$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa File: 3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa (raw, json) Hash identifier: iye4fnOY2jTNlQCdfuT+K+5tnPnVmL3wbW3riy1JtJY= Subject key identifier: DE:24:13:42:0E:8B:E3:BE:57:EA:63:BE:14:E5:44:D3:BA:3A:12:A9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BB88D1C0FC5F649DE41934F50 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30238 IP address blocks: 139.138.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1c:0f:c5:f6:49:de:41:93:4f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7502bd2b-fa1b-4b48-a974-586f27e42ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:22:6d:36:02:5e:28:53:fb:6a:e0:73:63: ac:74:73:8b:41:3f:61:fa:dc:58:ad:de:29:09:0f: 27:e3:24:51:0b:fc:72:4a:c1:11:e6:7f:19:f4:75: f3:91:ea:34:2d:a9:29:4c:78:97:88:30:11:2e:b8: a2:25:72:ae:18:46:16:46:45:ec:83:42:e7:75:2d: e9:c8:58:af:e9:b7:5e:a2:4a:c6:4b:74:b3:24:84: 0a:3e:9d:24:d0:72:25:95:df:b0:9b:ad:66:96:41: 6e:c5:1d:c9:3a:02:b2:73:3d:bc:d3:d4:05:78:73: 49:1c:26:7d:4a:30:73:37:91:f7:21:b4:c5:4c:81: 3a:f0:9a:e6:2d:d0:be:1d:0b:25:ee:fa:fe:f0:09: 8c:04:f9:f9:e2:92:6e:0a:48:77:7e:e2:16:ca:83: c6:de:82:ad:7f:2d:90:92:ef:3e:80:de:34:05:4d: b1:c0:db:96:3c:dd:41:1e:d6:d2:ca:c9:ba:5e:ea: 0f:35:68:1f:a2:b2:08:2e:e4:7d:f5:1e:17:bb:5c: 6b:f7:14:af:2e:03:f0:f2:c3:a3:fd:5d:39:07:da: 4a:8b:7d:a0:78:6b:e1:b1:de:3e:6e:99:84:3e:eb: c4:d8:6b:4e:52:6b:7a:49:00:c8:89:7a:48:03:94: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:13:42:0E:8B:E3:BE:57:EA:63:BE:14:E5:44:D3:BA:3A:12:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:eb:43:97:39:de:39:1e:c2:f6:02:76:a7:7f:04:ee:2a:4f: 42:62:9d:55:ae:d4:de:12:ac:b1:fe:f5:5d:4c:3a:b3:dd:31: dd:15:4d:0b:ea:fd:f5:92:ff:c1:cf:f1:a9:cf:4e:b5:87:6e: 58:db:74:10:9b:ed:b7:6c:5b:af:4c:c5:ce:9c:2b:88:d7:25: f5:c5:69:9f:27:3b:76:2d:a1:0a:39:0d:76:b9:87:3d:05:4a: 89:2e:ac:39:81:c0:30:81:f1:64:d2:c9:d4:93:3c:ee:26:b0: b8:e7:a3:dd:00:9e:4a:ed:7f:7a:54:89:9f:01:c6:32:42:86: f6:79:2d:d2:36:6e:3c:bd:86:2c:c9:f5:3b:e3:b5:85:bc:3f: b2:2c:39:dc:8c:cf:9f:b3:2a:41:ae:be:dd:e9:ca:41:3f:60: fa:c9:8a:1b:43:b3:c7:2f:20:66:a3:4c:57:f3:de:b6:83:1f: 8c:9d:32:48:0f:e2:d6:2e:ea:b2:92:e0:d8:bf:4a:8c:e5:f5: 9f:b9:13:f1:e4:73:ad:05:fc:66:20:eb:5a:9f:9e:c1:d3:44: 54:b8:72:89:75:8a:92:c4:55:0b:2e:77:8a:ae:83:70:a8:fb: 70:dc:4d:47:19:db:07:6d:80:8c:ae:9f:d5:29:41:51:36:a7: d1:1a:29:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRwPxfZJ3kGTT1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzUwMmJkMmItZmExYi00YjQ4LWE5NzQtNTg2ZjI3ZTQyZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1cibTYCXihT+2rgc2OsdHOLQT9h+txYrd4p CQ8n4yRRC/xySsER5n8Z9HXzkeo0LakpTHiXiDARLriiJXKuGEYWRkXsg0LndS3p yFiv6bdeokrGS3SzJIQKPp0k0HIlld+wm61mlkFuxR3JOgKycz2809QFeHNJHCZ9 SjBzN5H3IbTFTIE68JrmLdC+HQsl7vr+8AmMBPn54pJuCkh3fuIWyoPG3oKtfy2Q ku8+gN40BU2xwNuWPN1BHtbSysm6XuoPNWgforIILuR99R4Xu1xr9xSvLgPw8sOj /V05B9pKi32geGvhsd4+bpmEPuvE2GtOUmt6SQDIiXpIA5TGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4kE0IOi+O+V+pjvhTlRNO6OhKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2U1ZTYyYjgtZjQ1Yi0z MDZkLTlhZTItMGFhZTNmNjYxNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4okMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHrQ5c53jkewvYCdqd/BO4qT0JinVWu1N4SrLH+9V1MOrPdMd0VTQvq /fWS/8HP8anPTrWHbljbdBCb7bdsW69Mxc6cK4jXJfXFaZ8nO3YtoQo5DXa5hz0F SokurDmBwDCB8WTSydSTPO4msLjno90Ankrtf3pUiZ8BxjJChvZ5LdI2bjy9hizJ 9TvjtYW8P7IsOdyMz5+zKkGuvt3pykE/YPrJihtDs8cvIGajTFfz3raDH4ydMkgP 4tYu6rKS4Ni/Sozl9Z+5E/Hkc60F/GYg61qfnsHTRFS4col1ipLEVQsud4qug3Co +3DcTUcZ2wdtgIyun9UpQVE2p9EaKdI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:46 2025 by rpki-client