuiH0G/YqudiCvpVIO2aLK66 PEUo0ye6yS5CH+liZ6kEG/jTbEnmQQAnqzng3hEj23yZy92awb3n3/ol2ewAlp4X 3/KVeb1iFeIJ5iew94MVdYvtAWCKS33/2Suhpdp5hdWCBJtPQuh3E6Y5D7jjyWYG QGJ8XdZxSLb75DJ/o0C9n7mfJiFCG2CAjOK0a+Qhr0JVCghv9XYzH4gIsVsvYWpC fefcxcBap3ElMd2vxR8F1jgc5evqJ9tV2/QYQqzB6OabrSoWGZukMxoeifQOjBqp Lr1z2+fR/RHxJxng01HYVLxBIeBqum4sHMEyIC45/gSF/BJu3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/sacUbq3k5utvUQRrDhKSR/ZUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGU1NGNjYzctZjc4OS0z MmY4LTk5MTgtNzlkNWQzMjNkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ofMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCHLLKSeIFOW6bD/2NbkNGu1X2gnzZ+qqsSlP0sImfveJ8hD48W+AEZ w4za1Pk/FCZ5fin5fX2xv1EmeODpqtuZCDitkG6HuBLBt38q6lButUBPco9ywdXg I9qgGVH1MBw88wVBbcLVgLwPtO/UOMzIr4sFVJT7HE882Dm6UBkaisnUSaz7QdOb 7vtKd9XZg2VbEqaeAWZFc1s1OiUjbgQnzBWNY87edsDTYO/LCJtlUspEQL6LDPJ3 vUvzU/vQov2rddAE0TlN4ikp4Tokm8//C8ya5VGVMnCxD/zQxYPkYRimeUjPTlO3 v7CdZsLp0dt/qvLNALG0UWyiS2ihD3c= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:54 2025 by rpki-client