$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa File: 28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa (raw, json) Hash identifier: Hjhk6RX+7+KrZzG7oEE2mwpCbdyyHSdvH56fkiDYs/c= Subject key identifier: 47:F3:D3:6E:C3:8A:96:0E:60:B4:99:DF:79:24:AC:E7:64:4B:37:0E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849C4D4C943BFC45F12E20DE280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16417 IP address blocks: 139.138.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c9:43:bf:c4:5f:12:e2:0d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=982a74d9-85ef-4918-8c76-455bb3462364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:02:ab:94:ea:bd:e1:ec:a1:2b:46:21:35: e6:79:3a:1d:77:fa:1f:2b:e0:ba:b2:4c:93:66:89: fd:89:1a:06:57:86:bc:3b:5d:f4:80:c7:1b:74:a3: 20:67:87:99:97:59:cc:21:c6:35:f5:20:ea:9c:c2: da:db:fb:ce:d0:9d:e4:f9:3d:0b:16:4c:2f:4b:dd: 32:d9:54:d5:c8:7c:b9:23:f9:c4:ba:14:02:34:ea: c7:a2:27:ea:ae:0a:0f:ef:89:54:cc:c8:d7:eb:93: 40:9f:d6:74:f3:79:69:0f:f2:25:6d:8f:43:c5:09: a2:3c:e5:42:57:e4:68:35:dd:4d:31:95:28:be:84: 65:ec:da:13:fe:b1:68:ee:3d:71:65:c4:bf:be:90: 5d:3f:a9:ff:df:4c:94:85:23:7e:e7:b7:82:51:5f: 35:17:e5:4e:47:26:e1:3c:08:1e:55:2b:97:02:2f: 61:9e:9d:d8:07:02:8d:19:94:2f:7f:f8:38:32:c8: 60:87:a3:bf:96:ae:90:b0:9b:45:db:78:62:ab:63: 4f:48:5b:f5:d3:aa:19:f8:44:9d:00:d4:4c:8e:bc: 99:e7:81:b8:ee:14:01:44:e4:b3:02:1a:ed:0b:00: 1b:0e:c3:6e:c7:17:a5:80:05:37:13:0a:b2:16:fb: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:D3:6E:C3:8A:96:0E:60:B4:99:DF:79:24:AC:E7:64:4B:37:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2d:15:63:1d:e6:05:82:f6:6f:13:b7:7e:78:ea:fc:a6:06: 6f:4b:8e:1e:52:af:61:d8:6b:11:71:14:1e:6a:59:4e:4d:a6: de:51:b5:1a:59:66:c5:e0:9e:01:aa:61:72:0c:4a:86:85:dc: 42:2e:9c:2e:4c:01:28:d8:e2:d8:fe:06:5d:4a:c0:b2:e0:ef: e1:8b:1d:86:9b:18:d5:e6:66:7e:ee:e4:eb:7a:89:2e:80:65: d3:b6:87:d4:8d:e6:b9:8d:ee:47:6c:31:dc:eb:0f:04:d7:71: 7e:90:ec:c6:62:cb:e9:d4:cc:47:a9:4c:f0:25:e6:50:be:5e: de:53:51:aa:b9:8a:36:2a:b4:b4:be:7b:4c:d7:88:1e:3e:ec: 25:2b:d6:11:65:77:8f:e0:1a:27:10:58:09:29:8a:8b:7c:d3: cf:b3:d9:94:d9:eb:da:7e:d6:5f:59:d2:33:1c:c0:5c:a4:34: 23:4a:f6:69:99:a3:d3:e5:d5:f9:24:b0:4f:65:a3:6c:cc:da: eb:0d:69:ba:d6:28:3a:97:bb:f9:84:bd:bf:61:16:e2:df:6f: 57:80:9e:00:42:51:a5:f2:25:0b:fe:0e:af:fe:d1:5a:e8:b4: 24:89:4c:fb:54:43:57:76:27:ad:a4:a3:de:25:a9:5d:48:91: 77:24:81:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MlDv8RfEuIN4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OTgyYTc0ZDktODVlZi00OTE4LThjNzYtNDU1YmIzNDYyMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonMCq5TqveHsoStGITXmeTodd/ofK+C6skyT Zon9iRoGV4a8O130gMcbdKMgZ4eZl1nMIcY19SDqnMLa2/vO0J3k+T0LFkwvS90y 2VTVyHy5I/nEuhQCNOrHoifqrgoP74lUzMjX65NAn9Z083lpD/IlbY9DxQmiPOVC V+RoNd1NMZUovoRl7NoT/rFo7j1xZcS/vpBdP6n/30yUhSN+57eCUV81F+VORybh PAgeVSuXAi9hnp3YBwKNGZQvf/g4Mshgh6O/lq6QsJtF23hiq2NPSFv106oZ+ESd ANRMjryZ54G47hQBROSzAhrtCwAbDsNuxxelgAU3EwqyFvsVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfz027DipYOYLSZ33kkrOdkSzcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxOTU4OTgtM2ZmZi0z ZTdlLThjYzktM2FlYzZkZTBkZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKctFWMd5gWC9m8Tt3546vymBm9Ljh5Sr2HYaxFxFB5qWU5Npt5RtRpZ ZsXgngGqYXIMSoaF3EIunC5MASjY4tj+Bl1KwLLg7+GLHYabGNXmZn7u5Ot6iS6A ZdO2h9SN5rmN7kdsMdzrDwTXcX6Q7MZiy+nUzEepTPAl5lC+Xt5TUaq5ijYqtLS+ e0zXiB4+7CUr1hFld4/gGicQWAkpiot808+z2ZTZ69p+1l9Z0jMcwFykNCNK9mmZ o9Pl1fkksE9lo2zM2usNabrWKDqXu/mEvb9hFuLfb1eAngBCUaXyJQv+Dq/+0Vro tCSJTPtUQ1d2J62ko94lqV1IkXckgVQ= -----END CERTIFICATE-----Generated at Mon Jun 16 03:22:01 2025 by rpki-client