$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa File: 6cf7fe11-676a-30a2-84a3-46c07752a767.roa (raw, json) Hash identifier: TRWGd6Aj3awgv5cKnPOGZFOuMCnBubQZED1H7OG5RY0= Subject key identifier: 44:78:3D:48:F0:44:40:AA:C3:38:98:4A:98:41:18:B4:09:38:26:B2 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AA42B8B7A7DCA39872A1F2A80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16417 IP address blocks: 139.138.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8b:7a:7d:ca:39:87:2a:1f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=fa43ae29-10c1-4dc0-847b-b3edec19de81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:e9:eb:6a:1f:57:cc:1f:04:82:d7:1e:55: 70:4e:4c:a6:af:28:df:cf:ed:ba:53:c1:5b:ae:8b: d1:51:36:70:01:c6:7f:9d:48:e7:ec:7b:e7:fa:bc: eb:de:c0:be:d1:7c:a4:ee:ab:40:0c:7d:d3:f2:6f: f8:1a:90:69:17:65:f3:e2:c3:34:a9:fa:10:e6:1f: 40:cf:50:d1:1c:fa:30:ae:ce:7d:6a:c0:4e:28:d6: 4f:17:f6:1b:a7:d3:a6:d2:2b:fe:fe:7e:dd:14:fe: 65:7b:01:ef:09:51:86:be:0b:72:f7:3a:44:77:da: de:a3:8b:33:0b:c9:13:d4:84:82:3b:73:d1:0e:be: 3c:5f:80:5d:bc:3a:99:2c:01:2f:28:db:b4:24:34: c5:fe:f8:2a:8d:d1:ef:b4:d0:58:8a:1b:2f:b9:63: 43:73:04:e7:0b:da:b1:a8:90:c6:0c:43:30:f0:24: d9:4e:41:30:98:c0:86:a8:2b:bc:c7:ed:b8:ce:0b: 3f:d2:fc:78:92:54:86:d0:9d:72:a4:27:51:39:60: e3:eb:89:3d:ea:e6:d3:40:b2:65:f5:1b:0a:7d:28: 5b:da:ab:99:12:2a:c3:fa:3d:4e:86:31:2e:80:cb: 45:89:f6:ff:83:1d:a2:1e:9d:29:5d:0e:59:0e:2e: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:78:3D:48:F0:44:40:AA:C3:38:98:4A:98:41:18:B4:09:38:26:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:95:ea:42:18:37:39:45:03:3d:76:18:6c:a6:67:ed:52:7d: d2:bc:a2:df:92:23:5d:51:52:5b:89:d7:5b:49:4e:63:65:d6: 3e:86:e5:c5:ac:86:ec:b8:9f:b5:b9:df:2a:0c:e7:11:61:d5: c1:3e:2c:0b:bd:9a:1b:79:7f:69:77:d4:48:dd:55:ed:c3:50: 74:91:b1:04:3c:00:0c:69:a9:f5:92:48:97:c9:47:83:4c:1b: f1:eb:83:7f:a6:c9:79:b9:ec:cb:86:f3:d6:9a:fb:2b:47:3b: a4:9e:e5:bf:db:f3:47:d7:68:be:1e:b2:be:23:ae:e3:da:12: c5:53:87:48:d3:b0:75:48:22:ab:1b:6f:19:79:da:fb:70:a2: 93:ee:c1:fb:42:3a:ab:22:2a:0e:43:79:f9:21:0a:c1:8b:5c: 52:85:dd:14:8f:a5:c9:74:f2:18:c6:b8:ab:6b:b3:4e:27:0e: 51:e7:03:58:38:5e:36:00:06:a7:69:46:a8:e6:57:4d:b5:13: 02:99:a1:4f:26:6e:90:e4:2f:e1:ec:8d:f8:07:9f:4b:5b:5e: 88:a3:43:8a:f2:94:cd:d7:7f:fb:73:cd:f0:55:b5:67:f4:59: b1:51:4a:90:24:52:11:9a:a9:2b:05:7a:2d:88:5a:a5:e3:2c: b2:89:d3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4t6fco5hyofKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmE0M2FlMjktMTBjMS00ZGMwLTg0N2ItYjNlZGVjMTlkZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsDp62ofV8wfBILXHlVwTkymryjfz+26U8Fb rovRUTZwAcZ/nUjn7Hvn+rzr3sC+0Xyk7qtADH3T8m/4GpBpF2Xz4sM0qfoQ5h9A z1DRHPowrs59asBOKNZPF/Ybp9Om0iv+/n7dFP5lewHvCVGGvgty9zpEd9reo4sz C8kT1ISCO3PRDr48X4BdvDqZLAEvKNu0JDTF/vgqjdHvtNBYihsvuWNDcwTnC9qx qJDGDEMw8CTZTkEwmMCGqCu8x+24zgs/0vx4klSG0J1ypCdROWDj64k96ubTQLJl 9RsKfShb2quZEirD+j1OhjEugMtFifb/gx2iHp0pXQ5ZDi7IlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER4PUjwRECqwziYSphBGLQJOCayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNmNmN2ZlMTEtNjc2YS0z MGEyLTg0YTMtNDZjMDc3NTJhNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmV6kIYNzlFAz12GGymZ+1SfdK8ot+SI11RUluJ11tJTmNl1j6G5cWs huy4n7W53yoM5xFh1cE+LAu9mht5f2l31EjdVe3DUHSRsQQ8AAxpqfWSSJfJR4NM G/Hrg3+myXm57MuG89aa+ytHO6Se5b/b80fXaL4esr4jruPaEsVTh0jTsHVIIqsb bxl52vtwopPuwftCOqsiKg5DefkhCsGLXFKF3RSPpcl08hjGuKtrs04nDlHnA1g4 XjYABqdpRqjmV021EwKZoU8mbpDkL+HsjfgHn0tbXoijQ4rylM3Xf/tzzfBVtWf0 WbFRSpAkUhGaqSsFei2IWqXjLLKJ0zQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:14:40 2025 by rpki-client