$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa File: 3002eb1b-37d6-3480-85a8-73539969148e.roa (raw, json) Hash identifier: Oe+c6WZuZhXMyIXWI6tv3VuqGRIdMmjZ2KTjkCSjCUY= Subject key identifier: 9F:99:A0:10:52:57:4F:71:A6:BA:50:2B:92:05:DA:5F:56:B7:55:DE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BB88D1BFB2E444E23D4132FE0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30238 IP address blocks: 139.138.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1b:fb:2e:44:4e:23:d4:13:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=cf2a6d81-3517-42af-b653-1870367d16d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:b4:42:70:a8:cf:ac:b3:b2:0a:03:1b:94: 4a:51:b6:0a:5b:0c:96:55:4b:9b:5d:fe:19:b4:cb: 74:b9:36:9e:91:64:fe:2a:4d:b0:12:70:08:ee:a3: 08:3f:af:80:cc:28:6c:83:65:e4:2f:9b:d9:13:53: 61:9e:2c:30:46:ac:8d:4e:30:f9:9d:88:b8:77:49: fd:da:ac:16:2d:18:94:05:3b:29:1a:7c:d9:8d:ee: 9c:99:d7:c9:bf:c7:fe:9e:b6:bb:c4:89:d8:64:ef: 09:6d:fc:3e:8e:e4:27:ec:11:ff:2e:48:ed:76:63: f7:00:f5:20:42:63:ca:5e:7b:83:2f:b6:84:dd:35: 06:96:55:ee:4e:b4:1b:cd:ca:34:f2:d6:ae:3c:96: c0:c9:9b:f9:f4:e1:06:29:ec:06:32:23:95:f6:f2: 4a:3c:92:a1:1e:1b:ef:c6:91:f2:cd:91:14:0e:63: fe:d1:fd:9f:e3:0b:96:63:d1:3c:f2:bd:59:87:67: a3:15:c7:3c:12:f8:5e:b4:90:75:38:5e:31:67:1c: a2:21:c5:c0:d3:b8:d8:5e:46:d6:0a:be:92:46:6d: f9:42:5f:63:11:4d:c2:a0:a8:d5:75:b7:e9:98:f8: e6:ee:0d:c5:eb:61:79:7d:1a:d9:6c:26:84:ba:b4: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:A0:10:52:57:4F:71:A6:BA:50:2B:92:05:DA:5F:56:B7:55:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:05:d3:c5:62:4c:dd:f9:9f:82:0c:08:97:9c:5f:23:78:20: cd:2f:ce:57:bf:87:43:96:25:ff:cf:a4:34:f3:b2:a9:08:64: a4:84:17:25:ee:fc:a8:91:70:10:9e:91:dc:93:14:8b:aa:04: 64:f2:00:6f:6e:33:7d:1c:1a:3b:86:b8:77:39:7b:c2:77:78: 37:9a:cb:e0:4f:e4:75:e6:30:39:21:9f:db:88:63:1b:15:53: 7c:c5:a8:ba:cd:26:5d:95:c6:4a:fc:64:0b:c3:54:16:48:20: e1:9a:61:42:e6:5a:74:68:2c:bc:28:29:8c:83:66:3a:12:4e: ae:e0:a7:88:20:6c:9a:f1:e4:33:d1:8a:4d:d6:8a:0f:00:be: 1f:75:79:91:69:ca:57:6d:32:df:f8:b8:c0:9a:2f:3c:9b:f0: a7:88:e9:e7:a4:26:f0:d3:d2:7d:9f:ac:15:00:8d:d9:48:00: a2:f1:6e:10:05:83:f1:72:dd:35:1c:86:72:3e:dc:53:05:7d: 60:a6:ef:9c:8b:df:0c:93:bb:68:37:eb:29:b0:ba:33:d4:75: b5:72:5f:df:ea:79:d8:29:2a:0e:ff:cf:54:62:2d:1b:68:12: c7:70:94:4c:1a:19:e0:9b:20:0b:ac:6d:3e:5b:c4:68:9a:83: 35:0e:91:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRv7LkROI9QTL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2YyYTZkODEtMzUxNy00MmFmLWI2NTMtMTg3MDM2N2QxNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliO0QnCoz6yzsgoDG5RKUbYKWwyWVUubXf4Z tMt0uTaekWT+Kk2wEnAI7qMIP6+AzChsg2XkL5vZE1NhniwwRqyNTjD5nYi4d0n9 2qwWLRiUBTspGnzZje6cmdfJv8f+nra7xInYZO8Jbfw+juQn7BH/LkjtdmP3APUg QmPKXnuDL7aE3TUGllXuTrQbzco08tauPJbAyZv59OEGKewGMiOV9vJKPJKhHhvv xpHyzZEUDmP+0f2f4wuWY9E88r1Zh2ejFcc8EvhetJB1OF4xZxyiIcXA07jYXkbW Cr6SRm35Ql9jEU3CoKjVdbfpmPjm7g3F62F5fRrZbCaEurTdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+ZoBBSV09xprpQK5IF2l9Wt1XeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzAwMmViMWItMzdkNi0z NDgwLTg1YTgtNzM1Mzk5NjkxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkF08ViTN35n4IMCJecXyN4IM0vzle/h0OWJf/PpDTzsqkIZKSEFyXu /KiRcBCekdyTFIuqBGTyAG9uM30cGjuGuHc5e8J3eDeay+BP5HXmMDkhn9uIYxsV U3zFqLrNJl2Vxkr8ZAvDVBZIIOGaYULmWnRoLLwoKYyDZjoSTq7gp4ggbJrx5DPR ik3Wig8Avh91eZFpyldtMt/4uMCaLzyb8KeI6eekJvDT0n2frBUAjdlIAKLxbhAF g/Fy3TUchnI+3FMFfWCm75yL3wyTu2g36ymwujPUdbVyX9/qedgpKg7/z1RiLRto EsdwlEwaGeCbIAusbT5bxGiagzUOkeo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:34 2025 by rpki-client