$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa File: 28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa (raw, json) Hash identifier: dUfqc3ODakxLevdEc6bsgz0dlk4qzFUJ//MQJAGwgFk= Subject key identifier: 38:C1:CF:A2:FF:F7:37:70:86:19:44:72:9B:58:93:D2:CF:2C:2A:21 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AA42B8B8924F49C294F363580 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16417 IP address blocks: 139.138.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8b:89:24:f4:9c:29:4f:36:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=afb5da72-94af-4c66-9886-e23f3d8adfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:0b:4d:bf:a3:80:92:26:50:4a:22:92:1c: 13:57:50:96:40:11:a9:f2:94:ed:e5:aa:dd:b4:d7: 24:62:73:62:79:00:3d:9d:d3:b5:3e:c4:3a:d5:3a: 85:f3:0d:68:84:bf:eb:a6:e3:82:61:91:3e:2e:1a: 8a:96:f3:72:0f:bf:eb:12:53:e4:ef:a9:0a:4a:9b: 56:45:0b:b8:e7:06:6f:8d:45:35:a6:14:9a:e7:d3: 78:e1:c6:61:18:47:92:3c:4a:d5:80:8a:b9:ee:d8: 73:69:b5:26:2e:6c:7c:29:29:5e:de:5d:db:9a:80: b9:ba:03:05:c5:3d:b3:5b:c1:1f:93:bf:a0:02:f7: 6d:88:14:84:d2:af:51:e8:48:29:7f:0d:dd:18:b6: 2a:4f:7b:67:ee:47:32:f4:82:c3:33:78:a6:b9:85: d8:d1:19:a1:4c:f0:b9:b9:d2:0e:7c:5d:59:5a:17: 5a:ab:4f:b5:04:3a:f0:e7:40:8c:65:0f:8c:aa:ca: 54:3c:da:16:3f:83:41:b9:b3:5c:a9:6e:69:32:59: f8:13:dc:35:52:4a:79:89:79:ff:de:b4:50:6f:ab: 9e:72:e3:d1:f1:55:17:0b:15:10:67:f5:9d:c2:73: a7:33:98:e9:10:1b:17:bc:78:5f:91:3f:3c:63:5c: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C1:CF:A2:FF:F7:37:70:86:19:44:72:9B:58:93:D2:CF:2C:2A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:03:e7:3c:03:b6:57:f1:17:ed:73:c8:58:54:66:79:17:7d: ff:4b:44:8a:24:22:44:60:a4:c3:5c:60:a1:27:31:a9:01:fb: 09:32:7d:54:9d:84:5e:1a:5a:08:3e:1e:8c:50:80:3f:78:39: ed:a4:da:92:dd:c8:45:19:66:99:f9:e4:89:28:92:5e:e7:1f: 90:61:8b:90:a6:2c:c2:e6:69:87:12:3f:df:91:be:58:8b:4f: b7:ff:1c:bb:f2:9b:87:ab:e1:cd:52:f8:5f:98:5c:1b:3f:9a: 01:a4:3b:16:36:35:cd:69:43:ec:05:ef:a8:86:f3:28:11:c4: 8b:d1:19:ed:97:e9:36:a3:39:39:25:eb:fa:7d:98:03:b1:42: 24:da:78:85:a3:fa:fc:65:b1:5d:7c:19:22:f3:ca:79:61:62: 88:5a:34:b9:21:8c:65:85:04:61:36:2b:5c:16:96:83:6a:d1: d4:32:3b:d6:0a:d0:5d:e8:2d:a5:3f:3c:98:7b:f2:65:59:bc: a2:6f:f5:d2:48:48:94:5c:67:8a:bb:fe:d0:e3:95:f5:cc:be: ad:d9:11:d3:3c:86:1a:5b:b9:9f:46:f3:16:59:f3:f6:0c:18: eb:ae:f6:ea:ed:a3:59:23:86:44:ed:37:45:80:71:95:a7:0b: 07:1c:ab:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4uJJPScKU82NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YWZiNWRhNzItOTRhZi00YzY2LTk4ODYtZTIzZjNkOGFkZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsugLTb+jgJImUEoikhwTV1CWQBGp8pTt5ard tNckYnNieQA9ndO1PsQ61TqF8w1ohL/rpuOCYZE+LhqKlvNyD7/rElPk76kKSptW RQu45wZvjUU1phSa59N44cZhGEeSPErVgIq57thzabUmLmx8KSle3l3bmoC5ugMF xT2zW8Efk7+gAvdtiBSE0q9R6Egpfw3dGLYqT3tn7kcy9ILDM3imuYXY0RmhTPC5 udIOfF1ZWhdaq0+1BDrw50CMZQ+MqspUPNoWP4NBubNcqW5pMln4E9w1Ukp5iXn/ 3rRQb6uecuPR8VUXCxUQZ/WdwnOnM5jpEBsXvHhfkT88Y1xW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjBz6L/9zdwhhlEcptYk9LPLCohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxOTU4OTgtM2ZmZi0z ZTdlLThjYzktM2FlYzZkZTBkZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsD5zwDtlfxF+1zyFhUZnkXff9LRIokIkRgpMNcYKEnMakB+wkyfVSd hF4aWgg+HoxQgD94Oe2k2pLdyEUZZpn55Ikokl7nH5Bhi5CmLMLmaYcSP9+RvliL T7f/HLvym4er4c1S+F+YXBs/mgGkOxY2Nc1pQ+wF76iG8ygRxIvRGe2X6TajOTkl 6/p9mAOxQiTaeIWj+vxlsV18GSLzynlhYohaNLkhjGWFBGE2K1wWloNq0dQyO9YK 0F3oLaU/PJh78mVZvKJv9dJISJRcZ4q7/tDjlfXMvq3ZEdM8hhpbuZ9G8xZZ8/YM GOuu9urto1kjhkTtN0WAcZWnCwccq8c= -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:16 2025 by rpki-client