$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa File: 3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa (raw, json) Hash identifier: Aotric9sAN35dz9gsAII5k+jPmvXw6/qPKw0yy8q9i8= Subject key identifier: 31:77:B4:97:5D:14:AC:85:93:D8:C6:44:8C:61:33:91:7D:97:7E:B9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BB88D1C23526C455686526A80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30238 IP address blocks: 139.138.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1c:23:52:6c:45:56:86:52:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4b13265e-eaa5-412c-9dc3-6a9b367d7524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:37:10:39:a5:cd:90:63:29:d9:6f:78:ca: 9a:07:5f:a8:fb:4f:1e:4a:65:c6:39:0b:31:71:59: 77:dc:87:61:38:ad:48:ec:ef:61:c7:0c:b0:3d:05: a9:dd:0b:a9:49:12:19:38:3e:8a:d9:b9:3c:24:4e: 85:6d:e2:b4:f0:ff:86:b6:a2:bd:b7:cc:7d:88:1f: 2d:35:e7:41:ac:b8:29:52:8f:70:66:01:54:dd:ce: 88:b5:11:6c:c7:c0:44:c8:c9:07:fb:ce:9e:a8:93: 26:3e:16:aa:de:c0:b2:73:2e:ce:5d:22:dc:82:0c: 79:2c:d3:2f:f0:14:d9:01:e2:7e:3f:ad:26:12:43: 70:95:34:70:ae:7a:16:53:a5:9f:dd:1f:73:ea:a4: dc:e5:ab:92:d1:bd:d9:c7:ed:df:0f:53:7b:2f:ca: e3:38:18:9e:e2:d0:89:98:85:53:58:aa:46:92:b1: 37:fe:22:f3:7a:ad:e0:18:2a:36:81:6c:4f:2b:ca: d7:3a:25:31:2f:2d:2d:72:da:19:78:f0:68:55:a2: f3:31:45:b1:c6:b4:d2:61:81:02:e1:15:96:91:95: 42:99:dd:bd:32:fc:4a:17:78:7d:41:e6:57:87:bf: 04:10:38:95:e4:98:bd:f9:91:f3:00:fa:c0:5f:42: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:B4:97:5D:14:AC:85:93:D8:C6:44:8C:61:33:91:7D:97:7E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:04:15:d7:20:30:a0:00:cf:ed:74:41:24:d4:d6:f4:9e:a5: e1:47:18:dd:72:bc:e2:e7:c0:be:61:ad:09:f1:b4:83:ad:8b: 41:f0:74:df:e8:2e:9e:f7:34:1a:fc:55:04:2a:e3:73:97:70: 20:b0:cc:42:41:f7:a1:08:0f:f0:4d:b8:e7:ea:90:3e:2c:83: 6f:10:09:79:14:9b:c2:a5:86:41:17:f0:e7:f8:0a:d1:76:58: ca:6a:ba:ac:7b:81:ab:7f:6c:a0:5a:62:e4:a3:f3:ef:f7:86: bc:d8:3d:9f:0c:9f:0a:a3:c7:30:e3:b0:84:7e:23:ae:69:5b: 27:08:fe:a2:05:3e:a8:d8:c7:b7:4e:f5:05:21:fe:90:51:5a: 2d:47:17:d6:20:91:23:e5:0a:b7:ee:fd:5f:21:bb:d5:52:81: 5d:f2:fb:00:8a:91:b1:9e:16:59:2d:26:de:64:ad:f9:f7:dd: eb:5d:4b:aa:4b:96:50:ba:26:52:bc:a7:09:16:6e:2b:a9:81: 5b:68:bd:03:9c:c8:2f:6b:89:f1:97:37:e1:ea:14:ef:ff:19: ca:aa:47:39:d0:b4:f2:3d:df:04:02:b3:d0:0e:fb:66:41:fc: b4:92:9e:06:01:af:8c:a8:12:e8:69:4e:d7:7b:b0:dc:85:b7: b8:e0:09:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRwjUmxFVoZSaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGIxMzI2NWUtZWFhNS00MTJjLTlkYzMtNmE5YjM2N2Q3NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6w3EDmlzZBjKdlveMqaB1+o+08eSmXGOQsx cVl33IdhOK1I7O9hxwywPQWp3QupSRIZOD6K2bk8JE6FbeK08P+GtqK9t8x9iB8t NedBrLgpUo9wZgFU3c6ItRFsx8BEyMkH+86eqJMmPhaq3sCycy7OXSLcggx5LNMv 8BTZAeJ+P60mEkNwlTRwrnoWU6Wf3R9z6qTc5auS0b3Zx+3fD1N7L8rjOBie4tCJ mIVTWKpGkrE3/iLzeq3gGCo2gWxPK8rXOiUxLy0tctoZePBoVaLzMUWxxrTSYYEC 4RWWkZVCmd29MvxKF3h9QeZXh78EEDiV5Ji9+ZHzAPrAX0Lv8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF3tJddFKyFk9jGRIxhM5F9l365MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2JjOGU1NWQtNWNlYS0z NWQxLThjZDUtNjFhODc0MDQwYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4olMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIEFdcgMKAAz+10QSTU1vSepeFHGN1yvOLnwL5hrQnxtIOti0HwdN/o Lp73NBr8VQQq43OXcCCwzEJB96EID/BNuOfqkD4sg28QCXkUm8KlhkEX8Of4CtF2 WMpquqx7gat/bKBaYuSj8+/3hrzYPZ8MnwqjxzDjsIR+I65pWycI/qIFPqjYx7dO 9QUh/pBRWi1HF9YgkSPlCrfu/V8hu9VSgV3y+wCKkbGeFlktJt5krfn33etdS6pL llC6JlK8pwkWbiupgVtovQOcyC9rifGXN+HqFO//GcqqRznQtPI93wQCs9AO+2ZB /LSSngYBr4yoEuhpTtd7sNyFt7jgCY8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:38 2025 by rpki-client