$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa File: 0e54ccc7-f789-32f8-9918-79d5d323da7c.roa (raw, json) Hash identifier: AB/Csh9TGtGgBxw99lFM4cIKmDxH8PaDSPf+f0laHtM= Subject key identifier: 96:E3:FF:E0:9C:89:03:01:D4:22:C8:26:FE:71:EE:BA:4A:34:F9:71 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A2D858D7A85FFA7BE2B84E700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 30215 IP address blocks: 139.138.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8d:7a:85:ff:a7:be:2b:84:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=245e2aca-fd01-4dd9-bfa5-de06cb2d7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:76:46:c3:8d:aa:46:2d:f6:4c:9b:00:a4: 18:9e:ae:24:20:d0:31:d6:16:a9:d4:ae:38:c8:96: 58:07:09:4d:ef:3f:bf:f8:39:89:72:a6:13:66:d5: 4a:c4:12:ec:3a:7f:28:bb:25:70:7a:47:89:4c:11: 76:d0:3e:20:ee:d0:60:01:e5:b2:53:2e:06:34:eb: e0:45:f5:60:2c:24:f0:98:d1:a5:be:b1:89:96:d2: 4d:8b:64:7c:f2:9e:00:c2:69:ae:10:c5:79:0b:83: 18:bb:19:05:7d:27:52:c4:11:04:10:ab:ac:3e:89: 8c:55:e7:e4:81:cc:b9:24:98:15:fd:5c:fc:be:a8: 24:37:3c:93:0d:51:61:d7:27:a7:33:aa:89:85:46: 1c:66:b0:55:9e:dd:04:6c:c8:0a:58:8c:2c:9b:38: b6:ba:73:8f:f2:2a:41:f4:21:c5:62:13:17:73:b0: f0:d1:1f:af:e9:5c:84:5c:e4:52:bd:0e:12:7c:d3: 26:13:36:b3:84:7b:06:6b:ed:bd:e6:30:6f:33:cd: 36:ed:61:c5:2f:f7:f8:be:da:47:07:ae:a9:3e:d6: e9:1c:ef:ce:5f:cc:72:1d:2b:61:32:a1:47:41:ab: 98:4c:a8:07:ad:0f:10:33:60:aa:3d:28:e6:b0:ac: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:FF:E0:9C:89:03:01:D4:22:C8:26:FE:71:EE:BA:4A:34:F9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:19:a7:d5:a5:27:a7:dc:85:8a:1d:73:10:b6:9c:02:8b:22: e7:2d:b8:f9:43:27:04:c6:57:88:c3:23:76:e5:32:60:d7:73: b5:df:b9:62:7b:54:bc:38:34:56:b5:f5:47:64:db:fa:64:8b: 2b:96:57:c5:49:78:bc:e6:ec:56:c4:62:2f:77:aa:e9:b6:3a: 2a:d0:98:fd:e4:ec:6c:67:07:c4:7f:0b:d2:2f:5d:ea:1e:34: 9d:4b:d7:67:26:16:83:50:2c:9c:84:de:46:a2:7b:bc:83:31: 25:7e:f5:29:ff:0f:e8:73:94:03:30:87:b9:dc:84:3f:7a:23: 4f:b5:31:54:d3:6b:8e:36:f1:c1:68:b3:aa:e6:8e:d4:7c:22: 35:72:56:3b:4d:31:57:23:00:69:3e:9c:17:76:b7:bc:d5:e0: fa:e5:30:45:55:89:7a:9c:23:0c:67:c5:20:81:ce:33:1b:35: ec:67:7b:bd:7a:53:f1:09:1f:74:42:ce:7c:3c:a9:20:3a:1c: 2c:89:61:44:03:be:78:29:56:37:96:df:26:d5:f7:f6:68:f3: bf:43:5e:5a:cd:5a:51:8c:fe:27:cc:4b:f1:f7:8c:68:25:b3: 1c:34:79:71:2d:96:fd:07:d5:51:87:52:68:50:27:8f:5c:56: 33:d9:1b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothY16hf+nviuE5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MjQ1ZTJhY2EtZmQwMS00ZGQ5LWJmYTUtZGUwNmNiMmQ3ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKh2RsONqkYt9kybAKQYnq4kINAx1hap1K44 yJZYBwlN7z+/+DmJcqYTZtVKxBLsOn8ouyVwekeJTBF20D4g7tBgAeWyUy4GNOvg RfVgLCTwmNGlvrGJltJNi2R88p4AwmmuEMV5C4MYuxkFfSdSxBEEEKusPomMVefk gcy5JJgV/Vz8vqgkNzyTDVFh1yenM6qJhUYcZrBVnt0EbMgKWIwsmzi2unOP8ipB 9CHFYhMXc7Dw0R+v6VyEXORSvQ4SfNMmEzazhHsGa+295jBvM8027WHFL/f4vtpH B66pPtbpHO/OX8xyHSthMqFHQauYTKgHrQ8QM2CqPSjmsKzDGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbj/+CciQMB1CLIJv5x7rpKNPlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGU1NGNjYzctZjc4OS0z MmY4LTk5MTgtNzlkNWQzMjNkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ofMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUZp9WlJ6fchYodcxC2nAKLIuctuPlDJwTGV4jDI3blMmDXc7XfuWJ7 VLw4NFa19Udk2/pkiyuWV8VJeLzm7FbEYi93qum2OirQmP3k7GxnB8R/C9IvXeoe NJ1L12cmFoNQLJyE3kaie7yDMSV+9Sn/D+hzlAMwh7nchD96I0+1MVTTa4428cFo s6rmjtR8IjVyVjtNMVcjAGk+nBd2t7zV4PrlMEVViXqcIwxnxSCBzjMbNexne716 U/EJH3RCznw8qSA6HCyJYUQDvngpVjeW3ybV9/Zo879DXlrNWlGM/ifMS/H3jGgl sxw0eXEtlv0H1VGHUmhQJ49cVjPZG4E= -----END CERTIFICATE-----Generated at Sun Jun 15 15:39:19 2025 by rpki-client